Suggestions? iLo configured with internet ip address for remote support

[quorrum]

My department has been asked by a vendor put the iLo managmement port on the Internet with an ip address for support.  They gave us a couple of large ip address ranges (a couple class b and c networks) that are to be allowed for support.   

This type of configuration is against best practices, our department is against this deployment and have formally sited best practices and our secuirty concerns.  We are being directed to do implement this type of access, if we do not comply we will be insubortinate.  Should i be worried about this alarming access request?  

Recomendations, Thoughts and Concerns welcome. 

Thank you for your input.

[Jimmy Vance]

As you have stated, it is against best practices to connect iLO directly to the Internet.  It should ideally be placed on a separate management network.  For vendor access, you should let them have acces to a VPN connection that would then allow them to access the iLO interface. 

[Torsten.]

It should be at least behind a VPN, better security for low cost.