> For example one of the vulnerabilities was a DLSw issue.  If 
> you're not running DLSw anywhere, then there's not much need
> to continue reading that bulletin.

>From Microsoft Tuesday experience, that is not an entirely
safe approach.  You have to read far enough into the advisory
so that you are sure you are not running some combination
of features that end up enabling the vulnerability as a 
side effect.  While Cisco has fewer side effects than some
vendors, sometimes a default is not what one would expect,
and just reading the title is not adequate (oh, you mean
I get proxy-arp by default?)

Carefully reading a handful of emails every six months
(and others as necessary for active exploits) does not
feel like a large burden to me.  But I may be unique.

Gary
_______________________________________________
cisco-nsp mailing list  [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Reply via email to