Securing OOB

Mon Apr 23 12:58:16 UTC 2012

Thanks for starting this discussion Eric. We're just starting to look at upgrading our oob console network and wondering how to provide access from LAN based application monitoring platforms. We're currently looking at installing a VPN appliance  between our production network and the "oob network".

-Steve

-----Original Message-----
From: Eric [mailto:eric at roxanne.org] 
Sent: Monday, April 23, 2012 8:40 AM
To: nanog at nanog.org
Subject: Securing OOB

Hello,

It seems that the current practice is to use a DSL line, as opposed to a modem, for accessing an OOB a console server at a remote colo.  From a security standpoint, what do people generally do - trust the console server, repurpose an old linksys box from my house or put in a full firewall?  

Eric :)