Re: Sun cans Trusted Solaris, was Why Easy To Use Software Is Putting You At Risk

[b.hines () comcast net]

I am not sure what the question is.

Software life cycles have a beginning and an end, SUN  is merely adjusting its product based on business objective. As 
far as the platform goes you will still be able to purchase the modules and build ala cart, and they did say there will 
be product support  for at least eight years.

The testing assurance and certification cost of getting the EAL stamp, was probable factored in to what ever Government 
contract this product was developed for.

An EAL 4+ assurance can be achieved on out of the box platforms like AIX 5.3 as well, maybe SUN lost a big deal, or it 
appears to make good business steps for SUN's product cycle. 

Does your security policy require  all the aspects of an EAL4+ rating?  

If not just buy the parts you want from SUN or start an IBM deployment ans harden the server's as needed.


Bob Hines
CISSP


---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Tailor your education to your own professional goals with degree 
customizations including Emergency Management, Business Continuity Planning, 
Computer Emergency Response Teams, and Digital Investigations. 

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------