Little, Craig (SSI-SIAP-NP5) wrote:
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Basic answer - there is NO absolute way of keeping your network
> absolutely secure if you start opening it up! All you can do is
> protect it as well as you possibly can. There are obvious precautions
> you can take though...
>
> *Change the ports used by pcANYWHERE from standard
> (HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\pcAnywhere\System)
> *Enforce the use of the strongest encryption available during the PCA
> session
> *Make sure that terminating the PCA session locks the server
> *Enforce user id's and passwords - and make sure the passwords are
> strong
>
As Craig surely knows already, however, changing ports doesn't usually
do a whole lot of good, because people run port scans against your boxes
anyway.
It's not bad advice, but don't count on it saving you from anything. The
whole message is full of good advice.
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]