RE: Say it ain't so

["Giesinger, Nick HE0" <ngiesing () health gov sk ca>]

It ain't so.

I have done this a couple locations were I walked in, plopped a firewall
in place, plugged it into the local LAN and connected to the Internet.

Plopped is not the right word but there a number of products that I have
seen that would allow connection to the Internet with out modifications
to the desktop.  The key feature would be "Multiple Address
Translation". 

Nick G.
SHL SystemHouse LTD.


        -----Original Message-----
        From:   Jim Leo [SMTP:ADMIN () everett pitt cc nc us]
        Sent:   Wednesday, September 17, 1997 6:43 AM
        To:     firewall-wizards () nfr net
        Subject:        Say it ain't so

        Hi All,
                I've got a meeting with our Firewall Installers on the
29th. Got 
        pulled into as a result of 'centralizing' our
computer/technology 
        staff and creation of a helpdesk. The upshot is this. We have
been 
        apprised by one of the staff (Originally selected 
        installation/Firewall) and was told that every device behind the

        firewall would have to 'be touched' for anything to work. It
almost 
        sounds like a complete rework of the network setup/standard. We
were 
        told that all IP addresses would have to be changed. Somehow I
get 
        the impression that this is the installers idea, and I'm not
quite 
        willing to by into it. I feel that it should be possible to
'plug-in' 
        any properly configured firewall (with the exception of the
proxies) 
        and not have to reconfigure machines. 
                Am I wrong?
        Jim Leo
        admin () everett pitt cc nc us