FW: ISDN Security

2000-08-21 Thread Charles Gatrelle

Will the access-list be based on phone number or destination phone number,
and, will the device alert the admin of failed or successful attempts via
email?

Charles

-Original Message-
From: Josh Duffek [mailto:[EMAIL PROTECTED]]
Sent: Friday, August 18, 2000 4:18 PM
To: Charles Gatrelle; [EMAIL PROTECTED]
Subject: RE: ISDN Security


You could also use time based access-lists.  When they will be able to
connect but their traffic will not route.

http://www.cisco.com/warp/public/793/access_dial/10.html

Josh

> -Original Message-
> From: Charles Gatrelle [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, August 16, 2000 11:16 AM
> To: [EMAIL PROTECTED]
> Subject: RE: ISDN Security
>
>
> Michael,
>
> I think a possible solution to your problem is to use a TeleWall
> to monitor
> those lines (I am not familiar with ISDN lines, so the example is for an
> analog modem).
>
> If you added the following rule to your TeleWall security policy it would
> alert you each time the vendor connected to the app server, as
> well as alert
> you each time an unauthorized person tried to connect to the app server:
>
> Objects in Policy
> [ App Vendor - Specific phone number vendor will call from ]
> [ App Server - phone number of modem connected to your
> application server ]
>
>
> TeleWall Security Policy
>
>   Source  Destination Call Type
> ActionTrack
>
> 1.App Vendor  App Server  Modem
> Allow Email Staff
> 2.ANY App Server  ANY
> Terminate Email Staff
>
>
> If you want more information, check out http://www.securelogix.com/tw1
>
> Charles
>
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, August 16, 2000 9:13 AM
> To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
> Subject: ISDN Security
>
>Can anyone tell me if what I'm trying to do is possible
> I am setting up a point to point ISDN link between my
> organisation
> and a third party company that needs dialin access into our network for
> application support, but I am looking for a way if possible not
> to let the
> third party dialin without first informing us. I can't put in a time
> restriction because we have a 24hours operations, so they might want to
> dialin any time.
>

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: ISDN Security

2000-08-16 Thread bellis

TACACS+

-Brad
<[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
>
>   Hello all,
>
>Can anyone tell me if what I'm trying to do is possible
> I am setting up a point to point ISDN link between my organisation
> and a third party company that needs dialin access into our network for
> application support, but I am looking for a way if possible not to let the
> third party dialin without first informing us. I can't put in a time
> restriction because we have a 24hours operations, so they might want to
> dialin any time.
>
>
> Thanks in advance
> Michael
>
>
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> ---


___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: ISDN Security

2000-08-16 Thread Charles Gatrelle

Michael, 

I think a possible solution to your problem is to use a TeleWall to monitor
those lines (I am not familiar with ISDN lines, so the example is for an
analog modem).

If you added the following rule to your TeleWall security policy it would
alert you each time the vendor connected to the app server, as well as alert
you each time an unauthorized person tried to connect to the app server:

Objects in Policy
[ App Vendor - Specific phone number vendor will call from ]
[ App Server - phone number of modem connected to your application server ]


TeleWall Security Policy

Source  Destination Call Type
Action  Track

1.  App Vendor  App Server  Modem
Allow   Email Staff
2.  ANY App Server  ANY
Terminate   Email Staff


If you want more information, check out http://www.securelogix.com/tw1

Charles

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]
Sent: Wednesday, August 16, 2000 9:13 AM
To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
Subject: ISDN Security



  Hello all,

   Can anyone tell me if what I'm trying to do is possible
I am setting up a point to point ISDN link between my organisation 
and a third party company that needs dialin access into our network for 
application support, but I am looking for a way if possible not to let the 
third party dialin without first informing us. I can't put in a time 
restriction because we have a 24hours operations, so they might want to 
dialin any time.


Thanks in advance
Michael
   


___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: ISDN Security

2000-08-16 Thread David Jones

Unplug the phone line until they call you?

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]
Sent: Wednesday, August 16, 2000 10:13 AM
To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
Subject: ISDN Security



  Hello all,

   Can anyone tell me if what I'm trying to do is possible
I am setting up a point to point ISDN link between my organisation 
and a third party company that needs dialin access into our network for 
application support, but I am looking for a way if possible not to let the 
third party dialin without first informing us. I can't put in a time 
restriction because we have a 24hours operations, so they might want to 
dialin any time.


Thanks in advance
Michael
   


___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: ISDN Security

2000-08-16 Thread Ajaz Nawaz

As for as I'm aware you cannot tweek what times a remote site dials into your
central site.

It may have to involve a manual process.

