Cisco Pix Firewall Question

["Sarazen, Daniel" <dsarazen () UMASSP EDU>]

Hi All,

 

I have a department running a Novell 6.5 network protected by a Cisco
Pix Firewall. 

 

The Department:

 

*       Does not have a certified Firewall Tech to review the rule set

*       Has not signed up for an Upgrade Service for the firewall

*       Does not have a Deny Default on the firewall

*       Has no IDS

 

My firewall knowledge is limited, but does anyone else see red-flags
here and, given the limited amount of information I've provided, do you
have any recommendations for the department?

 

Many Thanks,

 

 

:: Daniel Sarazen, Information Technology Auditor
:: University Internal Audit
:: University of Massachusetts President's Office

:: 508-856-2443

:: 781-724-3377 Cell
:: 508-856-8824 Fax
:: Dsarazen () umassp edu


University of Massachusetts : 333 South St. : Suite 450 : Shrewsbury, MA
01545 : www.massachusetts.edu <http://www.massachusetts.edu/>