3 ms·

This concept is related to PAM. You often have to do ops on infra and need some DMZ to do the ops. In regulated industry you have to record every operations don

This concept is related to PAM. You often have to do ops on infra and need some DMZ to do the ops. In regulated industry you have to record every operations done by the person and have to follow principle of least privilege. This what should happen in an ideal world.

embedding-shape 6mo ago
> You often have to do ops on infra and need some DMZ to do the ops. This makes sense, "bastion" hosts and similar things is fairly common too. What's not common is calling those "airgapped", because they're clearly not.
- debarshri 6mo ago
  Airgapped is a different concept altogether.
  - embedding-shape 5mo ago
    I'm glad we agree :)
- hnlmorg 6mo ago
  I agree. They’re network enclaves. Which isn’t the same thing as an air gapped network.
  - zcw100 6mo ago
    You can have a network enclave in an air gapped network.
    - hnlmorg 6mo ago
      Of course you can. But you cannot connect to an air gapped network from outside of it via a bastion. Which is what we are specifically discussing.
      - zcw100 5mo ago
        What your discussing is a tautology so it is not clear.