Control over configs

[beth-martin]

I'm thinking of outsourcing my companies security services, anyone have info on how much control there is to change configs on the firewall?

[gfullage · Accepted solution]

PIX v6.2 introduced the ability to do command authentication and authorization for specific commands, either by configuring it locally on the PIX itself or on a external TACACS server.

The following link should tell you everything you need:

http://www.cisco.com/warp/public/110/pix_command.shtml

[crashblaine]

I currently work for a company that handles the WAN security for many fortune 1000 and 500 companies. I am the Sr. Security Ops Engineer and our postion on these matters is one that we definitely listen and work with the customer. We hold frequent calls to discuss their request and explain the ramifications if any so that they understand their vulnerabilities before we allow any changes to be made. We do not allow them hands on control of the firewalls for the simple fact that we have found most people have less then adequate knowledge when it comes to security. Unless you or a member of your team has real world experience with this I would highly suggest outsourcing to start and then perhaps migrate the control back in house as you gain experience.

[lnjogu]

There is a very good articale on this months new security CSO magazine that will guide you to make the best decision. Check the article "Why Outsourcing won't work"

http://www.csoonline.com/read/030103/undercover.html

It is good to evaluate the cost benefits versus what is at stake !

Lawrence

Lnjogu@hotmail.com