RE: Net-IQ exit point

midrange-l-request@xxxxxxxxxxxx wrote:

>   3. Net-IQ exit point (Elvis Budimlic)
>
>And more importantly, does Net-IQ's exit point program know/care if it is
>"daisy chained" and invoked by another exit point program?

Elvis:

Although I (perhaps obviously) cannot speak directly to your question, I can 
address the concept.

When a security/auditing function is _not_ the first in the chain, it cannot 
take responsibility for the transaction. Assuming the exit program does not 
regularly verify that it has position #1, then you -- the customer -- 
technically have the ability to place an exit program subordinate to any other 
exit program as long as the higher levels support "daisy-chaining".

That's beside any potential messes that might result in later installs, 
upgrades or uninstalls of products.

But you need to be very aware that if you purchase and install a package for 
security and/or auditing, you are effectively subverting the purpose by putting 
the package programs lower in the chain. The security/auditing function has no 
way to prove that the transaction it's looking at wasn't temporarily modified 
somewhere up higher.

And note that this can also affect decisions on how a security function should 
treat any allow/reject flags that are passed back up from lower in the chain.

Contact vendors for specific details. This list is excellent for background, 
but you need direct info for this question.

Tom Liotta

-- 
Tom Liotta
The PowerTech Group, Inc.
19426 68th Avenue South
Kent, WA 98032
Phone  253-872-7788 x313
Fax    253-872-7904
http://www.powertech.com


__________________________________________________________________
Switch to Netscape Internet Service.
As low as $9.95 a month -- Sign up today at http://isp.netscape.com/register

Netscape. Just the Net You Need.

New! Netscape Toolbar for Internet Explorer
Search from anywhere on the Web and block those annoying pop-ups.
Download now at http://channels.netscape.com/ns/search/install.jsp