The popular image of the corporate firewall is a gatehouse guarding the corporate network, implying a single security domain. Todays corporate security realities are, however, far more subtle. Once past the gatehouse, organizations are not monolithic security domains populated by indistinguishable individuals. Contractors, joint ventures, transient technicians, special access projects, and others all play a role in today's organization. Each aspect has its own needs (and limitations) for Internet and Intranet access.

The challenge is to provide each of the many constituencies with secure access while accommodating their inevitably conflicting rights, responsibilities and needs. In short, an organization must ensure internal security and regulatory conformance, while still allowing staff, salesmen, and contractors appropriate access to internal and external systems as needed.

The needs and requirements of typical constituencies will be examined. Ways to maintain ease of use and its attendant reduction in Total Cost of Ownership (TCO) will be explored. Our review will include the benefits and limitations of firewalls, SSL, HTTPS, VPNs, proxy servers, authentication, and WiFi (802.11a/b/g). The speech also included observations relating to Verizon's recent announcements concerning the scheduled availability of cellular data services in 75 markets using EV-DO technology.

Session Notes (PDF):

Black & White

Color