My advice:
- Do not enable video conferencing (H.323). It's too difficult to secure and
not worth it anyway (if they really need video have them justify isdn-based
conferencing).
- The real value with NetMeeting is with data conferencing. This only
requires T.120 (port 1503 if I recall correctly). And then only open to
specific conference servers. This will give them app sharing and whiteboard.
Have your users get business quality audio with a telephone (conference
service if multi-party is needed).
- Require password protected conferences.
- Present crop of T,120 conference servers still do not support encryption
(as far as I know, could be wrong) so you are still taking a risk. So you
may want to use VPNs to secure the path to the server.
Larry
----- Original Message -----
From: "Sadler, Connie J" <[EMAIL PROTECTED]>
To: "Chris Malott" <[EMAIL PROTECTED]>; "Michael T. Babcock"
<[EMAIL PROTECTED]>; "Paul D. Robertson" <[EMAIL PROTECTED]>
Cc: "Firewalls (E-mail)" <[EMAIL PROTECTED]>
Sent: Thursday, May 10, 2001 7:51 PM
Subject: RE: Microsoft Netmeeting
>
> Some of us would really like to know what the risks are with Netmeeting.
We
> get requests for it frequently - through the firewall, and would like a
> configuration that would allow that, but haven't found a secure way to do
it
> yet...
>
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