Ajaz

[EMAIL PROTECTED] wrote:

>   Hello all,
>
>Can anyone tell me if what I'm trying to do is possible
> I am setting up a point to point ISDN link between my organisation
> and a third party company that needs dialin access into our network for
> application support, but I am looking for a way if possible not to let the
> third party dialin without first informing us. I can't put in a time
> restriction because we have a 24hours operations, so they might want to
> dialin any time.
>
> Thanks in advance
> Michael
>
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> ---



___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: ISDN Security

2000-08-16 Thread Ajaz Nawaz

As for as I'm aware you cannot tweek what times a remote site dials into your
central site.

It may have to involve a manual process.

Ajaz

[EMAIL PROTECTED] wrote:

>   Hello all,
>
>Can anyone tell me if what I'm trying to do is possible
> I am setting up a point to point ISDN link between my organisation
> and a third party company that needs dialin access into our network for
> application support, but I am looking for a way if possible not to let the
> third party dialin without first informing us. I can't put in a time
> restriction because we have a 24hours operations, so they might want to
> dialin any time.
>
> Thanks in advance
> Michael
>
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> ---



___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: ISDN Security

2000-08-16 Thread Ajaz Nawaz

OOPS

b***dy mail server ;-)

Ajaz Nawaz wrote:

> As for as I'm aware you cannot tweek what times a remote site dials into your
> central site.
>
> It may have to involve a manual process.
>
> Ajaz
>
> [EMAIL PROTECTED] wrote:
>
> >   Hello all,
> >
> >Can anyone tell me if what I'm trying to do is possible
> > I am setting up a point to point ISDN link between my organisation
> > and a third party company that needs dialin access into our network for
> > application support, but I am looking for a way if possible not to let the
> > third party dialin without first informing us. I can't put in a time
> > restriction because we have a 24hours operations, so they might want to
> > dialin any time.
> >
> > Thanks in advance
> > Michael
> >
> >
> > ___
> > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> > FAQ, list archives, and subscription info: http://www.groupstudy.com
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> > ---
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> ---



___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: ISDN Security

2000-08-16 Thread Ajaz Nawaz

As for as I'm aware you cannot tweek what times a remote site dials into your
central site.

It may have to involve a manual process.

Ajaz

[EMAIL PROTECTED] wrote:

>   Hello all,
>
>Can anyone tell me if what I'm trying to do is possible
> I am setting up a point to point ISDN link between my organisation
> and a third party company that needs dialin access into our network for
> application support, but I am looking for a way if possible not to let the
> third party dialin without first informing us. I can't put in a time
> restriction because we have a 24hours operations, so they might want to
> dialin any time.
>
> Thanks in advance
> Michael
>
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> ---



___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: ISDN Security

2000-08-16 Thread Ajaz Nawaz

As for as I'm aware you cannot tweek what times a remote site dials into your
central site.

It may have to involve a manual process.

Ajaz

[EMAIL PROTECTED] wrote:

>   Hello all,
>
>Can anyone tell me if what I'm trying to do is possible
> I am setting up a point to point ISDN link between my organisation
> and a third party company that needs dialin access into our network for
> application support, but I am looking for a way if possible not to let the
> third party dialin without first informing us. I can't put in a time
> restriction because we have a 24hours operations, so they might want to
> dialin any time.
>
> Thanks in advance
> Michael
>
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> ---



___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: ISDN Security

2000-08-16 Thread Ajaz Nawaz

As for as I'm aware you cannot tweek what times a remote site dials into your
central site.

It may have to involve a manual process.

Ajaz

[EMAIL PROTECTED] wrote:

>   Hello all,
>
>Can anyone tell me if what I'm trying to do is possible
> I am setting up a point to point ISDN link between my organisation
> and a third party company that needs dialin access into our network for
> application support, but I am looking for a way if possible not to let the
> third party dialin without first informing us. I can't put in a time
> restriction because we have a 24hours operations, so they might want to
> dialin any time.
>
> Thanks in advance
> Michael
>
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> ---



___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: ISDN Security

2000-08-16 Thread Ajaz Nawaz

As for as I'm aware you cannot tweek what times a remote site dials into your
central site.

It may have to involve a manual process.

Ajaz

[EMAIL PROTECTED] wrote:

>   Hello all,
>
>Can anyone tell me if what I'm trying to do is possible
> I am setting up a point to point ISDN link between my organisation
> and a third party company that needs dialin access into our network for
> application support, but I am looking for a way if possible not to let the
> third party dialin without first informing us. I can't put in a time
> restriction because we have a 24hours operations, so they might want to
> dialin any time.
>
> Thanks in advance
> Michael
>
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> ---



___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



ISDN Security

2000-08-16 Thread michael . ibidunni


  Hello all,

   Can anyone tell me if what I'm trying to do is possible
I am setting up a point to point ISDN link between my organisation 
and a third party company that needs dialin access into our network for 
application support, but I am looking for a way if possible not to let the 
third party dialin without first informing us. I can't put in a time 
restriction because we have a 24hours operations, so they might want to 
dialin any time.


Thanks in advance
Michael
   


___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]