'Boil the ocean' data loss prevention needs to change Check Point is pushing its vision of consolidating disparate security products, managed from a single dashboard and centred on enterprise firewalls. Consolidating security offers better control, Gil Shwed, Check Point's chief exec, told delegates to the security vendors' annual conference in Barcelona on Wednesday. Check Point …
Security cannot be an after thought. It must be designed in, from day one, into a system. Nor can it be added just at the top layer. The security mantra must exist all the way through the system: From web application to operating system and to the hardware as well.
Security has to be balanced with usability. Make security so strong that it makes the system too hard to use and people will either not use the system, or switch off the security.
IMHO, many of these security appliances are trying to paper over the cracks in the security of other systems and give a false sense of security.
Finally, security has to be done by people who know about it.
Security is hard. It costs money. It takes time. But when it goes wrong ? Just ask Sony...
My ass... not for mail routing. Nothing like a security product randomly pulling packets off the network to make routing between mail servers more fun and exciting.
...which is exactly why they had to exclude the mail servers from network DLP and put in a point-product (Vontu) specifically to address DLP for mail.
This simply starts a battle of the standards. If everyone just offered decent APIs it would not be a problem, but I'm willing to put money on it that it will be a one-way system for Checkpoint - it will gather data but not share them, thus contributing to the mess they allege to solve..
The Register 
Biting the hand that feeds IT
Copyright. All rights reserved © 1998–2024
