OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: How safe should I feel with Cisco router's built-in firewall +NAT?
From: sigippWELLA.COM.BR
Date: Tue Jun 27 2000 - 06:34:06 CDT

Hi,

well, i think, there are basically three points to observe:
1. The router itself may be hacked or DoSīed. Might stop your connection
2. The Web service may be hacked/DoSīed or somehow else crashed. May stop the
service or may reveal any information on this machine or this machine may be
used to hack others. Should be monitored, and the configuration of the server
itself is critical.
3. The server machine (OS) may be hacked/DoSīed or else. Same effects as (2).

So there are three steps to do:
1. The initial structure should be planned with caution. Seems you are already
doing this.
2. The "market" (f.ex. this list) should be monitored, and in concrete case any
appropriate action should be taken ASAP.
3. The system should be monitored. Seems you are at least planning this. But for
monitoring to be of any value it is necessary that you are understanding whatīs
going on. This ist the most work intensive point.

Only one thing left: If you want to be 100% save, donīt connect to any public
net :->

Greetings
Siegfried