 |
|
||||
|
Too Much Security Can Be Too Much of a Good ThingBy Kenneth HessNovember 9, 2009
Security "experts" will no doubt disagree that you can have too much security, but I disagree. Two-factor authentication, RSA IDs, local machine logins, domain logins, retina scans (Thanks a lot, Star Trek), NIS+, data encryption, hotfixes, security patches, virus signature updates, local firewalls, network firewalls, router rules — it's enough to make me totally meshugenah. I know security is necessary because of those naughty 17-year-old East Mongotanians who constantly scan the Internet waiting for my financial records to traverse the abyss from my computer to my bank's database and back again, but there must be a better way. How about single sign-on (SSO) and virtual LANs (VLANs) for securing your internal environment? Yes, I know we'll still need anti-spyware and anti-virus software for our computers. We'll also need the regular security updates to prevent malicious junk from entering our computers from unsavory web sites. Let's simplify things for internal networks into some SSO and VLAN segments. That way you still maintain domain authentication without having to remember 30 different passwords and have VLANs to protect the greater network from a single errant one. SSOSSO is a boon to users and administrators, since users must manage only one password instead of dozens for services and systems. For administrators, SSO provides an efficient and secure method of managing password authentication to services and systems. SSO is a real money saver, too, since your employees won't need to call the help desk and wait in a queue for a half hour or more to request a 10 second fix. Sure, SSO costs money, but it's money well spent when you tally up the costs of wasted and unproductive hours of having password problems, help desk calls and frustrated employees whose morale during these episodes is tied directly to productivity. Follow Enterprise IT Planet on Twitter Read the rest at ServerWatch.
|
|
|
|
Email
Print
Digg This
Add to del.icio.us
