Re: trading partner security

[rob@xxxxxxxxx]

In summary:  Do you want to do business with these people?  Yes/No?  Do 
they do enough business that you are willing to bow to their whims? 
Yes/No?  If management answers yes to both of these questions, then you 
are, by God, going to open the network to them.  Evidently your network 
guy is impressed with your severance package.

I agree, that putting the data on a separate box in the DMZ might not get 
you a whole lot.  Let's assume that this data (since it is for a defense 
company) is considered rather confidential.  It wouldn't give me any warm 
fuzzies, if I were them, knowing that you feel my data is expendable. 
Granted if your network guy goofs, or if you goof on your exit point 
strategy or general security model, then the DMZ would lessen the chances 
of hackers from doing undesirables to your production box.  In summary, 
just because data is in the dmz doesn't mean you have to secure it any 
less.


Rob Berendt
-- 
Group Dekko Services, LLC
Dept 01.073
PO Box 2000
Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com





"Jim Franz" <franz400@xxxxxxxxxxxx> 
Sent by: midrange-l-bounces@xxxxxxxxxxxx
02/18/2004 11:20 AM
Please respond to
Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>


To
<MIDRANGE-L@xxxxxxxxxxxx>
cc

Fax to

Subject
trading partner security






A trading partner wants to use ftp to get a daily file off our ifs, but 
is adamently refusing to specify a single ip they are coming from,
saying that is a security risk to them, and has given us 3 
ranges totalling over 700 addresses. I don't have a problem 
but our firewall person is freaked and refuses. I assume they 
have a herd of routers and servers in their farm. 
note: partner is defense related. 400 has decent ftp exit control.
should i worry?
jim
_______________________________________________
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing 
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.