Re: Dual NIC setup safe?

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



In article <pjqmf3dhc368u4e2e3mah2u4lhqvqg6r8n@xxxxxxx>,
Yarddog@xxxxxxxxxxx says...
But, I guess what I"m asking, and I didn't ask it clearly
enough, is it a bigger risk to NOT use a router in front of the WAN
NIC on SBS 2003. Even though I'll have the firewall turned on and am
NATting the WAN NIC with the LAN NIC, is safe?

The solution you describe is the MS Approved solution, that does not
make it safe and it's certainly NOT CERT APPROVED.

So, if your customer really wants that many IP, get them an APPLIANCE
that can handle that many IP - there is no reason to cheap out and risk
compromise for a couple hundred $ - they will pay far more than the cost
of an appliance for the first instance of compromise, exploit, malware,
etc... than the cost of the device.

My company has been designing networks since the late 70's, we've never
had a compromised network that we manage, never, and I would never
connect a server directly to the internet, it's not worth the risk.

--

Leythos
- Igitur qui desiderat pacem, praeparet bellum.
- Calling an illegal alien an "undocumented worker" is like calling a
drug dealer an "unlicensed pharmacist"
spam999free@xxxxxxxxxx (remove 999 for proper email address)
.



Relevant Pages

  • Re: WARNING: Actual bicycle racing content!
    ... What I wan to know is why he is willing to take such a massive ... risk on a non-steel fork on his bike? ...
    (rec.bicycles.racing)
  • Re: Router Security
    ... It depends whether it has firmware that is subject to exploits, ... you have admin enabled for WAN. ... But usually no risk. ... Prev by Date: ...
    (comp.dcom.xdsl)
  • Re: [Full-disclosure] SMS Banking
    ... " It looks like Craig has defined parts of his model too narrowly, ... compromise of the SMS system and the user authentication methods, ... least one variant of risk management modelling and mitigation (even if it is ... baseline the security of the system into the longer term. ...
    (Full-Disclosure)
  • Re: Delete File
    ... Reformatting the system without confirming there is a ... every compromise requires a complete reinstall. ... Sure, relying on AV software to remove an infection is a risk, ... Formatting removes all the evidence of the attack. ...
    (microsoft.public.security)
  • Re: Delete File
    ... reformatting is the appropriate action if there is a doubt of a compromise ... Sure, relying on AV software to remove an infection is a risk, ... Formatting removes all the evidence of the attack. ... Do home users always need to be ...
    (microsoft.public.security)