a***n
发帖数: 262 | 1 挖个大坑，大家都发财。 让版主们破费。
We used to use source IP based filtering,
no matter stateful firewall, or zone-based firewall,
they are still all primarily based on IP.
Now wireless looks to have potential to dominate
access layer. How the traditional IP based firewall policy
interact with controller based security?
802.1x is supposed to provide identity based access, but
how scale is it to push ACL/firewall rules from radius to
end host?
So called next-generation firewall like Palo Alto
boasts application awareness, identity/Active Directory
integration, 100G throughput ..., But isn't it more
positioned in traditional border firewall? How about internal
networks?
Cisco TrustSec looks good, but how about standadization?
Cisco is also preaching borderless architecture, will that be good?
What's your think, insight, similar features from different vendors? | a***n
发帖数: 262 | 2 Ah, Nobody reply so far.
I am serious to discuss the network security.
【在 a***n 的大作中提到】
: 挖个大坑，大家都发财。 让版主们破费。
: We used to use source IP based filtering,
: no matter stateful firewall, or zone-based firewall,
: they are still all primarily based on IP.
: Now wireless looks to have potential to dominate
: access layer. How the traditional IP based firewall policy
: interact with controller based security?
: 802.1x is supposed to provide identity based access, but
: how scale is it to push ACL/firewall rules from radius to
: end host?
| s*****g
发帖数: 1055 | 3 Topic too broad, don't know where to start. | k*****s
发帖数: 231 | 4 We used to use source IP based filtering,
no matter stateful firewall, or zone-based firewall,
they are still all primarily based on IP.
Now wireless looks to have potential to dominate
access layer. How the traditional IP based firewall policy
interact with controller based security?
802.1x is supposed to provide identity based access, but
how scale is it to push ACL/firewall rules from radius to
end host? | m**t
发帖数: 1292 | 5 am interested in security areas, specially for wireless domain. the original
post has a wide span both vertically and horizontally with a mixed concept,
hard to comment
it would be helpful to elaborate the problem statement |
|
