Implementing Policy (cont)

• Do not use DNS names to define security in toolkit configuration as DNS is spoofable

• Nodes not in DNS are filterable with special name “unknown”

• Firewall proxies may permit access from any other node (“*”) if authenticated

Previous slide

Next slide

Back to first slide

View graphic version