Slashdot Mirror

← Back to Stories (view on slashdot.org)

Tear Down the Firewall

Posted by timothy on from the tripartate dept.

lousyd writes "'What's the best firewall for servers?' asked one Slashdot poster. 'Give up the firewall' answers Security Pipeline columnist Stuart Berman. Through creatively separating server functions into different, isolated servers, and assigning them to a three tiered system of security levels, his company has almost completely eliminated the need for (and headache of) network firewalls. "Taking that crutch away has forced us to rethink our security model," Berman says. The cost of the added servers is greatly minimized by making them virtual servers on the same machine, using Xen. With the new security-enhanced XenSE, this might become easier and more possible. What has you chained to your firewall?"

2 of 395 comments (clear)

  1. Nice logic, but by gcnaddict · · Score: 5, Insightful

    obviously, if you can rethink your security model AND keep up a well-maintained firewall, you will likely be better off :) How hard can it be to do BOTH, not one or the other?

    --
    Viable Slashdot alternatives: https://pipedot.org/ and http://soylentnews.org/
  2. Does SANE support the Scanmaker 4850 yet? by tepples · · Score: 5, Insightful

    And if you have processes running and listening on ports that you don't want or need, why are you running them?

    Because the operating system that you run is incapable of turning them off, and no other operating system is compatible with a mission-critical application or hardware device?