This depends on the application and the OS. Make sure you have the OS
security patches up to date. Older unpatched OS's allow attacks at the
TCP/IP layers. Aside form that there can be bugs on the application level
(ex. MS IIS, older snedmail, etc ). Keep up with the vendor's patches and
subscribe to cert.org to get the latest on bugs in major applications.

""Brown, M""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Certain application requires port other than 80 or 443 opened in the
> firewall for inbound and outbound traffic. The firewall was configured to
> allow traffic to that specific server ip address.
>
> The software vendor argues "that the worst scenario could be that hackers
> could bring the server down. No other significant would be possible. "
>
>  Is that true  ?
>
> How risky is that to my network ?  I would like to secure that connection
> using CA from the company and IPSec. The software vendor argues that is
not
> necessary.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=42349&t=42349
--------------------------------------------------
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Reply via email to