Off topic: Firewalls

Yahoo Archive
1
Goto www.ebay.com <http://www.ebay.com> ... search for CISCO + PIX ....

You can buy them used in almost any configuration you want and save bunches
of money ...

-----Original Message-----
From: Leonard, Jeremy [mailto:jleonard@...]
Sent: Thursday, May 16, 2002 12:41 PM
To: 'vantage@yahoogroups.com'
Subject: RE: [Vantage] off topic: Firewalls


We just moved from Microsoft's ISA Server to a Cisco Pix Firewall. I did
allot of checking, not knowing about firewalls much myself, and the PIX
Firewall was always mentioned as the clear choice. I also heard allot about
Sonic Firewall but from what I understand, that product runs Linux as its OS
and has been effected several times by viruses. We paid $1,800 for the PIX
a few weeks ago from CDW.
Thanks
Jeremy


-----Original Message-----
From: Robert Bruton [mailto:bob@...]
Sent: Thursday, May 16, 2002 11:31 AM
To: vantage@yahoogroups.com
Subject: [Vantage] off topic: Firewalls


Just discovered in the security log of my PDC a whole bunch of 644 entries.

These are account lockout entries. There is an entry for every machine with
an
entry like machinename$, both for valid machines and machines that aren't on
my
network anymore. Also an entry for every user account. These all happened
Saturday, May 4 and all within 1 hour. about 30 entries total.

My suspicion is that someone was scanning my internal network and trying to
login to the domain. The good news was that they were locked out. The bad

news was that they had all the computer names and user names. Also, there
might have been a success and I won't know about it.

I use the local address range 192.168.254.xxx and only a single external ip
address. I've been running MS Proxy Server 2.0 . Probably need something
stronger?

Recommendations? I prefer a software solution but I'm easy to convince
otherwise.

Thanks

Bob Bruton
Entek Corp


[Non-text portions of this message have been removed]



Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must have
already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder and
Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
<http://groups.yahoo.com/group/vantage/files/.>
(2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
<http://groups.yahoo.com/group/vantage/messages>
(3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links
<http://groups.yahoo.com/group/vantage/links>

Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/
<http://docs.yahoo.com/info/terms/>



Yahoo! Groups Sponsor

ADVERTISEMENT

<http://rd.yahoo.com/M=226020.2031982.3521154.1971030/D=egroupweb/S=17050071
83:HM/A=1073422/R=0/*http://www.qksrv.net/click-1084497-610300?url=http://ww
w.tv/en/landing.shtml&HHcode=yhc3my2>

<http://us.adserver.yahoo.com/l?M=226020.2031982.3521154.1971030/D=egroupmai
l/S=1705007183:HM/A=1073422/rand=524143702>

Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must have
already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder and
Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
<http://groups.yahoo.com/group/vantage/files/.>
(2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
<http://groups.yahoo.com/group/vantage/messages>
(3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links
<http://groups.yahoo.com/group/vantage/links>

Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service
<http://docs.yahoo.com/info/terms/> .




[Non-text portions of this message have been removed]
2
Just discovered in the security log of my PDC a whole bunch of 644 entries.

These are account lockout entries. There is an entry for every machine with
an
entry like machinename$, both for valid machines and machines that aren't on
my
network anymore. Also an entry for every user account. These all happened
Saturday, May 4 and all within 1 hour. about 30 entries total.

My suspicion is that someone was scanning my internal network and trying to
login to the domain. The good news was that they were locked out. The bad

news was that they had all the computer names and user names. Also, there
might have been a success and I won't know about it.

I use the local address range 192.168.254.xxx and only a single external ip
address. I've been running MS Proxy Server 2.0 . Probably need something
stronger?

Recommendations? I prefer a software solution but I'm easy to convince
otherwise.

Thanks

Bob Bruton
Entek Corp


[Non-text portions of this message have been removed]
3
We just moved from Microsoft's ISA Server to a Cisco Pix Firewall. I did
allot of checking, not knowing about firewalls much myself, and the PIX
Firewall was always mentioned as the clear choice. I also heard allot about
Sonic Firewall but from what I understand, that product runs Linux as its OS
and has been effected several times by viruses. We paid $1,800 for the PIX
a few weeks ago from CDW.
Thanks
Jeremy


-----Original Message-----
From: Robert Bruton [mailto:bob@...]
Sent: Thursday, May 16, 2002 11:31 AM
To: vantage@yahoogroups.com
Subject: [Vantage] off topic: Firewalls


Just discovered in the security log of my PDC a whole bunch of 644 entries.

These are account lockout entries. There is an entry for every machine with
an
entry like machinename$, both for valid machines and machines that aren't on
my
network anymore. Also an entry for every user account. These all happened
Saturday, May 4 and all within 1 hour. about 30 entries total.

My suspicion is that someone was scanning my internal network and trying to
login to the domain. The good news was that they were locked out. The bad

news was that they had all the computer names and user names. Also, there
might have been a success and I won't know about it.

I use the local address range 192.168.254.xxx and only a single external ip
address. I've been running MS Proxy Server 2.0 . Probably need something
stronger?

Recommendations? I prefer a software solution but I'm easy to convince
otherwise.

Thanks

Bob Bruton
Entek Corp


[Non-text portions of this message have been removed]



Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must have
already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder and
Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
(2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
(3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links

Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/