Re: Proper use of Wireless Cable Modem/Router w/ SBS

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Raphael Whitfield [MSFT] (a-chrwhi_at_online.microsoft.com)
Date: 03/10/04


Date: Wed, 10 Mar 2004 18:12:40 GMT

When you place a router into Gateway mode, it no longer provides any real
security layers to your network. If you wireless router is not secure, it
actually poses a greater security risk as others might be able to sniff
your connection. SBS 2003 Premium contains ISA (Internet Security and
Acceleration) which can protect your network extremely well. More
documentation on what ISA server can do for you can be found at the below
website including documentation on setup and best practices. I hope this
information is helpful.

http://www.microsoft.com/isa

Raphael Whitfield,

Microsoft Corporation

 

Get Secure! - www.microsoft.com/security

 

=====================================================

When responding to posts, please "Reply to Group" via

your newsreader so that others may learn and benefit

from your issue.

=====================================================

 

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
>From: "Sean Rector" <seanrinva_NO@SPAM_yahoo.com>
>References: <usBziJ2$DHA.2212@TK2MSFTNGP10.phx.gbl>
<0gj840pnd3dkkv1qjogut2kev9olhjug91@4ax.com>
>Subject: Re: Proper use of Wireless Cable Modem/Router w/ SBS
>Date: Tue, 2 Mar 2004 07:07:44 -0500
>Lines: 65
>X-Priority: 3
>X-MSMail-Priority: Normal
>X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
>x-mimeole: Produced By Microsoft MimeOLE V6.00.2800.1165
>Message-ID: <e#tJ67EAEHA.916@tk2msftngp13.phx.gbl>
>Newsgroups: microsoft.public.windows.server.sbs
>NNTP-Posting-Host: ip68-10-96-81.hr.hr.cox.net 68.10.96.81
>Path:
cpmsftngxa06.phx.gbl!TK2MSFTNGXA06.phx.gbl!TK2MSFTNGXA05.phx.gbl!TK2MSFTNGP0
8.phx.gbl!tk2msftngp13.phx.gbl
>Xref: cpmsftngxa06.phx.gbl microsoft.public.windows.server.sbs:46805
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>
>What I'm going to do instead is connect the private side nic to port 1 of
>the DI624, keep DHCP off on the DI624, and that should allow my server to
be
>the DHCP server for the wired and wireless workstations.
>
>I'm checking with DLink to verify whether the DI624 can be used as a simple
>gateway instead of as a router.
>
>"Jack Ping" <jack@(antispam)techexpress.ca> wrote in message
>news:0gj840pnd3dkkv1qjogut2kev9olhjug91@4ax.com...
>> It does not make sense to connect internal NIC to DI624 WAN port, the
>> server can not act as a DHCP server for the workstations behind DI624.
>>
>> Pls reference to the following drawing, working in my lab.
>>
>>
>> --------------------------
>> | Cable Modem |
>> --------------------------
>> |
>> |
>> ================
>> | Wireless Router | <---- disable DHCP
>> ================
>> | | __
>> | | | \
>> ________ | \
>> | SBS | | \
>> |_______| | \
>> | | \
>> | | \
>> *********************** \
>> | Switch/HUB | \
>> *********************** \
>> | | | | __\|
>> | | | |
>> Wired Workstations Wireless Workstaions
>>
>>
>>
>> On Mon, 1 Mar 2004 02:54:10 -0500, "Sean Rector"
>> <seanrinva_NO@SPAM_yahoo.com> wrote:
>>
>> >I'd like to not plug my server directly into the cable modem, and keep
>that
>> >extra layer of protection that the Wireless router gives me.
>> >
>> >Is it possible?
>> >
>> >Here's what I propose:
>> >
>> >Cable Modem - WAN port of DI-614+ - LAN Port to NIC1 in Server (Public)
>> >NIC2 in Server (Private) - WAN port of DI-624
>> >
>> >Turn off wireless access in DI-614+, and turn off DHCP in DI-624 -
>shouldn't
>> >the server then become the DHCP server for wired and wireless
>connections?
>> >
>> >Please CC reply to srectorNO@SPAMcompute-ease.com
>> >
>> >Thanks a bunch, guys!
>> >
>>
>
>
>



Relevant Pages

  • Re: Secure file and folder permissions
    ... router, yada, yada, yada. ... maybe some advanced security techniques were in order. ... can I ask what procedure you follow to secure ... Use a password on your Windows account and make sure it is ...
    (microsoft.public.windowsxp.security_admin)
  • RE: Cable Vs. DSL
    ... Well, its likely that he is using a Linksys or D-link NAT enabled router, ... yes your clients are pretty secure as long as you are not port ... >is what the clients are seen to have from the internet. ... NAT basically provides you with about as much security as your mp3 player, ...
    (Security-Basics)
  • RE: NT/2000 vs Unix based Web Servers
    ... but our ISP owns our T1 router and they control the only ... certian ports as it's part os their "security guidelines", ... NT/2000 vs Unix based Web Servers ... do not come secure 'out of the box'. ...
    (Security-Basics)
  • semi-newbie question re firewalls/routers
    ... I wanted to secure my two-PC LAN at home from basic random security threats. ... So I went out and bought the SMC Barricade 4-port router w/printserver. ... Or is the "cigar ...
    (comp.security.firewalls)
  • RE: Cant enter 2 XP machines into a Workgroup
    ... Firewalls like NIS modify Windows own security files. ... If a comsumer level router like those of Linksys and Netgear ...
    (microsoft.public.windowsxp.network_web)