Re: Firewall and ISA

I get your point. By now i am convienced that my network needs more security
than a NAT router.
One question about your remark concerning the wireless: as it is a router/AP
when i install ISA on the SBS wireless clients will be on the wrong side of
the firewall (this is maybe good since intruders connecting wirelessly are
still not in the network). I guess that the solution is giving authorized
laptop a VPN connection to ISA.
Am i right?

Itan

"Leythos" <void@xxxxxxxxxxx> wrote in message
news:MPG.21810894b2e71aec989a71@xxxxxxxxxxxxxxxxxxxx
In article <#QF8J3WEIHA.1316@xxxxxxxxxxxxxxxxxxxx>, itanb@xxxxxxxxxxx
says...
see inline

"Leythos" <void@xxxxxxxxxxx> wrote in message
news:MPG.218049022feeaf89989a68@xxxxxxxxxxxxxxxxxxxx
In article <F5B19C59-9099-43F1-B8A4-0BF7AB8CA330@xxxxxxxxxxxxx>,
ItanBarmes@xxxxxxxxxxxxxxxxxxxxxxxxx says...
Can you elaborate on the problem with the low end firewall. Basically
it
blocks the ports i am telling him to block. What else whould i want
him
to do?

Maybe I can intrude here:

1) Linksys uses NAT to protect you, claiming it's a firewall, but NAT
is
a ROUTING method, not a firewall function.

i guess what you mean by that is that it would be easier to hack to my
network. Do you know any resource about the difference between the two
methods, i would like to know more about this.

Google - look for NAT and then look for firewall - if you check, NAT
does not have any firewall features, it has only ROUTING features.

2) Firewalls protect by doing a lot of things (at least todays
firewalls
offer a lot) - they filter content out of HTTP and SMTP sessions, they
detect attacks and block the intruders IP, they provide detailed logs,
they act as VPN Tunnel endpoints for branch offices and mobile users...

I don't need VPN and mobile users can use RWW, i am aware of all there
great
possiblities, i just dont want to spend money on something that i use 10%
of.

You mean you would not use:

1) Auto detection of multiple types of attacks with automatic blocking?

2) Filtering of users HTTP sessions for content you don't want them to
download or be exposed too?

3) Filtering of SMTP (inbound email) sessions for bad file types or
malicious headers or other files that you don't want on your server?

4) Filtering of FTP sessions?

5) Full access to the network for maintenance, remotely, over a VPN, so
that you don't have to use Remote Desktop for maintenance - since RD can
screw with your installation of patches?

6) Something to protect your NETWORK that is not on Windows non-
dedicated server (meaning that ISA is not certified on a non-dedicated
box).

7) Complete inbound and outbound logs with real-time monitoring showing
ALL connections source/destination?

8) Ability to handle more than 1 public IP mapped to your LAN or a REAL
DMZ network?

9) How about a real DMZ network that is isolated from your LAN?

Your Linksys won't handle the traffic of a fast DSL (or slow cable)
connection without problems - I've seen a small sorority with 30
residents swamp Linksys routers causing them to reboot or fail until
power cycled - a better unit, like the FVS-318 and the DFL-700 handled
the traffic without a problem.

Are you saying that in addition to the ISA i need to get a new router?
The
Linksys is acting as a modem / router / AP / firewall. Don't forget that
i
only have 1 server and 4 desktops.

No, the "Router" works fine as router. ISA would work, but it's not
certified on a non-dedicated box. The Linksys is a small unit, for very
small shops. As for wireless, I hope you secured it with WPA-PSK ro
WPA2.

You seem to think that your 1 server and 4 computers plays into the
equation as significant for protection, it doesn't - you need to
consider LOSS OF DATA and the cost of that. You could have 1 server and
1 PC and your loss, if it was SSN's or Credit Card info, or just your
Quick Books files, could cost you thousands instantly, not to mention
loss of company info or project info....

It's not about the hardware, that doesn't mean anything, it's about the
cost of the data your business uses.


--

Leythos
- Igitur qui desiderat pacem, praeparet bellum.
- Calling an illegal alien an "undocumented worker" is like calling a
drug dealer an "unlicensed pharmacist"
spam999free@xxxxxxxxxx (remove 999 for proper email address)


.

Relevant Pages

  • Re: Linksys NAS200 Network Storage adapter
    ... The only two wireless network settings that are of any consequence are the SSID and the encryption method and password. ... either click the "Print Network Settings" button on the final screen of the Wizard or simply access the appropriate XML file and get at them that way and then use the information to configure the router manually as I explained earlier. ... I've read thru some of the MS web site on that product and it appears to do everything a NAS will do plus other cool features, such as, with an xbox360 with the wireless adapter, I can stream my video/pics to my TV for family viewing. ...
    (microsoft.public.windowsxp.network_web)
  • Re: XP Home: selective folder sharing
    ... >same would hold for any wireless connection. ... Explaining bridges vs NAT is not easy. ... network are visible to all other components on each network. ... With a bridge (if Falcon-II is providing one), ...
    (microsoft.public.windowsxp.network_web)
  • Re: Networking Question - VLANs on SBS 2003 Premium SP1
    ... Finally was able to get some network downtime to make the change in routers ... wireless router, but - once connected to the SBS box and I've run CEICW, the ... I ran the ISA and SBS BPA's and didn't see anything. ... I put the old router back in service so I could work on this some more. ...
    (microsoft.public.windows.server.sbs)
  • Re: share my printer between 2 computers and surf with 2 computers at same time
    ... The main piece of hardware you need to buy is a router. ... Because wireless routers for home use are ... you can use that to have a wired network. ... -2 short UTP cables ...
    (microsoft.public.windowsxp.network_web)
  • Re: share my printer between 2 computers and surf with 2 computers at same time
    ... The main piece of hardware you need to buy is a router. ... Because wireless routers for home use are ... you can use that to have a wired network. ... caused by 1) a misconfigured firewall; ...
    (microsoft.public.windowsxp.network_web)