[FW1] RE: [fw1-wizards] OT - How secure is ISDN?

["Goodwin, Russell" <Russell.Goodwin@FW1-NOSPAMPfizer.com>]

An ISDN connection is point to point and once it leaves the local loop it
will be in the SS7 network so it would not be easy to snoop it. The place
where you could get to it would be on the local loop, maybe in a box by the
road. You would need to find the wires and use some special equipment. If
there is sensitive data I would encrypt the traffic though. As for 'do you
need a firewall' This would not make the ISDN line any less comprimisable,
it would simply allow an unauthorized machine getting passed your network
perimeter. The question is, do you start encrypting all the traffic on your
WAN links because someone could listen on the line? Not usually I think, not
unless you are very paranoid!
The biggest issue with ISDN I think is if you have ISDN dial-in access to
your network either for user access or router Dial on Demand routing, these
links should always use good authentication techniques so as a dial-in
number cannot be used to circumvent your perimeter security (firewall etc).
It is all very well if you have good firewall protection but if someone can
get straight into a router and poison your routing information then he can
get data that way.

Hope this answers your question

Russell Goodwin

-----Original Message-----
From: Ivan Fox [mailto:ifox100@hotmail.com]
Sent: 18 October 2000 04:01
To: Fw1-Wizards (E-mail); fw-1-mailinglist (e-mail)
Subject: [fw1-wizards] OT - How secure is ISDN?


This question may have been asked many many times!

Am I correct/right to say that data travel through ISDN, no matter it is
dedicated or not, is not "unsecured".  Data can be sniffed by third parties.
There is a need to deploy "firewall" for it.

Your pointers/comments/suggestions are appreciated.

Thanks,


---------------------------------------------------------------------
This email came from the FireWall-1 Wizards Mailing List
To unsubscribe, e-mail: fw1-wizards-unsubscribe@phoneboy.com
For more information, email: fw1-wizards-faq@phoneboy.com


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================