Great Circle Associates Firewalls
(October 1992)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: inbound/outbound filtering
From: mjr @ decuac . DEC . COM (Marcus J. "Will do TCP/IP for clues" Ranum)
Date: Mon, 26 Oct 92 14:50:32 -0500
To: Firewalls @ GreatCircle . COM

Steve Bellovin writes:
>Anyway, I disagree with your assessment.  In a world of multi-gigabyte
>8 mm tapes, I think that trying to shut the electronic door that way is
>futile.

	Unfortunately, Steve's answer is that of the technologist.
I doubt that any of us will argue that he's wrong, but there are LOADS
of corporate data security cops who CANNOT accept that as an argument.
This is because if I sneak out a tape, they can explain to their boss
that I stole a tape. If I sneak out data over the network, they have
to explain to their boss (who most likely won't know beans about
networking or even computers*) how it happened.
	The technical problems are usually dwarfed by the political
ones. :(

mjr.

*Speaking in principle, not about any organization in particular.


Indexed By Date Previous: Re: inbound/outbound filtering
From: smb @ ulysses . att . com
Next: Re: inbound/outbound filtering
From: Kannan Varadhan <kannan @ oar . net>
Indexed By Thread Previous: Re: inbound/outbound filtering
From: Kannan Varadhan <kannan @ oar . net>
Next: Re: inbound/outbound filtering
From: Jon Olnes <Jon . Olnes @ nr . no>

Google
 
Search Internet Search www.greatcircle.com