Re: securing X.25 connection

[Ted Doty <ted () iss net>]

At 11:24 AM 7/30/98 +0800, g  wrote:

> I have a requirement to connect our internal system (IP based) to a data
> feed  through a X.25 connection. Any advise on how to secure this X.25
> connection?

First step should be to collect all the addresses you're willing to accept
X.25 calls from.  Hard code these into the config (your router should allow
you to do this).  This will at least limit access to known sources.

The next question to ask is how much you trust those sources.  If they are
remote offices of your organization, you might be good to go.  If they're
other organizations, you'll probably want some kind of firewall (more
specifically, *I'd* want a firewall; your mileage may vary).

- Ted

-----------------------------------------------------------------------
Ted Doty, Internet Security Systems          | Phone: +1 678 443-6000
6600 Peachtree Dunwoody Road, 300 Embassy Row | Fax:   +1 678 443-6479
Atlanta, GA 30328  USA                       | Web: http://www.iss.net
-----------------------------------------------------------------------
PGP key fingerprint: 362A EAC7 9E08 1689  FD0F E625 D525 E1BE