On Tue, 18 Apr 2000, Michael J Lawrence wrote:
>
> VPN is a different story. VPN is a double hitter both as ROI and insurance. It's
>cheaper than a dedicated WAN circuit AND it protects data.
VPNs don't offer much in the way of insurance. The ROI only works if both
endpoints have the same management, security and operations policies
(e.g. network to network for two offices.) Most people are trying to
deploy remote *node* solutions where there is no _real_ ROI and definitely
_no_ insurance.
Remote node VPNs don't protect networks, they protect information while
it's in transit only. The fact that they place the encryption boundary on
an untrusted and insecurable node (e.g. a Win98 box) and then require that
it be allowed to talk in the clear to an untrusted network _should_ make
people want to run. Why people seem to flock to VPNs as a "security
solution" is beyond me.
Face it, even the poster child for VPN access (ANX) is on a private
network, not the Internet at large.
Paul
-----------------------------------------------------------------------------
Paul D. Robertson "My statements in this message are personal opinions
[EMAIL PROTECTED] which may have no basis whatsoever in fact."
PSB#9280
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
