TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
[EMAIL PROTECTED]  Contact [EMAIL PROTECTED] for help with any problems!
----------------------------------------------------------------------------

The trick is to put a little hub in your DMZ for the Stealth NIC to watch 
the traffic.  A small Netgear can accomplish this very easily.

/




[EMAIL PROTECTED]
Sent by: [EMAIL PROTECTED]
02/18/00 11:42 AM

 
        To:     [EMAIL PROTECTED]
        cc: 
        Subject:        RS Engine Stealth Mode



TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message 
to
[EMAIL PROTECTED]  Contact [EMAIL PROTECTED] for help with any 
problems!
----------------------------------------------------------------------------



I would like to put a Real Secure engine on my DMZ and am considering 
using the
dual NIC stealth mode setup.  The unbound NIC would monitor the DMZ 
traffic and
report back to the internal console through an addressed NIC attached to 
an
internal segment inside the firewall.  While this seems pretty secure, I 
am
still bothered by the fact that I would be opening up another pipe from 
the DMZ
to the internal network completely bypassing the firewall.

I'm also considering just modifying firewall rules to pass the Real Secure
traffic between the external engine and the internal console.  This too 
makes me
somewhat uncomfortable.

I would appreciate any advice on monitoring an external DMZ engine?

Thanks!

Carol Stettler
GPU Energy







Reply via email to