[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: ipsec vs. firewalls
M.C.Nelson <netsec@panix.com> wrote:
> Nonetheless, organization-level access control is probably an
> important security service and something like a firewall is probably
> the right way to do it. The trick is to be able to passively
> authenticate datagrams.
Not really. If you want a central administrative system the right way to
do is is establish an administrative protocol to administer corporate
entities, and establish an auditing system to detect entities so far
gone that they are invisible to the administrative protocol.
Also, you need to think quite a bit about what you're trying to achieve.
All too often, people wind up implementing something that looks like a
bank vault door mounted on a paper house with holes cut in the walls,
when what they really wanted was a wooden house with glass windows and
latches on the doors.
--
Raul
References: