Will the access-list be based on phone number or destination phone number,
and, will the device alert the admin of failed or successful attempts via
email?

Charles

-----Original Message-----
From: Josh Duffek [mailto:[EMAIL PROTECTED]]
Sent: Friday, August 18, 2000 4:18 PM
To: Charles Gatrelle; [EMAIL PROTECTED]
Subject: RE: ISDN Security


You could also use time based access-lists.  When they will be able to
connect but their traffic will not route.

http://www.cisco.com/warp/public/793/access_dial/10.html

Josh

> -----Original Message-----
> From: Charles Gatrelle [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, August 16, 2000 11:16 AM
> To: [EMAIL PROTECTED]
> Subject: RE: ISDN Security
>
>
> Michael,
>
> I think a possible solution to your problem is to use a TeleWall
> to monitor
> those lines (I am not familiar with ISDN lines, so the example is for an
> analog modem).
>
> If you added the following rule to your TeleWall security policy it would
> alert you each time the vendor connected to the app server, as
> well as alert
> you each time an unauthorized person tried to connect to the app server:
>
> Objects in Policy
> [ App Vendor - Specific phone number vendor will call from ]
> [ App Server - phone number of modem connected to your
> application server ]
>
>
> TeleWall Security Policy
>
>       Source          Destination             Call Type
> Action                Track
>
> 1.    App Vendor              App Server              Modem
> Allow                 Email Staff
> 2.    ANY                     App Server              ANY
> Terminate             Email Staff
>
>
> If you want more information, check out http://www.securelogix.com/tw1
>
> Charles
>
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, August 16, 2000 9:13 AM
> To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
> Subject: ISDN Security
>
>        Can anyone tell me if what I'm trying to do is possible
>         I am setting up a point to point ISDN link between my
> organisation
> and a third party company that needs dialin access into our network for
> application support, but I am looking for a way if possible not
> to let the
> third party dialin without first informing us. I can't put in a time
> restriction because we have a 24hours operations, so they might want to
> dialin any time.
>

___________________________________
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Reply via email to