Compaq Lights OUT

[Guest_imported]

Hi

Thought I might try this thread as no one in the general security section answered. Doe's anyone use compaq lights out cards for remote svr management. How safe is it etc if I nat throught our firewall etc?

 

[ChrisRAnthony]

We use Compaq Lights Out cards in all of our Web servers. When you set up the Lights Out Card you are able to apply a user name and password for anybody who needs to access the card. If you then ensure that anybody who works on the server either locks the session or logs off when they have finished, you then have an additional security layer. That is you have to log onto the Lights out card, then log onto the server. To date we have had no problems with security.

 

[jkallen]

The latest ROM for the card adds 128-bit SSL encryption.

 

[mpmartin68]

I'm making an assumption here that you are NAT ing through you firewall to a DMZ. Why don't you connect the RIB board to your enterprise network vice your DMZ. That would be a lot more secure than doing a bunch of translation rules to accomplish the same thing. As far as I can find, the RIB board cannot function as a bridge so it is not an exposable hack point. I would try that...MPM