RE: Allowing scanning from home

["Dan Denton" <ddenton () PAYLESSOFFICE com>]

I have to agree. If it's for testing only and it's a rather benign
process such as port-scanning, what harm could it possible cause? Trying
to compromise a production system, even for testing, is a whole other
matter. 

-----Original Message-----
From: tony tony [mailto:tonytorri () yahoo com] 
Sent: Thursday, October 28, 2004 6:51 PM
To: ericaldrc51 () netscape net; security-basics () securityfocus com
Subject: Re: Allowing scanning from home


Why may I ask you do not agree with this?  I work in the Security Group
and do it all of the time.  Our network is scanned all the time by
hackers. So what is the big deal..if everything is hardened you have
nothing to worry about. 

.net wrote:

> What's the group's consensus on allowing security staff to scan the 
> company's external interfaces from their home, to get a true external 
> assessment.  I personally don't agree with this for audit and other 
> reasons.  Just looking for some other professional viewpoints.  Thx.
>
> __________________________________________________________________
> Switch to Netscape Internet Service.
> As low as $9.95 a month -- Sign up today at 
> http://isp.netscape.com/register
>
> Netscape. Just the Net You Need.
>
> New! Netscape Toolbar for Internet Explorer
> Search from anywhere on the Web and block those annoying pop-ups. 
> Download now at http://channels.netscape.com/ns/search/install.jsp


=====
Tony T. CISSP, CISA, CDP, CIA
Senior IS Security & Risk Manager
360.906.7893 (Work)
Northern Telecom LLP


                
__________________________________
Do you Yahoo!?
Yahoo! Mail Address AutoComplete - You start. We finish.
http://promotions.yahoo.com/new_mail