Re: [FW1] Lotus Notes' Pass Through Server

[Peter Goodridge <petegdr@FW1-NOSPAMyahoo.com>]

IMHO the only thing that should every be between the
firewall and the Internet router is an IDS.  Your
Lotus Notes passthough server should be in the DMZ
protected by the firewall.  

As for the router: Routers route.

Who is going to accessing this Notes server anyway? 
The whole world, just other specific business
partners?  If it just business partners I usually set
up a second DMZ that only business partners can
access, separate from the one open to the whole
Internet.

HTH,
Pete Goodridge

--- key chavez <keychavez@yahoo.com> wrote:
> 
> It's better put this server in a DMZ behind a
> firewall. The Lotus Notes can have no sensitive data
> stored on it but is a system that can be compromised
> by security issues, I mean someone can take this
> machine under control and do all he wants (like
> redirect data, change data etc..).
> 
> Key
> 
> 
> --- Ivan Fox <ifox100@hotmail.com> wrote:
> > 
> > A eBusiness vendor proposes to have a Lotus Notes'
> > "Pass Through" server in
> > front of firewall, but behind a router!
> > 
> > He argues that there is no data on the Lotus Notes
> > server.  Data are
> > transient/streaming to the server.  To gain
> > performance, it should be in
> > front of the firewall.  In addition, it is
> > "protected" by the router.
> > 
> > My argument was router is a router, although it
> > performs some sort of packet
> > filtering.  It is not designed to perform firewall
> > functions, etc.
> > 
> > Does the vendor claim acceptable?  Any comments
> are
> > appreciated.
> > 
> > Thanks,
> > 
> > 
> > 
> >
>
================================================================================
> >      To unsubscribe from this mailing list, please
> > see the instructions at
> >               
> > http://www.checkpoint.com/services/mailing.html
> >
>
================================================================================
> 
> 
> __________________________________________________
> Get personalized email addresses from Yahoo! Mail -
> only $35 
> a year!  http://personal.mail.yahoo.com/
> 
> 
>
================================================================================
>      To unsubscribe from this mailing list, please
> see the instructions at
>               
> http://www.checkpoint.com/services/mailing.html
>
================================================================================


__________________________________________________
Get personalized email addresses from Yahoo! Mail - only $35 
a year!  http://personal.mail.yahoo.com/


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================