Overclock.net › Forums › Components › Network Hardware › windows xp security issues
New Posts  All Forums:Forum Nav:

windows xp security issues

post #1 of 4
Thread Starter 
Ok so I work for company A and we have an IT guys who cones in and does freelance work when we need it. Now I didn't set this network up but I have heard out IT guy say some strange things and I am wondering if anyone can confirm my thinking.

I'm assuming best case scenario here where all the computers run through the server for internet and the server is on a hardware firewall. ( I don't actually think any of this is true but I'm hoping)

First
Our computers should be fine running xp and don't need an is upgrade because our server has windows 7 on it

Second
We don't need antivirus on any computer but the server again because the server has it on it

Now I've only got 2 years experience studying info sec and networking but both of these statements seem really off the wall and compeletely wrong to me for a number of reasions

Can anyone confirm what I'm thinking that our it guy is full of it or am I missing something
post #2 of 4
I'm gonna call full of it. I see a few problems with this situation, assuming your best case scenario, which may not actually be the case.

1. Your firewall security against active attacks will only be as good as the packet filtering on your hardware firewall. Granted this is always true, but if someone defeats it, you have no second level of security on your client machines connecting to the Internet if they have no security software installed.

2. You have no protection against distributed threats that may make it past the server to the client machines (e.g., phishing emails, virus attachments). No offense to your peers at company A but people are stupid and distributed threats get smarter all the time. Antivirus software on the server will do no good if a virus makes it to one of the client machines and gets activated.

3. Windows XP still has a huge corporate install base. Hackers will still be looking for vulnerabilities for a long time. They'll probably look even harder now that Microsoft has ended security updates. All the more reason to secure independently any machines running Windows XP that connect to the Internet, even if they do so through a server.

I'm sure others here will come up with plenty more issues. Sounds like it might be time to get a second opinion. wink.gif
Kid A
(8 items)
 
Rusty Cage
(19 items)
 
Vampire Money
(11 items)
 
CPUMotherboardGraphicsRAM
Core 2 Extreme QX9650 ASRock 4CoreDual-SATA2 Vintage AGP--Riva TNT2 to Radeon HD 3850 and 4670! PQI Turbo 
RAMCoolingOSPower
PQI Turbo Cooler Master Hyper 212 EVO WinXP Pro SP3 SeaSonic S12II 380W 
CPUMotherboardGraphicsGraphics
Intel Core i5-3570S Ivy Bridge CPU ASUS P8P67 Deluxe MSI R7970 Lightning Sapphire Radeon Vapor-X HD 7970 OC 
RAMHard DriveHard DriveOptical Drive
G.SKILL F3-17000CL9D-8GBXM Samsung 840 Pro Seagate Barracuda ST3808110AS HP Lightscribe DVD-RW 
CoolingOSOSOS
Silverstone Heligon HE02 Windows 10 Enterprise 64-bit Windows 7 Enterprise 64-bit Windows XP Professional 32-bit 
MonitorKeyboardPowerCase
NEC EA275WMi Corsair Strafe Cherry MX Red Corsair AX860i Fractal Design Define R4 
MouseMouse PadAudio
Logitech G400 Corsair Gaming MM300 Bose SoundTrue Around-Ear Headphones 
CPUMotherboardRAMHard Drive
Core i7-5820K ASUS X99-A Crucial Ballistix Sport Sandisk Ultra Plus 
CoolingOSOSMonitor
Corsair H105 Windows 7 Enterprise Windows 8.1 Professional Samsung 206BW 
KeyboardPowerCase
HP Elite Wireless Rosewill Capstone 750W Dimastech Easy V3.0 
  hide details  
Reply
Kid A
(8 items)
 
Rusty Cage
(19 items)
 
Vampire Money
(11 items)
 
CPUMotherboardGraphicsRAM
Core 2 Extreme QX9650 ASRock 4CoreDual-SATA2 Vintage AGP--Riva TNT2 to Radeon HD 3850 and 4670! PQI Turbo 
RAMCoolingOSPower
PQI Turbo Cooler Master Hyper 212 EVO WinXP Pro SP3 SeaSonic S12II 380W 
CPUMotherboardGraphicsGraphics
Intel Core i5-3570S Ivy Bridge CPU ASUS P8P67 Deluxe MSI R7970 Lightning Sapphire Radeon Vapor-X HD 7970 OC 
RAMHard DriveHard DriveOptical Drive
G.SKILL F3-17000CL9D-8GBXM Samsung 840 Pro Seagate Barracuda ST3808110AS HP Lightscribe DVD-RW 
CoolingOSOSOS
Silverstone Heligon HE02 Windows 10 Enterprise 64-bit Windows 7 Enterprise 64-bit Windows XP Professional 32-bit 
MonitorKeyboardPowerCase
NEC EA275WMi Corsair Strafe Cherry MX Red Corsair AX860i Fractal Design Define R4 
MouseMouse PadAudio
Logitech G400 Corsair Gaming MM300 Bose SoundTrue Around-Ear Headphones 
CPUMotherboardRAMHard Drive
Core i7-5820K ASUS X99-A Crucial Ballistix Sport Sandisk Ultra Plus 
CoolingOSOSMonitor
Corsair H105 Windows 7 Enterprise Windows 8.1 Professional Samsung 206BW 
KeyboardPowerCase
HP Elite Wireless Rosewill Capstone 750W Dimastech Easy V3.0 
  hide details  
Reply
post #3 of 4
Thread Starter 
Thanks for your resopnce that's what I was thinking, I couldn't think of any reasion not to have antivirus on the xp machines

