Security Hygiene, Doing All the Little Things Right (All the Time) - Jody Brazil - BSW #254

Published: March 15, 2022, 9 p.m.

b'

It doesn\'t matter how much security technology you have, how much you spend on security: security outcomes are achieved by doing all the little things right. You can spend $10M on network security technology from any vendor, but you will fail to effectively secure your enterprise if you don\'t properly manage the policy enforced by those firewalls. That sounds really simple, but simple doesn\'t scale. If you only have a few firewalls with policies consisting of tens of rules, it may be simple. But imagine an enterprise that has 2,000 firewalls, each firewall has a policy with an average of 500 rules, each rule has an average of 15 objects, each source and destination object represent an average of 50 IP addresses. This enterprise is managing, 2,000 firewalls, 1 million rules, 125 million connections, representing over 300 billion access paths. And just 1 wrong rule could expose the network to compromise.

\\xa0

This segment is sponsored by FireMon. Visit https://securityweekly.com/firemon to learn more about them!

\\xa0

Visit https://www.securityweekly.com/bsw for all the latest episodes!

Show Notes: https://securityweekly.com/bsw254

'