How Secure is NAT?

[Stuart111]

Hi Folks,

How secure is a network without a firewall and only protected by NAT, but without any port forwarding configured? Can it be compromised in any way?

If you create a port forwarding entry, could that compromise the entire network or just the one machine corresponding to the forwarding entry.

Rgds, Stuart.

 

[jimbopalmer]

Sadly the same way most networks are compromised, someone opens a malicious application from inside.

A forwarded port points to one machine, but that machine may broadcast to others once infected.

Wise users who do not click on things willy-nilly is still you best defense.

I tried to remain child-like, all I acheived was childish.

 

[burtsbees]

Without a fw or IDS/IPS of some sort, you are most definitely vulnerable to application, presentation, session and transport layer attacks.
Remember---for someone to get out, they cross that network boundary and get NATted to your public IP address/addresses, and if that header is messed with, well...

Burt

 

[Stuart111]

Thanks guys for all your answers