From: Sylvain Robitaille on
Rahul wrote:

> Out of curiosity though: how does one apply the same argument to a
> non-HPC setting.

One doesn't. The two scenarios are completely different.

> Say I had 100 workstations I was buying. How does one justify a
> perimeter firewall against protecting each machine individually?

If you're buying 100 workstations, plan to budget for both a perimeter
firewall, and individual protection for each machine. If you can't
get the budget, that might mean you can buy only 95 workstations.
(actually 99 workstations; appropriate one to use as the perimeter
firewall, and the individual protection for the others will be in the form
of tcp_wrappers/xinetd configuration, perhaps with iptables configuration
in addition)

Appropriate configuration for the perimeter firewall and the individual
protection, as I note in an earlier message (and others have noted
previously) is site-specific. You won't be able to get anything that
specific from a newsgroup.

--
----------------------------------------------------------------------
Sylvain Robitaille syl(a)encs.concordia.ca

Systems analyst / AITS Concordia University
Faculty of Engineering and Computer Science Montreal, Quebec, Canada
----------------------------------------------------------------------
From: Rahul on
Sylvain Robitaille <syl(a)alcor.concordia.ca> wrote in
news:slrnhkumc2.1pt.syl(a)charlotte.encs.concordia.ca:

> Appropriate configuration for the perimeter firewall and the individual
> protection, as I note in an earlier message (and others have noted
> previously) is site-specific. You won't be able to get anything that
> specific from a newsgroup.
>

Thanks! Of course, I didn't want to ask for specific settings. I just
wanted opinions on the philosophy and overall structure. Central vs
distributed.

--
Rahul
From: The Natural Philosopher on
Rahul wrote:
> Sylvain Robitaille <syl(a)alcor.concordia.ca> wrote in
> news:slrnhkumc2.1pt.syl(a)charlotte.encs.concordia.ca:
>
>> Appropriate configuration for the perimeter firewall and the individual
>> protection, as I note in an earlier message (and others have noted
>> previously) is site-specific. You won't be able to get anything that
>> specific from a newsgroup.
>>
>
> Thanks! Of course, I didn't want to ask for specific settings. I just
> wanted opinions on the philosophy and overall structure. Central vs
> distributed.
>
central management, and occams razor* on the protection.

*"entities should not be multpplied beyond necessity". OWTTE