Yes that would seem true. But when UpperManagement is the ones saying give them this access and all thier friends or family members in the company access you ability to do this becomes null and void. :)
-----Original Message-----
From: Hennessy, Greg (London) [mailto:[EMAIL PROTECTED]]
Sent: Friday, May 26, 2000 5:37 AM
To: [EMAIL PROTECTED]
Subject: RE: [FW1] Tribe and Quake games
>Date: Tue, 25 Apr 2000 14:21:26 -0500
>From: James Edwards <[EMAIL PROTECTED]>
>Subject: RE: [FW1] Tribe and Quake games
>So, the bottom line is that eliminating Internet gaming with a technical
>solution is just not possible,
I beg to differ, it's trivial to implement. Internal users should not have
direct access to the internet from the desktop period. Any time I've ever
seen it requested, the inabilty to produce a business case to justify it has
been more than enough to stop the request dead.
All browser access should be through a proxy server with proper
authentication. Its going to be a tad hard to play quake/tribe etc online if
the connection attempts cannot leave the LAN in the first place. Allowing
access for non http services such as telnet, icq, irc etc is non sensical
from a security viewpoint.
Here on the other side of the Atlantic, direct desktop access to internet is
very much the exception rather than the rule. The use of caching proxy
servers also has other significant benefits in terms of traffic & content
management.
cheers
Greg
--
Greg Hennessy
E-Security Mechanic Merrill Lynch - HSBC LTD
+44 020 7570 3046
--
**********************************************************************
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the [EMAIL PROTECTED]
This footnote also confirms that this email message has been swept by
MIMEsweeper for the presence of computer viruses.
**********************************************************************
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
