RE: Is my N/W safe?

  • From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Fri, 23 Jul 2004 09:10:50 -0500

Hi Jim,

Can I be the Howard Stern of the Internet community?

Tom
www.isaserver.org/shinder
Get the book!
Tom and Deb Shinder's Configuring ISA Server 2004
http://tinyurl.com/3xqb7
MVP -- ISA Firewalls



-----Original Message-----
From: Jim Harrison [mailto:jim@xxxxxxxxxxxx] 
Sent: Friday, July 23, 2004 8:56 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Is my N/W safe?


http://www.ISAserver.org

<my .02>

I agree with Greg that there are *many* sites out there that offer you
"port scan" functionality, but the thing you have to remember is that a
remote port scan is only as accurate as the devices between the testing
and tested devices.
Basically, if you can't install the scanning tool on a machine in your
"external" network, the test is suspect.

I have to disagree with Greg regarding the usefulness of anything coming
from GRC.com.  Without getting into a gory details, I consider him the
"Geraldo Rivera" of the Internet community.

 
  Jim Harrison
  MCP(NT4, W2K), A+, Network+, PCG
  http://isaserver.org/Jim_Harrison/
  http://isatools.org
  Read the help / books / articles!


On Fri, 23 Jul 2004 15:59:58 +1000
 "Greg Mulholland" <greg@xxxxxxxxxxxxxx> wrote:
http://www.ISAserver.org

Steve Gibson's site is ok and I agree it will give the appearance of a
"secure" firewall from the outside looking in. You could also use GFI's
Network Security Scanner to run a test on your external ip. You will
need to do this from a machine outside the network for a real result
tho. 

No doubt that your "port scans" will show up nice and tasty but theres
no point of having a closed port 80 if you host a website. You should
almost always have open ports (theres that phrase you like Tom) for
services like http, ftp blah blah but it's the configuration and
security of the machines that run those services which counts for allot.

My advice would be to read the guides on www.isaserver.org to ensure
that you have configured your firewall and servers correctly as this can
be your biggest danger point. The software's no good if its
misconfigured. The more info you can read and retain on configuring the
services you need the better you and your network will sleep at night.

 


Greg Mulholland
Krystaltek Solutions
greg@xxxxxxxxxxxxxx
www.krystaltek.com

-----Original Message-----
From: Ray Dzek [mailto:rdzek@xxxxxxxxxxxxxxx] 
Sent: Friday, July 23, 2004 2:52 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Is my N/W safe?

http://www.ISAserver.org

If you would like a nice quick false sense of security or something that
you can show management, go to some place like http://www.grc.com and
run ShieldsUP.  It does a fairly thorough scan of your network and will
show how "stealthy" your new network has become since you implemented
ISA.

It looks pretty and is fairly meaningless which is typically right up
managements alley.  (No offense to any management types that may be
reading this list... Seriously.  I'm not kidding.  I really mean it.) 

Elvis "The King" Presley
Network Operations Supervisor
Specialized Bicycle Components

-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx]
Sent: Thursday, July 22, 2004 9:10 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Is my N/W safe?


http://www.ISAserver.org

There is no such thing as 100% safety. The question is: "is my network
safer
than it was before?"

Tom
www.isaserver.org/shinder
Get the book!
Tom and Deb Shinder's Configuring ISA Server 2004
http://tinyurl.com/3xqb7
MVP -- ISA Firewalls



-----Original Message-----
From: dhanu patil [mailto:dhanupatil@xxxxxxxxxxx] 
Sent: Thursday, July 22, 2004 10:54 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Is my N/W safe?


http://www.ISAserver.org

http://ISAServer.org

Hi all,

I have just installed and configured ISA 2000 SP1 server, with some
basic
configuration allowing HTTP,MSN access, how can i confirm that my LAN is
safe  from hackers or intruders,  Is there any way to prevent such
things?

thanks & regards,

Dhananjay

________________________________________________________________

_________________________________________________________________
The new MSN toolbar! Your shortcut to the internet! 
http://toolbar.msn.co.in/ Access a world of convenience!


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com No.1 Exchange
Server
Resource Site: http://www.msexchange.org Windows Security Resource Site:
http://www.windowsecurity.com/ Network Security Library:
http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com No.1 Exchange
Server
Resource Site: http://www.msexchange.org Windows Security Resource Site:
http://www.windowsecurity.com/ Network Security Library:
http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
rdzek@xxxxxxxxxxxxxxx To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
greg@xxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist


Other related posts: