Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×

Comment Re:Meanwhile, dating scams targeting men... (Score 1) 176

You could argue? You are fucking kidding me. Try to subscribe one within the experimental period, and you will see how soon someone "in your area" talks to you, just to get you as a paid customer. You know, there are people paid to do that, some people even reported some of these people even attended first meetings as cover. This comment must be very naive indeed.

Comment Re:Why firewall? (Score 1) 267

Nothing wrong. Whilst in paper you can design the most perfect of the setups, in the field that wont happen for multitude of reasons, from technical, to political and ending on work needs. Good luck blocking IPsec into many sites. The blocking capabilities of many products just give you a false sense of security, and frankly if you are using IPS to block and manage unwanted traffic protocols, you are doing it wrong.

Comment Why firewall? (Score 2) 267

Whilst most of the firewall products nowadays do provide proxies or web interfaces for users (for instance WebVPN in Cisco products), I do find it is a terrible idea to open up services and use up resources from the firewall. Just look at the long list of the security advices from WebVPN in Cisco for instance. I do follow the policy of minimum services that i have as a baggage as a Unix admin, and webvpn/proxy/VPN services are all provided by external servers. For instance, pfSense is quite nifty for that, or squid+dansguardian. Why not provide access or provide unrestrictive access in a wifi network for BYOD? They can as well pierce your firewall with personal VPN services, they are very cheap nowadays. As for the corporate network, many people do not understand how a culture of unrestricted access to social networks and allowing adverts is a covert channel to infect personal computers. Also if you want to invest in security and money is not a problem, have a look at the Capsule concept from Checkpoint.

Slashdot Top Deals

Don't panic.

Working...