Internal network node with dedicated firewall

A method of managing access to a network attached device (NAD) in a network arrangement including a first group of nodes defining an internal network and a second group of nodes defining an external network, the external network being connected in communication with the internal network by an intermediate node including a bastion firewall for protecting the nodes of the internal network from unauthorized communication originating at external nodes, the internal network including the NAD, the method comprising the steps of:

• (a) determining for each and every request for network access to the NAD whether each request for network access to said NAD is authorized,
• (b) providing network access to said NAD when a request is authorized, and
• (c) denying network access to said NAD when a request is not authorized,
• whereby the NAD is protected by a dedicated NAD firewall from unauthorized network access requests originating at the intermediate and internal and external nodes of the network arrangement.

An apparatus comprising an internal node of an internal network of a network arrangement, said internal node including a network attached device (NAD) and a computer with computer readable media having computer-executable instructions that perform the steps of,

• (a) communicating with the network, including receiving requests for network access to the NAD,
• (b) determining whether each request for network access to said NAD is authorized,
• (c) providing network access to said NAD when a request is authorized, and
• (d) denying network access to said NAD when a request is not authorized, said NAD thereby being protected from unauthorized network access by a dedicated firewall of the apparatus.

An apparatus comprising an internal node of an internal network of a network arrangement, said internal node including a CD-ROM server with computer readable media having computer-executable instructions that perform the steps of,

• (a) communicating with the network, including receiving requests for network access to a CD,
• (b) determining whether each request for network access to said CD is authorized,
• (c) providing network access to said CD when a request is authorized, and
• (d) denying network access to said CD when a request is not authorized,
• said CD-ROM server thereby being protected from unauthorized network access by a dedicated firewall of the apparatus.

An apparatus comprising an internal node of an internal network of a network arrangement, said internal node including a network storage server with computer readable media having computer-executable instructions that perform the steps of,

• (a) communicating with the network, including receiving requests for network access to network storage,
• (b) determining whether each request for network access to said network storage is authorized,
• (c) providing network access to said network storage when a request is authorized, and
• (d) denying network access to said network storage when a request is not authorized,
• said network storage server thereby being protected from unauthorized network access by a dedicated firewall of the apparatus.

An apparatus comprising an internal node of an internal network of a network arrangement, said internal node including an audio device and computer readable media having computer-executable instructions that perform the steps of,

• (a) communicating with the network, including receiving requests for network access to functions of said audio device,
• (b) determining whether each request for network access is authorized,
• (c) providing the requested network access when a request is authorized, and
• (d) denying the requested network access when a request is not authorized,
• said audio device thereby being protected from unauthorized network access by a dedicated firewall of the apparatus.

An apparatus comprising an internal node of an internal network of a network arrangement, said internal node including a video device and computer readable media having computer-executable instructions that perform the steps of,

• (a) communicating with the network, including receiving requests for network access to functions of said video device,
• (b) determining whether each request for network access is authorized,
• (c) providing the requested network access when a request is authorized, and
• (d) denying the requested network access when a request is not authorized,
• said video device thereby being protected from unauthorized network access by a dedicated firewall of the apparatus.

An apparatus comprising an internal node of an internal network of a network arrangement, said internal node including a facsimile machine and computer readable media having computer-executable instructions that perform the steps of,

• (a) communicating with the network, including receiving requests for network access to functions of said facsimile machine,
• (b) determining whether each request for network access is authorized,
• (c) providing the requested network access when a request is authorized, and
• (d) denying the requested network access when a request is not authorized,
• said facsimile machine thereby being protected from unauthorized network access by a dedicated firewall of the apparatus.

An apparatus comprising an internal node of an internal network of a network arrangement, said internal node including a printer and computer readable media having computer-executable instructions that perform the steps of,

• (a) communicating with the network, including receiving requests for network access to functions of said printer,
• (b) determining whether each request for network access is authorized,
• (c) providing the requested network access when a request is authorized, and
• (d) denying the requested network access when a request is not authorized,
• said printer thereby being protected from unauthorized network access by a dedicated firewall of the apparatus.