Security Basics mailing list archives

Re: RE: Napster vs. ITunes.. Which is less insecure?


From: Rohnskii () gmail com
Date: 10 Oct 2007 05:32:37 -0000

Zen has the right idea, the first question to answer is "What is the relevant corporate policy?"  Oh, no policy?  Well 
it's time to establish one.  What is the business benefit of allowing that type of access?  Is "happy campers" a valid 
answer? Some places it is (Google comes to mind).

Another question is, "What are the legal implications?"  In general, not good.

If you are lucky, you already have "Quality of Service" controls on your network bandwidth.  How about applying a 
policy of allowing say a max of 1% of bandwidth to these apps for general "unapproved" access.  Enough to make a 
connection, eventually, but not enough to make it worth listening to.  

If policy allows for it, then set up an authorization group that will grant specific users enough bandwidth.  If 
someone has a specific business need for access, they submit a standard application request through channels.


Current thread: