3 ms·
For those who make the effort, configuration management and monitoring systems that continuously profile one's own network are another way to deal with a growin
by jeremyw 16y ago
For those who make the effort, configuration management and monitoring systems that continuously profile one's own network are another way to deal with a growing, unfirewalled cluster. And they avoid having to learn yet another vendor's CLI or slow down iterations in resistance to changes on the one-off system.
- tptacek 16y agoAs someone who sells exactly such a system, let me advise everyone not to use them as a replacement for a single, central, simple, coherent firewall.
- jeremyw 16y agoIn any case, folks should be continuously profiling their networks integrated into monitoring/alerts. I find many firewalls that are doing different things than my clients expect they are -- or have just been left to diverge from reality in some form of config rot. Automated testing surfaces these differences. Can you really put "simple" in the same sentence as firewall? Vendors prevent that. Folks don't have time to maintain them.