Key Points to Educate this Customer
Security policy needs to be well-defined
They need to look closely at the interactions of:
- NAT
- Firewalls & application proxies
- End-to-end encryption
Tradeoffs between:
- VPN with dedicated facilities
- Secure overlay
Administration
- Address space -- what if everybody uses 10.0.0.0?
- Key management
- Problem reporting & resolution