Home Computer Network Security Network Security Product Or Service

Network Security Product Or Service

Written by Larry S. Wiggins    Monday, 09 March 2009

When your office has a monitored burglar alarm system installed, is it a product or a service? With infrared motion detectors and sirens, you might think that a security system is a product. But the true value isn't in these Spy Kids gadgets. It's in the vendors' experience, around-the-clock operations center, and rapid-response hot line. The same may be true with network security systems. Historically, the emphasis has been on the products themselves -- Computer Associates' eTrust Antivirus 7.0 and its competitors, enterprise-class firewalls such as the Cisco PIX, and IDSes (intrusion detection systems) from companies such as NetScreen. These products are effective when used correctly. But what is it that you want, security products or security? For small or single-site enterprises, look at security products rather services. Antivirus on the client and server, a tough firewall at the WAN router, and a good password scheme will be a solid enough defense. By contrast, large and distributed organizations have too many potential vulnerabilities, too many entry points, and too many vital assets for security to be handled by a few rack-mounted appliances and a few software licenses. In such a situation, overworked systems administrators must not only maintain the system, but also must know what do when a problem occurs. Between needs assessment, solution installation, maintenance, monitoring, auditing, and real-time response and countermeasures, security is a complex task that many enterprises simply can't handle on their own. Outsourcing network security might be the right strategy, depending on your particular circumstance and enterprise. Bear in mind that your security needs will change rapidly based on events that may be entirely out of your control such as new hack techniques, new viruses, and newly discovered weaknesses in software and hardware platforms. It may be difficult if not impossible for your IT staff to keep abreast of the technology, knowing not only the threats, but also the correct responses. With options ranging from security tools vendors to enterprise consultants to pure-play security services companies, outsourced security management should be considered as a possible piece of your security strategy.

Last Updated ( Monday, 09 March 2009 )