4 ms·
Not OP, but some air-gapped servers can be connected to from a private "trusted" network, but are otherwise unable to connect to the internet or elsewhere. Perh
by gizdan 5y ago
Not OP, but some air-gapped servers can be connected to from a private "trusted" network, but are otherwise unable to connect to the internet or elsewhere. Perhaps that's what OP means?
I wish companies would hurry up and move away from "trusted" networks and move onto zero trust.
- _jhqp 5y agoExactly. These "trusted" machines still have security vulnerabilities that you would like to patch though :)
- traceroute66 5y ago> some air-gapped servers can be connected to from a private "trusted" network Erm ... mate.... A device is either air-gapped or it isn't. The clue is kinda in the name. Yes, I know gov/mil networks use data-diodes, but that's a different kettle of very expensive fish which is certified to EAL6/7. For everyone else, air-gapped means what it says on the tin. Pseudo air-gapping via firewall rules is not air-gapping, its called writing ACLs.
- 123pie123 5y agocorrect - I think people are getting confused - not sure how, since the name is very descriptive
- myself248 5y agoBingo. Air-gapped machines, by definition, have no connection to each other. Not so much as an audio cable between them. Everything that goes back and forth is manually transferred, either by eyes-on-one-screen-hands-on-the-other-keyboard, or by sneakernet typically of media which may be inspected at yet a third station en route. This is a proxy or a bastion host, no more, no less. Calling it an airgap, even in "scare quotes", is clownishly terrible and serves no purpose beyond polluting the language.
- gizdan 5y agoHa. I totally get what you mean, but I wish. I've seen plenty of air-gapped servers, and I'm not even that old. And everytime I've challenged the set up for it to be truly air-gapped, I've been fought for it.