Firewall Wizards mailing list archives

Re: shiva lanrover


From: Patrick Darden <darden () armc org>
Date: Thu, 14 Sep 2000 10:46:56 -0400 (EDT)


Howdy!

We have two of the big ones (dual PRIs with digital modems), and are very
happy with them.  Granted, it took a long time to get them to the point
where they were functional and reliable, but that is more a matter of who
we purchased them from (we spent beaucoup bucks so they would install and
configure and integrate them properly.)  

We especially like the dial out ISDN capability this gives everyone on our
network (anyone with the proper privs).

I recommend you put them in your DMZ, because even though there are no
security issues peculiar to them they are an ingress/egress avenue and
should be strictly controlled.


-- 
--
--Patrick Darden                Internetworking Manager             
--                              706.354.3312    darden () armc org
--                              Athens Regional Medical Center


On Wed, 13 Sep 2000, hermit1 wrote:

Someone at my company wants to intall a Shiva LanRover box (8 ports, no 
waiting) for dial-up access either behind the firewall or on a DMZ.  I 
think this is a 'fine idea', but I want to put it outside the 
firewall.  For some reason they don't want to go the ISP route.

I searched various places and found only one description of a security 
problem - by default there is a root account on the box without a 
password.  Does anyone know of any other problems with this gadget?

Thanks,
hermit1



_______________________________________________
Firewall-wizards mailing list
Firewall-wizards () nfr net
http://www.nfr.net/mailman/listinfo/firewall-wizards


Current thread: