The only reason the auditors demand anything is due to a lax host
security model. That will be fixed at some point, to an auditor's
satisfaction, or the auditors will start going after the firewalls
themselves, when they become application sieves. There are several
organizations I am aware of with with firewalls inside. In most
cases it was due to incompetance, resulting in factional warfare. In
one case it was due to contractual requirements.
Let's face it. Firewalls impede functionality. If, however, you
prefer to live with them, we vendors will be happy to work on other
projects.
--
Eliot Lear
[lear @
sgi .
com]
Follow-Ups:
-
Re: RFC 1597
From: sgcccdc @
citec .
qld .
gov .
au (Colin Campbell)
References:
-
Re: RFC 1597
From: "Robert G. Moskowitz" <0003858921 @
mcimail .
com>
|
|
