Re: Cisco PIX bug, discussions (lenghty)

["Joseph S. D. Yao" <jsdy () cospo osis gov>]

> Performance isn't relevant to security applications.  I.e. you
> can't say "it will hurt performance, so we'll leave out some
> security."  If that were a consideration, we wouldn't use firewalls.
> Realistically, that means that if it's too slow we buy bigger
> boxes or suffer along at a slower pace.

Realistically, has this usually mattered to the people who pay us?
They  h a v e  said that.  And they've bought MS stuff, which loses
both performance and security.  Go figure.

> If for one would love to have the option of my Cisco defragging for me.

Perhaps true.  But we've been told, pretty convincingly, why they won't
do that by default.

--
Joe Yao                         jsdy () cospo osis gov - Joseph S. D. Yao
COSPO Computer Support                                          EMT-A/B
-----------------------------------------------------------------------
This message is not an official statement of COSPO policies.