1. I nformation S ecurity G roup E. John Sebes Kroll-O’Gara / ISG 14 July 1999CORBA and Firewalls: Rationale and Specification1 E. John Sebes Kroll-O’Gara Information Security Group

2. I nformation S ecurity G roup E. John Sebes Kroll-O’Gara / ISG 14 July 1999CORBA and Firewalls: Rationale and Specification2 Client and Firewall Dysfunction Internet Client app1.foo.com Client Firewall Obj1 object: Obj1 host: app1.foo.com port: 5374 IOR 5374

3. I nformation S ecurity G roup E. John Sebes Kroll-O’Gara / ISG 14 July 1999CORBA and Firewalls: Rationale and Specification3 Extended IOR Internet Client app1.foo.com Client Firewall Obj1 object: Obj1 host: app1.foo.com port: 5374 host: fw.foo.com port: 5000 IOR 5374 5000

4. I nformation S ecurity G roup E. John Sebes Kroll-O’Gara / ISG 14 July 1999CORBA and Firewalls: Rationale and Specification4 Client and Socks Internet Client app1.foo.com Client Firewall Obj1 object: Obj1 host: app1.foo.com port: 5374 IOR 5374 Socks Proxy

5. I nformation S ecurity G roup E. John Sebes Kroll-O’Gara / ISG 14 July 1999CORBA and Firewalls: Rationale and Specification5 Proxy Server Internet CORBA Proxy Server app1.foo.com Client Firewall Obj1 object: Obj1 host: app1.foo.com port: 5374 host: pxy.foo.com port: 5000 IOR 5374 5000

6. I nformation S ecurity G roup E. John Sebes Kroll-O’Gara / ISG 14 July 1999CORBA and Firewalls: Rationale and Specification6 Proxy Server and Firewall Internet CORBA Proxy Server app1.foo.com Client Firewall Obj1 object: Obj1 host: app1.foo.com port: 5374 host: pxy.foo.com port: 5000 host:fw.foo.com port: 5000 IOR 5374 5000 Could be IIOP/SSL

7. I nformation S ecurity G roup E. John Sebes Kroll-O’Gara / ISG 14 July 1999CORBA and Firewalls: Rationale and Specification7 Proxy Server and Callback Internet CORBA Proxy Server app1.foo.com Client Firewall Obj1 object: Obj1 host: app1.foo.com port: 5374 host: pxy.foo.com port: 5000 IOR 5912 object: Cbk-obj1 host: ws1.bar.com port: 5912 host: pxy.bar.com port: 5000 IOR Cbk-obj1 Firewall 5912 5000

8. I nformation S ecurity G roup E. John Sebes Kroll-O’Gara / ISG 14 July 1999CORBA and Firewalls: Rationale and Specification8 For More Info E. John Sebes Kroll-O’Gara Information Group ejs@securify.com www.securify.com Plug: ISG provides security consulting, architecture, integration for e-commerce, enterprise networks-- Web/object/backend security is a specialty