Re: A little off topic, but ...

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Nick Malik (nickmalik_at_hotmail.nospam.com)
Date: 10/08/04


Date: Fri, 08 Oct 2004 15:04:14 GMT

First off, there is no reason why the development network shouldn't connect
to the web.
It doesn't have to connect to the main network in order to connect to the
web.

Secondly, if you are using a Microsoft network (and I assume you are,
considering that you posted here :-),
then suggest to IT that they can set up the dev network so that the main
network does not trust it.

Then, code developed on the dev network cannot access resources on the main
network.

A firewall can prevent most TCP ports from passing through. Nice thing
about a firewall: you can set it up so that connections that originate in
the main network can get a response from the dev network. You can then use
terminal server from your desktop to drive the server, install software, do
other work...while the dev server cannot host code that can access the main
network. Firewalls are not very expensive, either.

The "Network Security stick" has swung too far in your organization, my
friend. There are better ways to secure the network than to simply assume
that developers cannot be trusted.

--- Nick

"Tim Gallivan" <nospampleasetim.gallivan@edu.gov.on.ca> wrote in message
news:OrGD3ITrEHA.4004@TK2MSFTNGP10.phx.gbl...
> I'm a developer for a government ministry (I'll let you guys figure out
the
> rest). The IT "powers-that-be" have stipulated that all software
development
> be performed on a separate network that in no way connects to the "main"
> network - ever. IT's blanket reason is "network security". These separate
> networks cost a lot of money - a second database server, app server and a
> couple of development machines, they are unpatchable (can't connect to the
> web to get updates), you've got to burn a cd everytime you bring out a new
> version, and burn a DVD to move big database updates back and forth. OK,
> enough griping!
>
> Would any of you be able to point me at some resources dealing with
software
> development strategies, or even personal examples of how they do it where
> you work? I need to come up with a strategy for my department.
>
> Thanks in advance,
> Tim Gallivan
> I know I'm a great teacher because when I give a lesson, the person never
> comes back.
>
>



Relevant Pages

  • << SBS News of the week - Sept 26 >>
    ... And he points to the info you need to put the file on the server in the ... at the network perimeter. ... The Symantec Firewall/VPN and the Gateway Security ... by the firewall at risk. ...
    (microsoft.public.backoffice.smallbiz)
  • << SBS News of the week - Sept 26 >>
    ... And he points to the info you need to put the file on the server in the ... at the network perimeter. ... The Symantec Firewall/VPN and the Gateway Security ... by the firewall at risk. ...
    (microsoft.public.backoffice.smallbiz2000)
  • << SBS News of the week - Sept 26 >>
    ... And he points to the info you need to put the file on the server in the ... at the network perimeter. ... The Symantec Firewall/VPN and the Gateway Security ... by the firewall at risk. ...
    (microsoft.public.windows.server.sbs)
  • Re: need help re. office network install
    ... > and their network is a mess, the result of years of neglect. ... they have a gateway server w/ no special ... > firewall rules on it, they have a large DMZ that serves no purpose ... install anymore software on the firewall machine than is absolutely ...
    (comp.os.linux.networking)
  • Re: oops again
    ... open on the Firewall, and the default should be none. ... Since you intend to install IIS purely as a test server for your ASPX pages ... Make sure that IIS is only listening on the local network (192.168.x.y ...
    (microsoft.public.inetserver.iis)