[Agenda] [Examples] [Network Partitioning] [Concepts] [Policy] [Process] [Organization] [HW-SW] [Cases studies] [Conclusion] [Resources]

Fragmented, Device-Based vs. Centralized, Policy-Based Network Security Managment (1/2)

Fragmented, Device-Based	Centralized, Policy-Based
Doesn't provide scalability	Provide scalability with global vision
Difficult to manage	Easy to manage
Complexity can lead to security holes	Complexity becomes hidden by Policy simplicity
Complexity avoids granularity	Simplicity allows granularity

® © Hervé Schauer Consultants December 1999 - 142, rue de Rivoli - F-75001 Paris - France Phone: +33 141 409 700 - Fax: +33 141 409 709 - Email: <secretariat@hsc.fr>

- Page 44 -