Re: Philosophical Question: Inheriting a Firewall

[Roger Walkup <rwalkup@cheqnet.net>]

Nick,

I go back to my US Navy days (1980s) when it comes to matters of security. 
While *some* people (dipsh*t officers mostly) were a bit lax, the Navy as a
whole had quite tight policies.  If a Radioman who had the radio shack door
combo and the combinations of *any* crypto safes transfered, all combinations
were changed that day.  This wasn't a reflection on that person, just policy. 
It was the same with other security systems.  

With that in mind, I'd say wipe it and start fresh.  Aside from the former
admin person, there may be other unauthorized (read "script kiddies") people
who have gained access some time in the past.  This is a great time to ensure
they're not there, especially if your client is counting on you to provide a
secure, clean system.

Roger