Re: security policy examples

[Bennett Todd]

1999-09-24-08:37:56 Tim Kramer:
> The safest security policy to start with is: "deny everything".  Then
> don't add anything until you get "corporate" approval (in writing).

Tim has a reasonable stance for some settings. In other places, other policies
are appropriate. Examples would include isps and other dotcoms, where
wide-open internet access is the essential working asset, and the data isn't
nearly as important to protect.

-Bennett
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]