Best Netware Security Solution

[gillis]

Hello,

I am administering a Netware 5.1 LAN and currently only use tape backups as a security measure. We have a Cisco router to the outside using NAT to find the 25+ users who have been given internet access. We also are using the corporate edition of Norton antivirus which has saved us a time or two. So far we have managed to avoid a serious problem, but that obviously can't last. I have the $$$ to purchase and implement a solid security system; however, recent articles have seemed to downplay the effectiveness of traditional firewalls/content filtering, etc...

Can someone please give suggestions on my best direction for not only protecting this system from hardware failure, but also outside hacking/ internal surfing, etc...?

Thanks for your input. JGiles

 

[nolapeck]

Here is a firewall that I have had no problems running.

http://www.sonicwall.com/analyzer/analyzer.asp

I would spend more time writing up an internal security policy/handbook. Let the users know what is expected of them and what is acceptable use of the company network/resources and your job becomes easier(for the most part).

Once you think the policy is finished, run it by management. Be ready to explain the reasons behind all policies.

Here is a good site:

http://rr.sans.org/policy/considerations.php

Patrick

 

[gillis]

Thanks Patrick,

I agree with the need for a strong use policy and, in fact, have a draft in progress. However, even with that in place I feel a need to address the hardware and software contingencies also. Thanks for the tip on Sonicwall; I'll follow up on that.

JGiles

 

[DrGreen26]

Ok, security.. Since you are running novell, nice thing is that your file server has some level of protection as long as no one other than the admins have admin rights.

For a firewall, best on the market is Checkpoint. I had researched several products, and they by far come out on top, and the nice thing about it is, you can run it on an inexpensive Compaq server. you can run this with Viruswall..very good setup to protect you.

Option 2, Bordermanager is another option. The goal I would recommend is that the more directory enabled something is, the easier it will be to manager and

Checkpoint is directory enabled so it will work with NDS as well. You just need to determine the level of protection based on what it is you are protecting.

example: Are you keeping people out of the network from the outside? Are there things to protect inside? So when you can answer that and the information you are protecting, then you can make a sound judgment on what to put in. Also, never install something based on a name, research what it is you are wanting to achieve, and implement the SOLUTION that meets or exceeds your goals. It should also integrate easily into your existing network without having to re-invent the wheel.

One recommendation I do have, do not install anything that is Microsoft based. As we all know, hackers love MS products and security is not their highlight.

HTH

Mark C. Greenwood, CNE
m_jgreenwood@yahoo.com

CNE 4.11 and CNE 5 certified. BS Degree in MIS. Working in the industry for 8 years.

I work with NT servers, NDS for NT as well.