TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
[EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems!
----------------------------------------------------------------------------
The trick is to put a little hub in your DMZ for the Stealth NIC to watch
the traffic. A small Netgear can accomplish this very easily.
/
[EMAIL PROTECTED]
Sent by: [EMAIL PROTECTED]
02/18/00 11:42 AM
To: [EMAIL PROTECTED]
cc:
Subject: RS Engine Stealth Mode
TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message
to
[EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any
problems!
----------------------------------------------------------------------------
I would like to put a Real Secure engine on my DMZ and am considering
using the
dual NIC stealth mode setup. The unbound NIC would monitor the DMZ
traffic and
report back to the internal console through an addressed NIC attached to
an
internal segment inside the firewall. While this seems pretty secure, I
am
still bothered by the fact that I would be opening up another pipe from
the DMZ
to the internal network completely bypassing the firewall.
I'm also considering just modifying firewall rules to pass the Real Secure
traffic between the external engine and the internal console. This too
makes me
somewhat uncomfortable.
I would appreciate any advice on monitoring an external DMZ engine?
Thanks!
Carol Stettler
GPU Energy