* Would you trust your network with a multi- or single-function security device?
Based on e-mails from readers of this newsletter, many of you have some concerns about buying multi-function security devices because they represent a potential single point of failure.
It’s a good concern. If you have all your network protection wrapped up in a single device and it fails, where does that leave you? Isn’t it much better to have several devices, so if one fails you at least have some protection until you can bring the failed box back up?
There’s probably no single answer to this question. If you agree with the above arguments, you can go out and buy many single-function devices and even double them up so if one fails, the backup kicks in. If you can afford it and have the staff to manage and maintain all that gear, that is.
Or you could buy a multi-function device and pair it with a second identical one and have them failover to each other.
But many businesses lack the resources to do that and need a simple to install, manage and maintain device. The risk of a catastrophic failure if a multi-function device is worth taking because the affordable alternatives may actually offer less security . For example, low end VPN gear in conjunction with separate virus protection and separate content filtering don’t offer a way to quarantine malicious outbreaks, which some multifunction devices do offer.
As one reader wrote, “I would rather go with a layered approach with multiple defenses to protect my network.”
Let’s hear your thoughts. Just how worried are you about these devices, and what is your thinking on the appropriate architecture for protecting your network? Please send me your thought at mailto:tgreene@nww.com
