Re: [FW-1] Unrelated Topic - Help needed

["Laidlaw, Rob" <rlaidlaw@FW1-NOSPAMENVESTNETPMC.COM>]

Title: Message

 I assume these are windows boxes because you mentioned Netbios.  SFTP (ftp over ssh ).  VanDyke makes some ssh and sftp daemons and clients that run in Windows.   You could also setup a vpn between the boxes (at least you can encrypt the netbios traffic over the vpn).  If you were running linux, you could just secure copy (scp) or setup a cipe interface on both boxes to tunnel everything over ssh.   

 

Robert Laidlaw
CCNP, MCSE, SCSA, IBM SA, CSS-1
Senior Network Engineer
EnvestnetPMC, Inc.

[Laidlaw, Rob]  -----Original Message-----
From: Lyle Dove [mailto:ldove@BIZLA.RR.COM]
Sent: Wednesday, March 05, 2003 12:30 PM
To: FW-1-MAILINGLIST@beethoven.us.checkpoint.com
Subject: Re: [FW-1] Unrelated Topic - Help needed

Are not your Internal and DMZ servers behind the same FW?

-----Original Message-----
From: Mailing list for discussion of Firewall-1 [mailto:FW-1-MAILINGLIST@beethoven.us.checkpoint.com] On Behalf Of Christopher Collins
Sent: Wednesday, March 05, 2003 8:53 AM
To: FW-1-MAILINGLIST@beethoven.us.checkpoint.com
Subject: [FW-1] Unrelated Topic - Help needed

I need advice:

 

Background:

·         we test the development of new web pages on internal web servers

·         we confirm that all aspects of the web pages are working as expected

·         we then replicate that new information to the public web servers

·         we have 2 ways of doing this right now – both suck.

·         One is by floppy disk – a major pain in the @ss.

·         One is by NETBIOS communication between the internal and DMZ server (don’t flip)

 

I do not like either of these two methods. One is too slow and the other one is totally insecure. How can we do file transfers between the internal network and the DMZ without compromising security? Can it be done? We use NG FP3 on Win2K.

 

Please help?

 

Disclaimer - 03/05/2003
This information in this email is confidential and may be legally privileged. It is intended solely for Mailing list for discussion of Firewall-1.  Access to this Internet email by anyone else is unauthorized.

EnvestnetPMC, Inc. does not accept time-sensitive transactional messages, including orders to buy and sell securities, account allocation instructions, or any other instructions affecting a client account, via e-mail.  

If you are not the intended recipient of this email, any disclosure, copying, or distribution of it is prohibited and may be unlawful.  If you have received this email in error, please notify the sender and immediately and permanently delete it and destroy any copies of it that were printed out.  When addressed to our clients, any opinions or advice contained in this email is subject to the terms and conditions expressed in any applicable governing EnvestnetPMC terms of business or agreements.