Warning: iconv_mime_decode() [function.iconv-mime-decode]: Malformed string in /home/secureg/public_html/lib/standard.lib.php on line 2251
Network security
Network security

Network security

Secure Home | Search | About
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Network security Chris Guynn 05-21-2007
Posted by =?Utf-8?B?Q2hyaXMgR3V5bm4=?= on May 21, 2007, 11:52 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Here's my situation.

In normal operation, my windows network resides behind a reasnably robust
firewall. I use static IP addresses throughout my organization for an extra
layer of security (no DHCP clients). In addition, I have employed standard
windows best practices for security throughout my organization. Because of a
special event being held on Tuesday and Wednesday of this week I have been
forced to activate a DHCP server and allow people to use my network for
Internet connectivity.

Is there any way that I can authorize the DHCP server to distribute DHCP
addresses and then block those addresses from being able to access any of my
network resources (outside of the firewall/router)? I'm sure it goes without
saying that the information on my network is highly confidential.

Basically, here's what I need:

Maintain the current network topography (no time to implement new
routers/etc...)
Assign addresses through DHCP to random computers attaching directly to my
network.
Block those Addresses from access to all network resources except the
internet/router.

Any help you can provide will be greatly appreciated.

By the way, I do have a reasonable understanding of technical items (MCSE
NT4), but I'm relatively new to the Windows 2000/AD world.

Chris Guynn

Posted by Mostly Gizzards on May 21, 2007, 2:33 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Chris Guynn wrote:
> Here's my situation.
>
> In normal operation, my windows network resides behind a reasnably robust
> firewall. I use static IP addresses throughout my organization for an extra
> layer of security (no DHCP clients). In addition, I have employed standard
> windows best practices for security throughout my organization. Because of a
> special event being held on Tuesday and Wednesday of this week I have been
> forced to activate a DHCP server and allow people to use my network for
> Internet connectivity.
>
> Is there any way that I can authorize the DHCP server to distribute DHCP
> addresses and then block those addresses from being able to access any of my
> network resources (outside of the firewall/router)? I'm sure it goes without
> saying that the information on my network is highly confidential.
>
> Basically, here's what I need:
>
> Maintain the current network topography (no time to implement new
> routers/etc...)
> Assign addresses through DHCP to random computers attaching directly to my
> network.
> Block those Addresses from access to all network resources except the
> internet/router.
>
> Any help you can provide will be greatly appreciated.
>
> By the way, I do have a reasonable understanding of technical items (MCSE
> NT4), but I'm relatively new to the Windows 2000/AD world.
>
> Chris Guynn

Do you have VLAN capable switches?
What kind of firewall do you use?

Posted by =?Utf-8?B?Q2hyaXMgR3V5bm4=?= on May 21, 2007, 4:28 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
> Do you have VLAN capable switches?

No.

> What kind of firewall do you use?

They'll be on the network side of the firewall, so it shouldn't matter,
should it?

Posted by Mostly Gizzards on May 21, 2007, 4:43 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Chris Guynn wrote:
>> Do you have VLAN capable switches?
>
> No.
>
>> What kind of firewall do you use?
>
> They'll be on the network side of the firewall, so it shouldn't matter,
> should it?

I was wondering if there was some small chance you had a DMZ or a
firewall capable of 802.1q

Posted by Mostly Gizzards on May 21, 2007, 4:45 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Chris Guynn wrote:
>> Do you have VLAN capable switches?
>
> No.
>
>> What kind of firewall do you use?
>
> They'll be on the network side of the firewall, so it shouldn't matter,
> should it?

I was wondering if there was some small chance you had a DMZ or a
firewall capable of 802.1q

Similar ThreadsPosted
Network Security May 27, 2005, 1:29 pm
Network Security November 21, 2006, 4:08 pm
network security June 25, 2007, 5:18 am
Network Security Scanner September 5, 2005, 2:15 pm
Network Security Scanner September 5, 2005, 2:15 pm
Local v. Network Security October 24, 2005, 4:32 pm
laptop > network security December 7, 2005, 10:32 am
General Network Security question October 19, 2005, 4:19 am
Very basic network security question November 17, 2005, 6:44 pm
Security: Network Admins vs. SQL Programmers May 23, 2006, 3:47 pm

The site map in XML format XML site map

Contact Us | Privacy Policy