Alright network security pros... A chick on staff in Corporate IT Dept placed personal Game Server on Corporate Server. Server is inside the firewall with a DNS entry on the firewall pointing the external game IP to the internal IP on the Game Server. This opens us up to mucho risk, I know, but what do I do? Should I remove it, threaten her, move it up the chain? Large tech Co with strict rules on this kind of stuff. HELP!!!

Ethically, this is a no brainer. Someone who would do what she did has no place in a Corporate IT Department. You have to report her. And at this point, if you don't, you could be in trouble yourself because you are aware of the security risk and not doing anything about it. PS: threatening someone is not very professional, either.

kinda depends on what YOUR job is...if you are responsible for nw security then you are obligated to deal with it.

If you are network admin, senior tech, or security manager, just remove it and that's it! It's abnormal that tcp/udp port was already opened on the firewall to reach this games server.... It's look like another negligent security/network manager...

If you are the janitor, you should report her. Danny, I must say you should keep those opinions quiet. People die because of people looking the other way. I learned not to touch the stove as a child, not because I was told not to, but because I burned my hand. She is out of her league, and the manager from McDonald's wants her uniform back. There comes a time in every man's life where he is forced to draw that line in the sand, telling the world this is the line. She will learn from it a be a better person for it. Let it slide, and what next. She'll blow something up...kill a group of people. This will be a changing point in your life, and you will always remember the decision you make. Beleive me.