Re: ISA internally

[Kirk Woloshyn]

If you are on an MPLS network wouldn't that be a private network that does not hit the internet? Most service providers have customer networks separate from their internet traffic. You would be going over the internet for a remote user working from home but should be private internally. Check with your provider - maybe you can tell the auditor to pound sand... Kirk Woloshyn 2825 Temple Avenue Signal Hill, CA 90755 v 562.304.1939 c 562.682.0261 David W. McSpadden wrote: We are on an MPLS network.  We are a financial institution.  We have jackass auditors that want written that even though it it passing over the public network (Internet) the member data is secure from endpoint to endpoint.  They only way that can be assured this is true is if we are managing something like a firewall on each LAN because the routers are managed by the ISP (AT&T).  I have CISCO Switches I am exploring MAC address ACL's but I want to also explore Windows options and I have 2003 member servers at each LAN endpoint that do nothing more than some print and file sharing.   ----- Original Message ----- From: Don Ely To: NT System Admin Issues Sent: Tuesday, June 10, 2008 10:40 AM Subject: Re: ISA internally What is the objective? On Tue, Jun 10, 2008 at 7:25 AM, David W. McSpadden <[EMAIL PROTECTED]> wrote: What would it hurt to have an ISA server at each branch location inside a Private WAN?         Data Security is everyone's responsibility. ______________________________________________________ This e-mail and any files transmitted with it are property of Indiana Members Credit Union, are confidential, and are intended solely for the use of the individual or entity to whom this e-mail is addressed. If you are not one of the named recipient(s) or otherwise have reason to believe that you have received this message in error, please notify the sender and delete this message immediately from your computer. Any other use, retention, dissemination, forwarding, printing, or copying of this email is strictly prohibited. This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email ______________________________________________________________________