Re: When is a firewall not a firewall?

[Gary Flynn <flynngn () JMU EDU>]

Hahn, Jacob wrote:

> IP Security policies that are built in to the local and group policies may
> provide what you are looking for.
> The real beauty of the group policy based IP Security policies is that can
> be centrally managed via active directory.

I'm experimenting with them now and they leave a period of vulnerability
during boot too. Several seconds just before the logon prompt, a specifically
blocked port (135) was reported open by nmap.

This was done using local policy (i.e. ipsecpol -w REG)

I doubt group policy would be any different.

--
Gary Flynn
Security Engineer - Technical Services
James Madison University

Please R.U.N.S.A.F.E.
http://www.jmu.edu/computing/runsafe

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.