Re: Blocking MSN (and any other service for that matter)

["Paul D. Robertson" <paul () compuwar net>]

On Thu, 22 Apr 2004, Chuck Vose wrote:

> > Ahh.. this makes me think of 802.1Q. I have not seen it actually deployed
> > anywhere however... Authentication based Virtual VLAN's would fit nicely
> > here.
>
> Indeed, it makes me wonder why people don't use VLAN by mac very often,
> seems like it would be a good fit for lots of situations. But I guess
> the whole changeable mac address thing could cause lots of problems.

IMO, 802.1x is the better answer to this problem.

Paul
-----------------------------------------------------------------------------
Paul D. Robertson      "My statements in this message are personal opinions
paul () compuwar net       which may have no basis whatsoever in fact."
probertson () trusecure com Director of Risk Assessment TruSecure Corporation
_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards