Re: IDS outside of firewall?

["Joseph S. D. Yao" <jsdy () cospo osis gov>]

I was challenged on one of my recent messages.  I have to report,
regretfully, that I was wrong:

> So what's layer 8?
> -- Craig Biggerstaff
...
> > From:       Joseph S. D. Yao[SMTP:jsdy () cospo osis gov]
> > Sent:       Monday, August 03, 1998 2:54 PM
...
> > > Are there advantages to putting an IDS on the outside of the firewall?
> > It benefits, IIRC, layers 9 and 10 of the seven-layer ISO network layers
> > - funding and politics.

I checked with my reference T-shirt.  It said, effectively [graphics
not included]:

        ...
        [7]     Applications
        [8]     Financial
        [9]     Political       <- You Are Here

Classic off-by-one error.  ;-<  ;->

--
Joe Yao                         jsdy () cospo osis gov - Joseph S. D. Yao
COSPO Computer Support                                          EMT-A/B
-----------------------------------------------------------------------
This message is not an official statement of COSPO policies.