[Agenda] [Examples] [Network Partitioning] [Concepts] [Policy] [Process] [Organization] [HW-SW] [Cases studies] [Conclusion] [Resources]

Security Policy Enforcement at Application & OS layer vs. Network layer (1/2)

Application & OS layer	Network layer
Set up security in many applications Set up security on many hosts in many ways	Set up the security once for the whole infrastructure
Affects many systems and applications administrators in many places	Affects the Network architecture department & the Network Operation Center
Complex to implement without a tool	Complex to implement without a tool
Complex to implement with available tools. Example: Axent ESM	Simple to implement with available tools. Example: Solsoft Net Partitioner

® © Hervé Schauer Consultants December 1999 - 142, rue de Rivoli - F-75001 Paris - France Phone: +33 141 409 700 - Fax: +33 141 409 709 - Email: <secretariat@hsc.fr>

- Page 42 -