Managing A Network Vulnerability Assessment

Sample NVA Report 243

to access these devices. Two of the devices are the boundary router interfaces

for CLIENT.

Recommendations

Disable accepting Telnet from all hosts except those who should have access

to make configuration changes and consider some type of Identification and

Authentication (I&A) service to further protect the boundary devices.

Finding 4: Firewall, DMZ, and Proxying

CLIENT does not have a traditional DMZ. Its DMZ is defined as a set of IP

addresses mapped from behind the firewall to be accessible from the Internet.

This configuration places the externally reachable servers inside the perimeter

with the internal network. CLIENT also does not have any application-level

proxying done to inspect inbound or outbound traffic. The firewall does ...