[Full-disclosure] Autosys Information and risks

[spclfx <jessevalentin@xxxxxxxxx>]

Hello,
   
  I am looking for some information on Autosys and some of the risks associated 
with allowing this to run in an environment.
   
  Is it necessary to allow this traffic to run bi-directionally even with a 
stateful firewall? I am unsure if monitored machines ever need to initiate 
separate connections back to the master autosys server.
   
  Does anyone know if Cisco PIX firewalls can maintain state information for 
these connections? I know PIX fw's dont maintain state for certain types of 
protocols, was wondering if Autosys traffic was included.
   
  Does anyone know of a location where I can get some technical whitepapers on 
this service and how it functions from a lower layer perspective? 
   
  Thanks,
   
  JV


-------------------------------------------------------------
This e-mail and any attachments may be confidential or legally privileged. If 
you received this message in error or are not the intended recipient, you 
should destroy the e-mail message and any attachments or copies, and you are 
prohibited from retaining, distributing disclosing or using any information 
contained herein.  Please inform the sender of the erroneous delivery by return 
e-mail. Thank you for your cooperation.
-------------------------------------------------------------
                        
---------------------------------
Yahoo! Shopping
 Find Great Deals on Holiday Gifts at Yahoo! Shopping

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/