There's absolutely no reason why the presence of a firewall must inevitably
lead to weaker internal security. While it is true that a good firewall
will prevent many intruders from putting internal security to the test, this
does not automatically imply that internal security should therefore be
weak or nonexistent.
Some organizations prefer to minimize internal security in an attempt to
facilitate co-operative work, and thus they rely on their firewalls (and the
integrity of their employees) to prevent security breaches. But this is a
_policy_ decision, not a natural consequence of firewall use.
Regards,
John
--
John DiMarco <jdd @
cdf .
toronto .
edu> Office: EA201B
Computing Disciplines Facility Systems Manager Phone: 416-978-1928
University of Toronto Fax: 416-978-1931
http://www.cdf.toronto.edu/personal/jdd/jdd.html
----------
I absolutely agree, john. If we let our security wide open internally, some
disgruntled, malicious, or inept user might inadvertantly destroy parts of the
system, whether it be source code on a development server, or payroll. We
handle our internal security with just as much import, as external, and I'd
advise every organization to practice this, in general, even if not in a stated
security policy.
-Ken Beames
Quarterdeck Office Systems
beames @
qdeck .
com
|
|
