Network Security, Firewalls, and VPNs, 3rd Edition

Hosts: Local-Only or Remote and Mobile

When designing network security, focus on the function—as well as the physical and logical location—of each device. When a host is local and communicates only with other local hosts, then you can use slightly less stringent security on internal communications. However, when a host is remote, mobile, or otherwise outside of the private network, use significant additional precautions.

Once you allow remote access, you lose the benefit of the physical access controls. Once you support remote connectivity, a hacker or intruder need no longer be physically present in a facility to launch an attack. Thus, remote access is a risk, and it lowers the overall security of an environment. To compensate for this security ...