Hi All,
My bosses want me to send 5 raw pix's configuration to an ISP company, unprotected, to provide us an assessment of our security and firewall protection. They were engaged to quote on a new WAN, LAN (switches only) solution and data center requirements. I don't see the point on why they need these configurations to do a quote, they could just ask me more specific questions like licensing etc. The ISP has not signed a confidentially agreement and most likely we will be choosing some else for WAN services, but my bosses are trying to appease the President of the company.
I have protested that this is highly confidential and sensitive to our company and should not be distributed w/o a confidentiality agreement or signed contract to use their services.
I told my bosses that I accept no responsibility for network breaches from the Internet if they release these documents.
Am I right or missing the mark? Has anybody else had bosses like this?