106
© 2002. Xephon UK telephone 01635 33848, fax 01635 38345. USA telephone (303) 410 9344, fax (303) 438 0290.
Remote security – inexpensive firewalls
Most organizations still rely solely on VPN and RACF to protect
mainframe access from remote workstations connected via commercial
high-speed Internet – despite the fact that those workstations are
unprotected from hackers gaining access to them from the Internet,
and going on to take over a logged-on RACF session.
A random check of a major telco confirmed that it doesn’t even
recommend, let alone require, a firewall for employees connecting to
the mainframe from high-speed Internet at home. Ironically, it tells its
residential customers to install a firewall because, like virtually all
ISPs, the telco’s firewall protects its staff, not its customers.
In our continuing look at SOHO hardware firewalls for the small
remote office or home mainframe user, we switch to cable/DSL
gateway routers with built-in firewalls and VPN, instead of the much
more expensive firewall with built-in hub. Of course, software firewalls
are even cheaper, or free with the operating system, as in Windows XP.
But they leave the operating system itself unprotected against a direct
attack.
BELKIN
The Belkin 4-Port Cable/DSL Gateway Router (F5D5230-4) is an
unusual shape, sits vertically, and has a docking ring to physically
attach (side-by-side) with other Belkin products. Although the small
installation manual suggests answering some networking questions
first and installing set-up software on your workstation, you’ll find it
faster to just connect your modem and workstation(s), and then power
up the router and see if it works. It worked for me with my ADSL
modem, and Windows XP Professional and Windows 2000 Server
workstations, but I:
• Use dynamic IP addresses (DHCP)
• Do not use PPPoE
• Previously had the two workstations communicating with each
other through the hub of a SOHO firewall.
Comentários a estes Manuais