Re: 10Gb Firewalls

[Kerry Milestone <km4 () sanger ac uk>]

Thanks very much for your replies, its given me some useful information 
on devices.


>If you're looking at running a consolidated SAN between a number of
>"limited" systems you've merely shifted your risk from IP/network to
>disk/SAN.  Who's to say you couldn't get someone trying to elevate 
>their level of access via the fiber-channel medium versus breaking 
>through the Ethernet layer?

How serious is this?  I haven't heard of too many.  This would then 
become an issue of the carrier security correct?

I assume then, that the encapsulation of a private channel through a 
backbone is brought into question?  I really wouldn't think to put this 
kind of traffic through IPSec due to the overhead.

Other than that, I guess the theories for firewalling are the same 
whether it be 100Mb or 10Gb - the device just needs to handle it.

Cheers.






--
The Wellcome Trust Sanger Institute is operated by Genome Research 
Limited, a charity registered in England with number 1021457 and a 
company registered in England with number 2742969, whose registered 
office is 215 Euston Road, London, NW1 2BE. 
_______________________________________________
firewall-wizards mailing list
firewall-wizards () listserv icsalabs com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards