This month's article continues from last month. In this article we examine the split network architecture that CyberSoft has implemented at their corporate headquarters and how that design can be adapted by you for added security. You may remember that CyberSoft split their network into two separate networks. Our IEN network is currently only a few Sunmicro Sparc systems in a rack. The system is programmed to be paranoid and will not allow outsiders to login from the Internet via telnet or ftp.
Outsiders can only see our web pages.
These systems can not be seen from the Internet and are used by CyberSoft personnel to access the Internet. There is no connection from the IEN network to the IIN network. If data has to move from the IIN to the IEN it is put on an 8mm tape and copied over. An addition feature of the IEN is that email is split off of the primary network into a separate network. This proved useful when earlier this week our local Bell Operating Company physically broke the line connecting us to Net Access.