[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Help - Details on March 2nd worshop at Raliegh requested ...


> >> > What about firewall configurations ?
> >> 
> >Interoperabilty with NAT...
> 
> That is too broad a statement for a workshop.  What senarios and tests
> would you recommend?
> 

Configurations:

1) Remote access client (dial up through an ISP)

	a)  IPSEC Gateway configured with an inside address behind a
	firewall.

	b)  IPSEC Gateway configured with an outside address, unprotected
	by the firewall, but packets passed on to a node on the other 
	side of the firewall.

	c)  User Authentication issues ??

	d)  Proxy Server ?

2) LAN Client

	a) configured with an inside address

	b) configured with an outside address

	c) multiple gateways on the same subnet

Scenarios:

	a)  Remote access, SA secures everything between
	two endpoints.

	b)  Remote access, SA secures specific protocols/ports.
	    Firewall also protects these ports.

	c)  Firewall multiplexes inside sessions over a single outside
	ip address.

	
	
Tests:

	a) icmp,http,ftp,smtp,pop3,udp

	b) shared drives and printers with uSoft NETBUI over TCP

	c) keep athentication,encryption,compression constant for
	simplicity
	
	This may not be applicable for the workshop, you tell me.
	I don't know how many people are prepared to run these tests
	either.



	Thanks,
	Jeffrey Goodwin

**  Ashley Laurent,Inc. **  Software Development  **     Consulting          **
*                                   *                                         *
* 707 West Avenue, Suite 201        *     voice: 512-322-0676                 *
* Austin, Texas 78701               *     fax  : 512-322-0680                 *
*                      web: http://www.osgroup.com                            * 
* Microsoft Solution Provider       *  	  Complete Systems Design/Development *
* Novell Professional Developer     *	  Systems Software/Device Drivers     *
References: