Re: DMZ design

Frankster wrote:
>>> It's not about "easy", it's about money.
>>
>> Anything not easy is going to cost money, so it's the same.
>
> Disagree. Often the easiest thing is to throw money on it.

Only if it has enough buzzwords in it. But this is getting off-topic ;)

>>> A realistic risk analysis verses costs. Some's worth it, some's not.
>>
>> Honestly, don't most of those "realistic" risk analyses amount to
>> "it's more likely to hit others first, so we don't need to spend
>> money on that now", until they actually get hit?
>
> Nope. Not if they are done right.

True. I was ranting a little here.

> Another thing... it's kind of ridiculous to spend much time and money
> to protect a system without real data storage that you can rebuild and
> have back to original in an hour. Just depends. OTOH, it could be that
> an hour of downtime would cost your company thousands or millions.
> Just depends.

True as well. But were here to discuss firewall topics, not general
security topics. That's what comp.security.misc is for.

cu
59cobalt

-- 
"Another option [for defragmentation] is to back up your important files,
erase the hard disk, then reinstall Mac OS X and your backed up files."
--http://docs.info.apple.com/article.html?artnum=25668