-----BEGIN PGP SIGNED MESSAGE-----
I think that a lot of the reason is that the security people are either
non-existant or have no power to counter the "all NT" argument along with
the management thinking that "it's windows, we don't need to hire anyone
to run this"
David Lang
On Wed, 2 Jun 1999, Jeff Burson wrote:
>
> Unfortunately, I've seen this type of argument be fairly persuasive
> with upper management. On more than one occasion, I've had to
> rigorously defend my intentions of deploying a firewall on a
> UNIX platform against a management directive to deploy all
> things NT. I don't mind doing it, because I've seen how a firewall's
> effectiveness, stability, and robustness can degrade on NT when
> compared to a UNIX solution.
>
> However, we have to be careful as security professionals to be
> sure that we're not making religious arguments.
>
> It IS a fact that many companies are deploying firewalls on NT.
>
> Why?
>
> To say that every one of these deployments are being done by
> GUI-loving idiots or ignorant savages who don't know REAL
> security is probably stretching credibility.
>
> The reasons are probably more complex than that and are probably
> worth being aware of ...
>
>
>
> #######################################################
> # Jefferson Burson Tracor Aerospace, Inc.#
> # Internetwork Manager 6500 Tracor Lane #
> # [EMAIL PROTECTED] Austin, TX 78724-2000 #
> # Voice: 512.929.4192 Pager: 512.606.6792 #
> #######################################################
>
> -
> [To unsubscribe, send mail to [EMAIL PROTECTED] with
> "unsubscribe firewalls" in the body of the message.]
>
"If users are made to understand that the system administrator's job is to
make computers run, and not to make them happy, they can, in fact, be made
happy most of the time. If users are allowed to believe that the system
administrator's job is to make them happy, they can, in fact, never be made
happy."
- -Paul Evans (as quoted by Barb Dijker in "Managing Support Staff", LISA '97)
-----BEGIN PGP SIGNATURE-----
Version: PGP for Personal Privacy 5.0
Charset: noconv
iQEVAwUBN1W3Yj7msCGEppcbAQF4XAf/XnTGvErfRhG7HvZga0x3FqSxClRLBjtL
rnFJrS34ZGHnxJKG+r+NVAzwHcgcefRe+rwqbtGmgdhUvLK6xp4xypUDXvDxHJFm
oPJLxdfZRbj/XM/9GZH5/wk0Yg/z0/5TRZBMLPH600lPheOtywCDu/IQvNXHv0a2
U2OePxds0trtSZbzOTlmUrc5/aOF/E1J37AuHrikPTu/5qZLLDwuVS+WS2hqvUHi
BqNC8aUQiKVHlbK7CXl0Xfx7ERu8i67PJ6UR/rMzVB1CM/WmEdrxKI0sImbUnSl7
eM34MHMAR5UtCm7MVO7NyLJfz2KzYXs+uB+Ns0wDX5D195iFl0XPLg==
=kMZj
-----END PGP SIGNATURE-----
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
