RPAD deployment

[ibucur]

Hello

I would like to ask for an advice regarding the deployment of RPAD 4.0/4.1

In all the documentations that I had read, the possible scenarios include at least 1 firewall.

Do you think that a deployment of the RPAD without beeing behind a firewall can be less secure and can compromise the internal corporate LAN?

Thank you in advance for your support.

[simons3 · Accepted solution]

Yep - a few university customer deployed the RPAD in this way on the public firewall with being in a DMZ and had issues a few days later. Look at the security fixes in both 4.1/4.0.1. Most of them were found through internal testing, but some were reported by customers. Being behind a firewall does help on the scanning and surface attacks against the RPAD. Ports need to be opened to allow communication, but behind a firewall you can close off the unneeded ports which can't be closed ont he RPAD for example.

S.

[ibucur]

Thank you for your answer

In my scenario the RPAD is intended to be placed in public internet, without any firewall in front of it, so I think even worst that the case you had detailed.

I kindly ask you if you can provide a link to the " security fixies" document.

Best regards,

[simons3]

Sorry - I had thought this would be included in the release notes for the RPAD. Sadly it is not...

S.

[ibucur]

No problem 

Thank you for your time