Securing server to strict?

[IRLASCHU]

Hi all,

Currently the company I work for has a ZXWall Zywall 70 UTM Firewall. This is protecting our network in all locations. I intent to of course secure our servers also internally and externally. The supplier who supplied the firewall tells me there is no need to secure anymore.

I disagree! Everything needs to be secured. Contingency needs always to be planned.
Activate Windows Firewall on W2K3 servers and IPtables, IPchain on all Unix/Linux servers.

What would you be your thought on this security matter?
Am I over secure or would you agree is needed.


Alex

 

[Ed2020]

My initial thoughts are I'd want the supplier to give specific reasons *why* you don't need to add any further security.

If I understand correctly the firewall is providing protection for traffic coming from sources external to your company's LAN, but there is no security for traffic originating from machines on your internal network. If I have understood correctly is the vendor suggesting you ignore any potential threats from internal users (either intentional or otherwise)?

Ed Metcalfe.

Please do not feed the trolls.....

 

[IRLASCHU]

Hi Ed2020,

Thanks for the response. I fully agree and I'm going to give the order to the supplier to secure the servers and I will secure all other servers.

Thanks!

Alex

 

[Ed2020]

Alex,

You're welcome.

It seems like odd advice though (especially if you have already bought the product). I'd still ask for their reasoning. Maybe the product is doing more than you realise and their advice is justified?

Ed Metcalfe.

Please do not feed the trolls.....