4 ms·
IMO because you can configure the BMC to use it's own dedicated NIC and network. That network should have no routing to the Internet and no production traffic,
by matja 4y ago
IMO because you can configure the BMC to use it's own dedicated NIC and network.
That network should have no routing to the Internet and no production traffic,
just BMC management.
When Intel ME shares the NIC used for the OS traffic - that is far harder to secure.
- rbanffy 4y ago> That network should have no routing to the Internet and no production traffic, just BMC management. And no single computer with NICs on both the BMC network and one that can access the internet, hopefully. All it takes is one single mistake.