AW: Network Segregation to prevent spread of malware

["Mohammad Ilyas" <m.ilyas () itsecc com>]

Hi Tom,
To prevent cross communication VLANs will be an appropriate solution.  If it
has to be on the same network then segregation with firewalls will at least
reduce risk to minimum.

ilyas



-----Ursprüngliche Nachricht-----
Von: listbounce () securityfocus com [mailto:listbounce () securityfocus com] Im
Auftrag von Jerry Bell
Gesendet: Mittwoch, 23. Januar 2013 13:07
An: tomright006 () gmail com
Cc: security-basics () securityfocus com
Betreff: Re: Network Segregation to prevent spread of malware

Hi Tom,

The answer is 'it depends', but probably no. If you are talking about a
classic company network and dividing workstations into separate networks to
prevent cross contamination, you have to consider the pivot points for most
malware - email, file shares, etc, which can still allow malware to
propagate between networks even if no traffic is allowed directly between
them. Some kinds of malware, notably worms who propagate directly from one
system to another via some kind of remotely exploitable vulnerability, would
be contained by network segmentation, however those sorts of events are
becoming increasingly rare (however when they do happen, they tend to be big
events). 

Jerry

Sent from my iPhone

On Jan 22, 2013, at 5:33 PM, tomright006 () gmail com wrote:

> Hello All,
>
> I need few tips on Network Segregation to prevent spread of Malware. Can I
avoid Malware spreading from one network segment to another just by
segregating network with access list or firewalls?
> Thanks,
>
> Tom
>
> ----------------------------------------------------------------------
> -- Securing Apache Web Server with thawte Digital Certificate In this 
> guide we examine the importance of Apache-SSL and who needs an SSL
certificate.  We look at how SSL works, how it benefits your company and how
your customers can tell if a site is secure. You will find out how to test,
purchase, install and use a thawte Digital Certificate on your Apache web
server. Throughout, best practices for set-up are highlighted to help you
ensure efficient ongoing management of your encryption keys and digital
certificates.
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be4
> 42f727d1
> ----------------------------------------------------------------------
> --

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate In this guide we
examine the importance of Apache-SSL and who needs an SSL certificate.  We
look at how SSL works, how it benefits your company and how your customers
can tell if a site is secure. You will find out how to test, purchase,
install and use a thawte Digital Certificate on your Apache web server.
Throughout, best practices for set-up are highlighted to help you ensure
efficient ongoing management of your encryption keys and digital
certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727
d1
------------------------------------------------------------------------


------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------