I have two networks, one considered secure, lets call it
A and one considered insecure,
B. The software I need to use, uses HSMS, a protocol based on TCP with no security built in.
Now the problem is that the software has a server
a in the secure network
A and needs to connect to clients
b1, b2, ... in
B. The requirement from the software is that I open one port with full TCP access. But that is too risky as the whole network
B and the clients can not be trusted.
My question now is, is there a way to use something like an application layer firewall to filter everything based on the protocol so that the open port is not used for anything else.
Especially is there a simple, read not too involved, way to create a protocol filter for HSMS in such a firewall.
Another requirement is that the clients are not allowed to talk to each other through that proxy.
Update Moved to Serverfault: http://serverfault.com/questions/489315/secure-tcp-based-protocol-through-an-application-layer-firewall