RE: Managed Firewall Service - Opinions

["Melson, Paul" <PMelson () sequoianet com>]

To be fair, any security services company with a half-way decent legal department will require some level of disclaimer 
like  this in their SLA, or any contract for that matter.  You're asking too much if you want to pay a vendor 
$15K-$20K/yr and expect them to pay 10x to 100x that back if there's a security incident.  I can't think of any 
industry where a vendor assumes that level of risk.  That doesn't mean you can't still sue them, though, if you feel 
their was negligence or incompetence on their part.


>  -----Original Message-----
> From:         Jeffery.Gieser () minnesotamutual com@AICNOTES  
> Sent: Thursday, April 17, 2003 11:39 AM
> To:   firewall-wizards () honor icsalabs com
> Cc:   Fiamingo, Frank
> Subject:      Re: [fw-wiz] Managed Firewall Service - Opinions
[...snip...]
> 4.  They usually force you to sign an agreement stating they are not
> resposible for any security incident at your site even if it results from a
> configuration mistake that they made on your firewall.
_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards