[fw-wiz] Communication Device Protocols from External router direct through Firewall

[Alan.Freiman@tevausa.com]

I am trying to determine the risks of
allowing the following protocols from my external routers directly through
to my internal LAN versus setting up a DMZ proxy:

SNMP (polling / traps) Syslog, SSH,
Tacacs, and Netflow

I know that SNMP and Netflow might provide
infrastructure information, but I fail to see how a DMZ proxy makes this
activity more secure given that information from the DMZ to the firewall
would not be encrypted.

Furthermore, SSH and Tacacs are already
fully encrypted.

Any advice would be appreciated.

Thanks!

Alan
This message is intended solely for the designated recipient(s). It may contain
confidential or proprietary information and may be subject to attorney-client
privilege or other confidentiality protections. If you are not a designated
recipient you may not review, copy or distribute this message.
If you receive this in error, please notify the sender by reply e-mail
and delete this message. Thank you.

_______________________________________________
firewall-wizards mailing list
firewall-wizards@listserv.icsalabs.com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards