Connectivity via Firewall in one direction

Printable View

November 10th, 2023, 06:22 PM
Robandrox

Connectivity via Firewall in one direction

Hi All,

this is my first question in the forum..
In my company quite few servers with Windows Server 2008 (yes, I know!) have been infected with an ransomware. We have 'cleaned' them up, but we have not patched neither hardenized them yet. However, we have been asked to open connectivity from another server to those servers to monitor them. The connectivity will go through a FW (port 135) and the idea is to open the inbound connectivity. Is there any risk in doing so?

Thanks
November 11th, 2023, 09:15 AM
Steve R Jones

Sure there is... Ports are used to get on & off of a machine. A strong password should help avoid any issues.
November 11th, 2023, 10:37 AM
Robandrox

Quote:

Originally Posted by Steve R Jones

Sure there is... Ports are used to get on & off of a machine. A strong password should help avoid any issues.

Thanks Steve for the response.
Maybe I have not explained myself well, so I will reword the question
Connection wants to open from A to B, being B the machine that was infected. This connection will go through a firewall, which will allow port 135 for inbund traffic (A -->B). Is thre any risk in A being infected by B, if the FW only allows inbound traffic from A to B on port 135?