Re: [FW1] What ports are secure to open

[Brad Van Orden <Brad.VanOrden@FW1-NOSPAMnavius.com>]

I can't speak to the vulnerabilities, but you might want to consider the
bandwidth costs.  Consider why your company has Internet access and what the
size of your pipe is.  Then think of all the applications your company's
employees need to perform their functions.  Then consider how much bandwidth
all these other applications potentially can consume.  I have one customer
whos T1 was almost totally being consumed by its employees downloading MP3s,
real audio/video, etc.  One employee was downloading entire pirated
Hollywood movies from news groups.  

If only the executives are asking for it, you might want to create a group
of their workstations and only allow these services through for that group?

Regards,

Brad

RBHATIA wrote:
> 
> Hello,
> We have a fairly secure infrastructure at our site when it comes to services
> that have been restricted on our firewall. However, there seems to be an
> escalating demand to open up more ports from top management. These services
> are not really a necessity - more like a luxury. However, the top management
> don't really understand the security risks associated with opening up ports
> on the firewall. Is there a site which tells you exactly what
> vulnerabilities you expose your network to when you open up specific ports
> (well known ports). For instance, Real Audio, NNTP etc.


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================