Hidden Microsoft

Tyson Kopczynski

Previous Article Next Article

Perimeter Security vs. Inside Security

By tyson.kopczynski on Tue, 10/30/07 - 1:31am.

. What's this?

NetworkWorld is running a very interesting arguments series (Link). Needless to say, I couldn't sit on the side lines, participating in an argument can make your day. :>)

This one, "Perimeter Security vs. Inside Security", was too hard to stay away from (Link). Here is my take. The context of what a perimeter is changing as organizational boundaries become dispersed across the internet. In other words, as more and more businesses adopt the concept of a truly mobile workforce. How a perimeter is defined and how it is protected changes. Thus... this is null argument. While you still need some type of perimeter protection, granted it isn't an island of protection anymore, but rather a fluid barrier (the usage of Application Layer firewalls and SSL/TLS comes to mind). You also still need Defense in Depth (DID). In fact, neo-perimeter protection is a must for true DID.

Thoughts?

Tags

What is Tech Briefcase?

TechBriefcase is a new, free service where IT Professionals can Search, Store and Share IT white papers and content like this. Learn more

Bookmark content

Speed up your research efforts with content across the web.

Search and Store

Find the white papers you need. Create folders for any topic.

View Anywhere

Open your briefcase on your iPhone, tablet or desktop. Share with colleagues.

Don't have an account yet?

About Hidden Microsoft

With more than ten years of experience in IT, Tyson Kopczynski has become a specialist in Active Directory, Information Assurance, Windows automation, PKI, and IT security practices. Tyson is also the founding author of the Windows PowerShell Unleashed series and has been a contributing author for such books as Microsoft Internet Security and Acceleration (ISA) Server 2006 Unleashed and Microsoft Windows Server 2008 R2 Unleashed. He has also written many detailed technical papers and guides covering various technologies. As a consultant at Convergent Computing, Tyson works with and provides feedback for next generation Microsoft technologies since their inception and has also played a key role in expanding the automation and security practices at CCO. Tyson also holds such certifications as the Certified Information Systems Security Professional (CISSP), the SANS Security Essentials Certification (GSEC) and SANS Certified Incident Handler (GCIH), and the MCTS (Application Platform, Active Directory, and Network Infrastructure).

Certifications: