Re: Separate firewall administrator and firewall system administrator

[Paul Alukal <palukal () yahoo com>]

I've seen similar setup in certain financial
institutions. Two security groups, one primarily
administering the OS, setting up 
routes and NAT support (with arp etc.), load balancing
etc. the other group just doing the rules. I didn't
think that was the 
best way to go, but it did work.

On a similar note, there are many places where the
unix sys admins install  security software (e.g.,
Axent ESM, Netegrity 
Siteminder, iPlanet Directory server etc.)., and the
Security group manage the appropriate software. I
don't see any 
difference between this type of setup for security
software and the firewall setup.

-Paul

--- Joe Matusiewicz <joem () nist gov> wrote:
> Greetings,
>
> Management came up with this new proposal.  Our
> firewalls should now have 
> the operating system managed by the system
> administration group.  The 
> current firewall administrators should only handle
> the firewall 
> software.  I never heard of this before.  Is there
> anyone out there doing this?
>
> Please feel free to comment on this idea.
>
>
> -- Joe
>
> _______________________________________________
> firewall-wizards mailing list
> firewall-wizards () nfr com
http://list.nfr.com/mailman/listinfo/firewall-wizards


__________________________________________________
Do You Yahoo!?
Yahoo! - Official partner of 2002 FIFA World Cup
http://fifaworldcup.yahoo.com
_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://list.nfr.com/mailman/listinfo/firewall-wizards