Building an Intranet

Building an Intranet

Secure Home | Search | About
 General Computer Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Building an Intranet GLSmyth 01-03-2006
Posted by GLSmyth on January 3, 2006, 11:29 am
If you were  Registered and logged in, you could reply and use other advanced thread options
I am going to put together an Intranet for our company and would like
some feedback on my plans. Since I do not have as good a grasp on
security issues as people here I expect to hear some problems with my
idea, and hope to hear best practices solutions.

Our company has three offices, one in Marylans, one in Alabama, and one
in Kentucky. I am thinking to get a domain, secure it, and allow
access to the website only from the three IP Addresses.

Would this work as far as placing sensitive company information that
would be shared only within the organization? If there is a problem
with doing things this way I would greatly appreciate knowing where the
problems lie and how this could better be done.

Cheers -

george


Posted by Unruh on January 3, 2006, 12:21 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

>I am going to put together an Intranet for our company and would like
>some feedback on my plans. Since I do not have as good a grasp on
>security issues as people here I expect to hear some problems with my
>idea, and hope to hear best practices solutions.

>Our company has three offices, one in Marylans, one in Alabama, and one
>in Kentucky. I am thinking to get a domain, secure it, and allow
>access to the website only from the three IP Addresses.

That is no longer and intranet, since you will probably be connecting the
three via the internet, unless you plan on leasing a dedicated line between
them.
As soon as you are on the internet, the danger increases bya very very
large factor.

a) Put each site behind a firewall. Note I assume that the three sites each
have more than one computer. Since those computers probably now already go
onto the iternet, they should already be behind a firewall.
b) "a" domain? YOu have three wildly different sites, going through
different service providers.
c) You are not very clear as to what it is that you are trying to
accomplish. That has to be clear first.


>Would this work as far as placing sensitive company information that
>would be shared only within the organization? If there is a problem
>with doing things this way I would greatly appreciate knowing where the
>problems lie and how this could better be done.

>Cheers -

>george


Posted by Dave on January 3, 2006, 12:25 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
GLSmyth wrote:
> I am going to put together an Intranet for our company and would like
> some feedback on my plans. Since I do not have as good a grasp on
> security issues as people here I expect to hear some problems with my
> idea, and hope to hear best practices solutions.

The blunt answer is if you do not know sufficient, then you should not
be doing it. It will most likely be your job on the line if all the
companies secrets get passed around the Internet.

> Our company has three offices, one in Marylans, one in Alabama, and one
> in Kentucky. I am thinking to get a domain, secure it, and allow
> access to the website only from the three IP Addresses.

What is going to restrict the IP range? A software firewall? A hardware
firewall?

Assuming you sort out a decent method of firewallling, then you are
still going to have to contend with people inside the company getting
information that they should not.

It is not something to take lightly.


--
Dave K

http://www.southminster-branch-line.org.uk/

Please note my email address changes periodically to avoid spam.
It is always of the form: month-year@domain. Hitting reply will work
for a couple of months only. Later set it manually. The month is
always written in 3 letters (e.g. Jan, not January etc)

Posted by Volker Birk on January 3, 2006, 1:02 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
> Our company has three offices, one in Marylans, one in Alabama, and one
> in Kentucky. I am thinking to get a domain, secure it, and allow
> access to the website only from the three IP Addresses.

Please consider to use an encrypted VPN.

Yours,
VB.
--
Ein vision statement ist in aller Regel planfreies Gelalle einer Horde
realitätsferner Spinner.
        Dietz Pröpper in d.a.s.r

Similar ThreadsPosted
Building a CERT May 5, 2004, 5:11 am
Security Ideas for new App I'm Building? July 30, 2007, 4:39 pm

The site map in XML format XML site map

Contact Us | Privacy Policy