I'm not sure if the server functions as a mail server or not I haven't had much of a chance to look around on it or the network

Also with each xp machine having access to the server drives wouldn't it be a simple process to infect the server from the xp machines with no security on them?
post #4 of 4
You're welcome.
Quote:
Originally Posted by racer86 View Post

Also with each xp machine having access to the server drives wouldn't it be a simple process to infect the server from the xp machines with no security on them?

Absolutely. Doesn't even have to come from the network--infected flash drives are just as big a problem. Someone pops one into a client and you've got your very own zombie net. biggrin.gif
Kid A
(8 items)
 
Rusty Cage
(19 items)
 
Vampire Money
(11 items)
 
CPUMotherboardGraphicsRAM
Core 2 Extreme QX9650 ASRock 4CoreDual-SATA2 Vintage AGP--Riva TNT2 to Radeon HD 3850 and 4670! PQI Turbo 
RAMCoolingOSPower
PQI Turbo Cooler Master Hyper 212 EVO WinXP Pro SP3 SeaSonic S12II 380W 
CPUMotherboardGraphicsGraphics
Intel Core i5-3570S Ivy Bridge CPU ASUS P8P67 Deluxe MSI R7970 Lightning Sapphire Radeon Vapor-X HD 7970 OC 
RAMHard DriveHard DriveOptical Drive
G.SKILL F3-17000CL9D-8GBXM Samsung 840 Pro Seagate Barracuda ST3808110AS HP Lightscribe DVD-RW 
CoolingOSOSOS
Silverstone Heligon HE02 Windows 10 Enterprise 64-bit Windows 7 Enterprise 64-bit Windows XP Professional 32-bit 
MonitorKeyboardPowerCase
NEC EA275WMi Corsair Strafe Cherry MX Red Corsair AX860i Fractal Design Define R4 
MouseMouse PadAudio
Logitech G400 Corsair Gaming MM300 Bose SoundTrue Around-Ear Headphones 
CPUMotherboardRAMHard Drive
Core i7-5820K ASUS X99-A Crucial Ballistix Sport Sandisk Ultra Plus 
CoolingOSOSMonitor
Corsair H105 Windows 7 Enterprise Windows 8.1 Professional Samsung 206BW 
KeyboardPowerCase
HP Elite Wireless Rosewill Capstone 750W Dimastech Easy V3.0 
  hide details  
Reply
Kid A
(8 items)
 
Rusty Cage
(19 items)
 
Vampire Money
(11 items)
 
CPUMotherboardGraphicsRAM
Core 2 Extreme QX9650 ASRock 4CoreDual-SATA2 Vintage AGP--Riva TNT2 to Radeon HD 3850 and 4670! PQI Turbo 
RAMCoolingOSPower
PQI Turbo Cooler Master Hyper 212 EVO WinXP Pro SP3 SeaSonic S12II 380W 
CPUMotherboardGraphicsGraphics
Intel Core i5-3570S Ivy Bridge CPU ASUS P8P67 Deluxe MSI R7970 Lightning Sapphire Radeon Vapor-X HD 7970 OC 
RAMHard DriveHard DriveOptical Drive
G.SKILL F3-17000CL9D-8GBXM Samsung 840 Pro Seagate Barracuda ST3808110AS HP Lightscribe DVD-RW 
CoolingOSOSOS
Silverstone Heligon HE02 Windows 10 Enterprise 64-bit Windows 7 Enterprise 64-bit Windows XP Professional 32-bit 
MonitorKeyboardPowerCase
NEC EA275WMi Corsair Strafe Cherry MX Red Corsair AX860i Fractal Design Define R4 
MouseMouse PadAudio
Logitech G400 Corsair Gaming MM300 Bose SoundTrue Around-Ear Headphones 
CPUMotherboardRAMHard Drive
Core i7-5820K ASUS X99-A Crucial Ballistix Sport Sandisk Ultra Plus 
CoolingOSOSMonitor
Corsair H105 Windows 7 Enterprise Windows 8.1 Professional Samsung 206BW 
KeyboardPowerCase
HP Elite Wireless Rosewill Capstone 750W Dimastech Easy V3.0 
  hide details  
Reply
New Posts  All Forums:Forum Nav:
  Return Home
  Back to Forum: Network Hardware
Overclock.net › Forums › Components › Network Hardware › windows xp security issues