[Fwd: [Fwd: Firewall for AS400/Domino Server]]

[Dodie Chartrand <chartrand@xxxxxxx>]

---

• Subject: Re: [Fwd: Firewall for AS400/Domino Server]
• From: Terry Callum <tecall@xxxxxxx>
• Date: Wed, 01 Mar 2000 09:11:00 -0500

Mike,

I would recommend going a step further and installing an actual firewall. Cisco
routers are the best, but they have many drawbacks in terms of security.  There
aren't any easy ways to set up rules, and Access Control Lists become highly
tedious work in terms of internet access.

We are currently implementing Domino, but last year installed a Nokia IP440,
which more or less combines a Cisco equivalent router and a pc hardware running 
a
hardened version of BSD Unix.  It runs Checkpoint software and has support for 8
network interfaces, which allow internet security as well as support for DMZ's
and other local segments can be run through the firewall.  It can handle NAT, 
and
it can also support Checkpoint's VPN module using SecureRemote clients.

Filtering out tcp/ip ports and traffic mgt. is very easy with this box.  In many
ways it is an appliance firewall, but it is much more sophisticated than the
typical pc firewall's available elsewhere on the market.

Terry Callum
Network Mgr.
Valley Regional
tecall@vrh.org
603-542-3417

Dodie Chartrand wrote:

>   ------------------------------------------------------------------------
>
> Subject: Firewall for AS400/Domino Server
> Date: Tue, 29 Feb 2000 08:48:04 -0600
> From: Mike McClain <mikemc@columbia.total-web.net>
> Reply-To: MIDRANGE-L@midrange.com
> To: midrange-l@midrange.com
>
> Is anyone using ONLY a router (Cisco) to protect their AS400 running
> Domino as a web server? With the withdrawal of IBM's firewall, we're
> getting some recommendation to use just the router. Is this feasible?
>
> Comments, experiences, etc.?
> tia
> Mike...
>
> +---
> | This is the Midrange System Mailing List!
> | To submit a new message, send your mail to MIDRANGE-L@midrange.com.
> | To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
> | To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
> | Questions should be directed to the list owner/operator: david@midrange.com
> +---

---