"The poster already said his boss had given him a requirement that they not use free tools. You're telling him to argue with his boss who has already made up his mind. That's a great way to get fired."
If you are working for a boss that does not allow you to put forth a BUSINESS model of why the company should move forward with something that will meet mission requirements and save money, you need to go to that manager's boss. If that's the company's vision as a whole, it's time to move on. Anywhere they enforce status quo, regardless of business reasons, and stifle creativity in building the business, is going to fail, or bleed itself to death.
I work for AOL, managing ICQ and AOL Mobile Ops, and we do use OpenSSH. Yes, we have commercial SSH in some places, but a lot of our infrastructure is built on OpenSSH. Relying totally on SSH/OpenSSH to secure a host is bad SA practice. Building a security model that has several layers and components is the only way to fly.
"The poster already said his boss had given him a requirement that they not use free tools. You're telling him to argue with his boss who has already made up his mind. That's a great way to get fired."
If you are working for a boss that does not allow you to put forth a BUSINESS model of why the company should move forward with something that will meet mission requirements and save money, you need to go to that manager's boss. If that's the company's vision as a whole, it's time to move on. Anywhere they enforce status quo, regardless of business reasons, and stifle creativity in building the business, is going to fail, or bleed itself to death.
I work for AOL, managing ICQ and AOL Mobile Ops, and we do use OpenSSH. Yes, we have commercial SSH in some places, but a lot of our infrastructure is built on OpenSSH.
Relying totally on SSH/OpenSSH to secure a host is bad SA practice. Building a security model that has several layers and components is the only way to fly.