>
> ----- Original Message -----
> From: "Shay Hugi" <[EMAIL PROTECTED]>
> To: "Ben Nagy" <[EMAIL PROTECTED]>
> Sent: Wednesday, June 05, 2002 7:57 PM
> Subject: Re: a web management system for the NetGAP firewall
> appliance(off-topic)
>
>
> >
> > thread?
> > um...
> > "Um, did you _read_ the thread?"
> >
> > Hello? i created this thread... Take a good look. (the DDM is just an
> > example for a GOOD snmp management system via web environment)
> > Yeah.. I would manage a firewall under SNMP, if i define a specific
> internal
> > IP to be the ONLY NMS.
> >
> > and if you think it's not secured let me give you the URL for the
> management
> > server (i'll map a new nat entry, so the management system will be
> available
> > for you, from my local lan). that already HAVE the ability to manage the
> > firewall.
> >
> > let me know if you want the URL.
> > tell me what flaws you've managed to find. (if You'll find the
> > password)
> >
> > -Shay Hugi
> > -Mpthrill.com
> >
> >
> > ----- Original Message -----
> > From: "Ben Nagy" <[EMAIL PROTECTED]>
> > To: "'Shay Hugi'" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
> > Sent: Wednesday, June 05, 2002 10:19 AM
> > Subject: RE: a web management system for the NetGAP firewall
> > appliance(off-topic)
> >
> >
> > > > -----Original Message-----
> > > > From: [EMAIL PROTECTED]
> > > > [mailto:[EMAIL PROTECTED]] On Behalf Of Shay Hugi
> > > > Sent: Wednesday, June 05, 2002 12:46 AM
> > > > To: [EMAIL PROTECTED]
> > > > Subject: Re: a web management system for the NetGAP firewall
> > > > appliance(off-topic)
> > > >
> > > >
> > > > If anyone of you guys who replied to this topic ever saw
> > > > Motorola DDM, i don't think you could say such bad things
> > > > about SNMP management using web based system. EVEN if it's a
Firewall.
> > >
> > > Um, did you _read_ the thread?
> > >
> > > > The Motorola Docsis Device Manager, ussualy implemented on a
> > > > Sun NETRA managed by X,
> > >
> > > Running X? OK, it's lost a point already.
> > >
> > > > running Apache 1.3.20, FULL Java
> > > > based management system using SNMPv2 to the Motorola DCM2000
> > > > (CMTS) and the whole CAS System. including non-motorola CM's
> > > > with the ability to add and compile your own equipment MIB files.
> > >
> > > That sounds like you're describing an Enterprise Management product
for
> > > carriers. That's a very different kettle of fish.
> > >
> > > > The DDM is truely a powerful product... with no need for any
> > > > session encryption except MD5 for the login passwords. I
> > > > don't see AT ALL why should a management system using SNMP
> > > > and a web based (using Java) system should not run on a
> > > > dedicated authenticated workstation to manage a firewall.
> > >
> > > You'd manage a firewall via SNMP with no encryption??
> > > Certainly...daring. Before I started doing anything like that I'd want
> > > to have a complete out-of-band management network. Not many companies
> > > have one of those - far less than have firewalls.
> > >
> > > > Lot's of cable companies who use Motorola CMTS's or
> > > > RiverDelta's are using the DDM. And i've never heard anyone
> > > > say'n anything bad about this system.
> > >
> > > I think you're describing a different sort of "management" system,
with
> > > different risks. I'd go over everything, but I'd just be repeating all
> > > the stuff we already described. You're talking about carrier grade
gear
> > > for people with really different kinds of networks to other
businesses.
> > >
> > > Try sticking a bunch of SNMP read-write manageable devices on a
> > > university (college) network and see how long they last. And sure, you
> > > can use this DDM thing to manage 'em if you like (but it won't
help...)
> > >
> > > > -Shay Hugi
> > > > -Mpthrill.com
> > >
> > > Cheers,
> > >
> > > --
> > > Ben Nagy
> > > Network Security Specialist
> > > Mb: TBA  PGP Key ID: 0x1A86E304
> > >
> > >
> >
>

_______________________________________________
Firewalls mailing list
[EMAIL PROTECTED]
For Account Management (unsubscribe, get/change password, etc) Please go to:
http://lists.gnac.net/mailman/listinfo/firewalls

Reply via email to