Great Circle Associates Firewalls
(April 1996)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: FW: Securid BAD Tech Support
From: "william.wells" <william . wells @ damark . com>
Date: Fri, 05 Apr 96 09:06:00 CST
To: FIREWALLS <firewalls @ GreatCircle . COM>

Originally From: vin @
 shore .
 net (Vin McLellan)
        SDI Engineering will eventually put in a command line interface for
administration in the ACE code -- and it probably will be a 2.X version of
the ACE/Server, rather than a 3.X -- but it doesn't exist now and there are
no plans to offer it in the immediate future.

I write:

  I personally find this the one most frustrating thing about SecurID.  I
can't automatically determine card usage (logs, active cards, etc) or
snapshot the database using their tools.  Hence, for example, I am unable to
determine easily if someone slipped in somehow and created (or
reactivitated) a new card (which would be a person problem on my side) or
automate a map of card usage by time of day.
  In the drive to GUI interfaces (and I'm treating SDI's menu mechanism as a
weak-GUI), people forget that without the command line interface, you can't
perform automatic verification of manual processes, perform regularly
schedule tasks (such as a database dump), and such.  This 'new feature'
frequently hampers large site automation of security checks.
  The fastest way for a sales person to lower my opinion of their product is
for them to say that they converted their administration to a GUI since this
means that they've just broken automated administration and they've now
consumed 30 minutes of someone's time to do the daily peek.  This is
especially true if that GUI is Windows based (since DOS/Windows tasks are
not easily automated anyway).

William Wells
Manager, Technical Support
Damark International, Inc.
william .
 wells @
 damark .
 com

Normal disclaimers apply.....

Indexed By Date Previous: What layer?
From: "Marcus J. Ranum" <mjr @ clark . net>
Next: Re: complaining to the CEO
From: "Marcus J. Ranum" <mjr @ clark . net>
Indexed By Thread Previous: Securid BAD Tech Support
From: vin @ shore . net (Vin McLellan)
Next: Re: Securid BAD Tech Support
From: "David C. Kovar" <kovar @ nda . com>

Google
 
Search Internet Search www.greatcircle.com