"You can’t use firewalls to secure East/West data flows in the network."
What does that mean?
Why firewalls won’t matter in a few years
11–20 of 139 posts
Re: Why firewalls won’t matter in a few years
#12"You can’t use firewalls to secure East/West data flows in the network." What does that mean?
Lateral flows of data within a network, as opposed to traffic that goes through a gateway.
Re: Why firewalls won’t matter in a few years
#13"You can’t use firewalls to secure East/West data flows in the network." What does that mean?
It's a little new-speakish, but it basically means traffic flowing between servers in the same hosting tier.
Re: Why firewalls won’t matter in a few years
#14"You can’t use firewalls to secure East/West data flows in the network." What does that mean?
[deleted]
Re: Why firewalls won’t matter in a few years
#15Re: Why firewalls won’t matter in a few years
#16Note that there is a difference between isolating devices and firewalling in the sense of packet inspection. You're still going to want selective routing and packet forwarding (like port forwarding).
Firewalls will continue to be useful for complex devices that connect directly to the internet (like laptops on public wifi), where all sorts of things you wouldn't want others accessing are exposed by default.
Re: Why firewalls won’t matter in a few years
#17Firewalls are just some stupid crap industry made up and went with. We've known since the Orange Book days that security had to be done holistically involving every endpoint and network. Their standard for security was a strong TCB on endpoint with trusted path (see EROS or Dresden's Nitpicker); a network card with onboard security kernel, firewall, and crypto (see GNTP + GEMSOS); connections between networks through…
> AV
How does Anti-Virus play into this as a counter to "minor tactics?" Are you expecting all end-users to personally verify all of their software? No matter how secure the network connection is, end-users need software to use their computers to do work/have fun/etc. Unless you have a completely closed system of 100% trusted software. If you're part of an organization like the NSA, that might be doable, but home users don't really have this luxury unless you advocate for a walled-garden type system.
Re: Why firewalls won’t matter in a few years
#18Re: Why firewalls won’t matter in a few years
#19"You can’t use firewalls to secure East/West data flows in the network." What does that mean?
Those labels of network flows have been gaining currency in the industry.
Here's an example diagram:
http://www.theregister.co.uk/2011/08/15/xsigo_private_virtua...
Also see "north-south" and "east-west" in sub-heading "Changing traffic patterns":
http://en.wikipedia.org/wiki/Software-defined_networking#The...
Amazon's AWS presentations also sometimes mention network traffic inside the datacenter in terms of “east-west traffic” & “north-south”.
http://www.enterprisetech.com/2014/11/14/rare-peek-massive-s...
Re: Why firewalls won’t matter in a few years
#20Earlier quoted context omitted.
Lateral flows of data within a network, as opposed to traffic that goes through a gateway.
Interesting. Never heard the term before.
I think it's from American football - east/west is lateral movement, north/south towards/away from the goal lines.
Apparently this has nothing to do with getting sun in your eyes.
http://stupidquestionarchives.blogspot.com/2008/03/football-...