Security Basics mailing list archives

Re: Firewall and DMZ topology


From: "Daniel B. Cid" <danielcid () yahoo com br>
Date: 10 Jun 2003 14:47:21 -0400

I think similar to you. In most companies all the firewalls are the
same(same OS, same version and same configuration).. If someone is
able to crack the firewall 1, will be able to crack the firewall 2 and 3
..

[]`s

Daniel B. Cid

On Tue, 2003-06-10 at 13:41, Zach Crowell wrote:


Erik Vincent wrote:
I think there is a major difference between:

              1:    internet --> Outer Firewall --> DMZ --> Inner 
Firewall --> LAN
                           If your Outer Firewall is crack, only the DMZ 
computer will be unprotected
                            but the LAN portion still protected.

Under what conditions would these firewalls be configured any 
differently from a vulnerability-assessment view point?  i.e., if 
someone was able to crack the outer firewall, is it not likely they 
would crack the inner firewall as well?

Zach


---------------------------------------------------------------------------
Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts!
The Gartner Group just put Neoteris in the top of its Magic Quadrant,
while InStat has confirmed Neoteris as the leader in marketshare.
     
Find out why, and see how you can get plug-n-play secure remote access in
about an hour, with no client, server changes, or ongoing maintenance.
          
Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
----------------------------------------------------------------------------




---------------------------------------------------------------------------
Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts!
The Gartner Group just put Neoteris in the top of its Magic Quadrant,
while InStat has confirmed Neoteris as the leader in marketshare.
     
Find out why, and see how you can get plug-n-play secure remote access in
about an hour, with no client, server changes, or ongoing maintenance.
          
Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
----------------------------------------------------------------------------


Current thread: