Cisco - TABPI

Editor in Chief Eric Lundquist
Executive Editor/News Michael R. Zimmerman
Director/Design Paul Schaffrath
Director/eWEEK Labs John Taschek
Managing Editor Sue Troy
Executive Editor Stan Gibson
Executive Editor/eWEEK Labs Deb Donston
Technology Editor Peter Coffee
NEWS
News Editor Scot Petersen
Deputy News Editor Chris Gonsalves
Department Editor John S. McCright
Online News Editor Rick Dagley
Online Editor Shelley Solheim
Senior Editors Jeffrey Burt, Caron Carlson,
Dennis Fisher, Peter Galli,
Paula Musich, Carmen Nobel
Senior Writers Dennis Callaghan, Renee
Boucher Ferguson, Evan
Koblentz, Darryl K. Taft,
Lisa Vaas
Exec. Asst. to Editor in Chief Colleen Shanley
gWEEK LABS
Technical Director, West Coast Timothy Dyck
Technical Director, East Coast Jim Rapoza
Senior Analysts Henry Baltazar, Jason Brooks
Cameron Sturdevant
Technical Analyst Francis Chu
Managing Editor Mary Stevens
Senior Writer Anne Chen
EDITORIAL PRODUCTION
Deputy Managing Editor Debra Perry
Deputy Copy Chief Jim Williams
Senior Copy Editor Frederick Ricketts
Production Designer Tara-Ann Fasulo
ART DEPARTMENT
Senior Art Director Stephen Anderson
Senior Macintosh Artist Paul Connolly
gWEEK
Publisher Brian M. Gleason
Business Manager John Dennehy
Marketing Mary Zagrobelny,
Group Marketing Director;
Caroline Tilghman,
Research Analyst
Ad Traffic Howard Lubinger, Manager
Production Manager Milena Emery
ZIFF DAVIS MEDIA
Chairman & CEO
Robert F. Callahan
Chief Operating Officer & CFO
Bart W. Catalane
Senior Executive Vice President, Publishing Operations
Tom McGrade
Executive Vice President & Editorial Director
Michael J. Miller
Executive Vice President, General Counsel & Secretary
Gregory Barton
SENIOR VICE PRESIDENTS
Jasmine Alexander (Technology & Sales Operations)
Derek Irwin (Finance)
Charles Mast (Circulation)
Sloan Seymour (Enterprise Group)
Dale Strang (Game Group)
Jason Young (Internet)
VICE PRESIDENTS
Ken Beach (Corporate Sales)
Tim Castelli (PC Magazine Group)
Charles Lee (Integrated Media)
Aimee D. Levine (Corporate Communications)
Jim Louderback (Editor in Chief, Internet)
Eric Lundquist (Editor in Chief, eWEEK)
Bill Machrone (Editorial Development)
David Mullen (Controller)
Beth Repeta (Human Resources)
Tom Steinert-Threlkeld (Editor in Chief, Baseline)
Stephen Sutton (Internet Audience Development)
Stephen Veith (Publisher, CIO Insight)
Senior Director, Manufacturing
Carlos Lugo
Director, International
Christin Lawson
eWEEK editorial staff members can
be reached at (781) 938-2600 or
(800) 451-1032, or via e-mail using the following formula: firstname_lastname@ziffdavis.com.
For example: eric_lundquist@ziffdavis.com (Don’t
use middle initials in address.)
eWEEK®, PC Week®, PC Week Netweek®, PC Week Shoot-Out®,
Spencer F. Katt® and Spencer F. Katt: Rumor Central® are registered
trademarks of Ziff Davis Publishing Holdings Inc. Copyright (c) 2002 Ziff
Davis Media Inc. All rights reserved. Reproduction in whole or in part
without permission is prohibited. For permission to reuse material in this
publication or to use our logo, contact Ziff Davis Media’s
rights and permissions manager, Olga Gonopolsky, via email,
olga_gonopolsky@ziffdavis.com; phone, (212) 503-
5438; fax, (212) 503-5420. For reprints, contact Lori
Noffz via e-mail, eweek@reprintbuyer.com; phone, (717)
399-1900, Ext. 104. Printed in the U.S.A.
FWEEK.COM
THIS fWEEK
find a weak point; build a firewall.
It’s an ad hoc approach, but it’s the one corporate IT is following as it
gropes its way to more secure Web computing. This week, eWeek Labs
West Coast Technical Director Tim Dyck reviews three Web application
firewalls designed to protect an extremely weak link in the Web infrastructure.
And application holes are often exploited. Tim says the vendors tell
him that customers come calling when they’ve failed a penetration test. The
products he reviews are for critical servers and take a Draconian approach
to security, eliminating access except by specifically allowed, or white-listed,
entities. Tested were Sanctum’s AppShield 4.0,
Teros’ Teros-100 APS 2.1.1 and Kavado’s InterDo
3.0. Teros won Tim’s Analyst’s Choice award.
Tim notes that we already have conventional
firewalls, of course, and two of these can be
used to create a demilitarized zone around
a particularly sensitive server. Then you can
add a Web application firewall and maybe
a database firewall. The result is a firewall
infrastructure that’s ripe for consolidation.
Tim predicts this will happen, with such larger
players as Check Point Software Technologies
leading the way.
Ah, security. We just can’t get enough. And if
you listen to Richard Clarke, we’re not about
L Tuesday,
check out
eWEEK’s online
exclusive interview
with
Richard
Clarke, former chairman of
the President’s Critical Infrastructure
Protection Board,
and find out why he’s so criti-
cal of the government’s
cyber-security strategy.
L Wednesday,
join Cameron
Sturdevant
for
an online
walk
through one of the latest
patch management
The NCC is expected to emerge
from the DHS next month.
to get enough of it from the Department of Homeland Security. Now that
he has left the government, Clarke is very active on the speaking circuit.
Dennis Fisher interviewed Clarke when he came to Boston last week and
heard Clarke reiterate his call for a National Cybersecurity Center with
direct access to the president.
But if you look at the organizational chart, the NCC appears buried beneath
levels of bureaucracy. Clarke has a point. For whatever reason, Clarke feels
he was slighted when the DHS structure was created, so it’s hard to tell whether
his critiques of the structure are objective or merely sour grapes.
Finally, some good news: Microsoft has listened to customers. As Peter
Galli reports, customers have told Microsoft that waiting three years for a
major product upgrade is too long. So Redmond plans to deliver new technologies
as incremental add-ons, “out of band” from the regular upgrade cycle.
The first candidates, as Peter reports, are likely to be Network Attached
Storage 3.0, Small Business Server 2003 and a version of Windows
Server 2003 for AMD’s processors. Customers get to enhance the products
at a pace of their own choosing. What’s not to like? ´
Till next eWEEK, send your comments to stan_gibson@ziffdavis.com.
products reviewed by eWEEK
Labs, PatchLink Corp.’s
PatchLink Update 4.0.
dFriday, get your fix of tech
rumors early:
Eweek.com posts
Spencer F. Katt’s
Rumor Central
column that night
each week.
MAY 26, 2003 n eWEEK 3