09-28-2004 08:27 AM - edited 03-02-2019 06:49 PM
I am concerned about the reported security holes which exist in MS Internet Explorer. Am I correct in thinking that these holes are plugged when IE is being run on a system which is behind my PIX firewall, or do security holes still exist.
09-28-2004 08:47 AM
The holes and security issues are still there, as long as you don't patch them, however, with a properly configured firewall you can mitigate the risks so these security flaws aren't exploited from outside your network.
Of course this will do nothing to protect the system from users (trusted or not) inside your network.
09-28-2004 09:55 AM
would you consider a pix firewall (501/506/515) with an out-of-the-box, default configuration, a "properly
configured" firewall, and if not, what pix ios modifications would you recommend .
09-28-2004 11:00 AM
I can't can give you a definite "create these rules and it'll fix everything on your firewall so you can ignore the inherent OS vulnerbilities". You'll have research where your boxes are suspectible and see if you can come up with a rule to mitigate that.
Keep in mind though, there are some things a firewall just can't protect your network from. For example, if user Bob gets an email with an attachment that say's "click here for a prize". User Bob just might click that link and there's no telling what trojan or virus or worm he could let loose on your firewall protected network.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide