Additionally, if your network is interfacing with a reasonably trusted
network you could use router ACL's to configure point to point connections
based upon required ports and services. However, if you are internet facing
the benefits of a good stateful inspection firewall are hard to deny.
-----Original Message-----
From: Moira Merriman [mailto:mmerrimanx@houston.rr.com]
Sent: Friday, March 11, 2005 6:53 AM
To: CISSP-Discuss@yahoogroups.com
Subject: RE: [CISSP-D] hi
Having a firewall is only one layer, but a key layer, in a multi-layered
defense model for networks that are interfacing with untrusted networks
(e.g. the internet). Additional layers can be IPS, host based IDS, host
based firewalls, strong server side controls such as patching, disabling
unnecessary services or weak protocols, hardening the OS, applying strong
passwords, and detective controls such as event management & event
correlation tools. You can also consider an application layer proxy, e.g.
Microsoft ISA server to forward and filter requests for applications.
-----Original Message-----
From: krishna mohan [mailto:punamkrishna@yahoo.co.in]
Sent: Friday, March 11, 2005 12:11 AM
To: CISSP-Discuss@yahoogroups.com
Subject: [CISSP-D] hi
hi all,
can i know how to secure our network without using firewalls .......can
anybody help by listing out the options
regards
krishna
Yahoo! India Matrimony: Find your life partner online.
Yahoo! Groups Sponsor
ADVERTISEMENT
----------------------------------------------------------------------------
Yahoo! Groups Links
a.. To visit your group on the web, go to:
http://groups.yahoo.com/group/CISSP-Discuss/
b.. To unsubscribe from this group, send an email to:
CISSP-Discuss-unsubscribe@yahoogroups.com
c.. Your use of Yahoo! Groups is subject to the Yahoo! Terms of
Service.
