RE: Security of satellite links into an organisation

["Wigg, Guy G" <GWigg () mail sbic co za>]

We have branches that are geographically wide spread. Since bandwidth is so
expensive here we only have ISP links in one location. We don't want surfing
stuff coming across our WAN links because of the expense and hence the
satellite idea, the requests going across the WAN will be minimal.

Guy

-----Original Message-----
From: Calabrese, Christopher [mailto:christopher_calabrese () merck com]
Sent: Thursday, January 25, 2001 7:45 PM
To: 'Wigg, Guy G'
Subject: RE: [fw-wiz] Security of satellite links into an organisation


Umm, why not just put this box outside your firewall?

-----Original Message-----
From: Wigg, Guy G [mailto:GWigg () mail sbic co za]
Sent: Thursday, January 25, 2001 9:43 AM
Subject: [fw-wiz] Security of satellite links into an organisation


Hi all

Bandwidth in South Africa is expensive and the response times are not at all
that great. We have decided that a good solution for surfing the net is via
satellite. One of the SA ISPs offer this service. This would be the basic
set-up, they supply a proxy (MS proxy) that they propose sits on the
organisation's backbone network. 

The http request exits the organisation via our landlines to a proxy at the
respective ISP. On exiting we obviously control the connection via the
firewall we have in place. The ISP then sends the return WebPages to the
organisation via the satellite dish. My question is what is the security
risk of this set-up? We now have an unprotected pipe coming into the
network. Agreed the hacker wouldn't get any responses since the dish can
only receive (the responses would blocked by the land FW infrastructure).
What risk would we be putting ourselves at?

Any feedback on this would be greatly appreciated.

thanks
Guy


_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://www.nfr.com/mailman/listinfo/firewall-wizards
_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://www.nfr.com/mailman/listinfo/firewall-wizards