RE: [fw-wiz] Managed Firewall Service - Opinions

From: Melson, Paul (PMelson@sequoianet.com)
Date: 04/17/03

  • Next message: Mark Gumennik: "Re: [fw-wiz] commercial va" 
    From: "Melson, Paul" <PMelson@sequoianet.com>
To: "Jeffery.Gieser@minnesotamutual.com@AICNOTES" <IMCEANOTES-Jeffery+2EGieser+40minnesotamutual+2Ecom+40AICNOTES@sequoianet.com>, <firewall-wizards@honor.icsalabs.com>
Date: Thu, 17 Apr 2003 12:59:31 -0400

    To be fair, any security services company with a half-way decent legal department will require some level of disclaimer like this in their SLA, or any contract for that matter. You're asking too much if you want to pay a vendor $15K-$20K/yr and expect them to pay 10x to 100x that back if there's a security incident. I can't think of any industry where a vendor assumes that level of risk. That doesn't mean you can't still sue them, though, if you feel their was negligence or incompetence on their part.

    > -----Original Message-----
    > From: Jeffery.Gieser@minnesotamutual.com@AICNOTES
    > Sent: Thursday, April 17, 2003 11:39 AM
    > To: firewall-wizards@honor.icsalabs.com
    > Cc: Fiamingo, Frank
    > Subject: Re: [fw-wiz] Managed Firewall Service - Opinions
    >
    [...snip...]
    >
    > 4. They usually force you to sign an agreement stating they are not
    > resposible for any security incident at your site even if it results from a
    > configuration mistake that they made on your firewall.
    _______________________________________________
    firewall-wizards mailing list
    firewall-wizards@honor.icsalabs.com
    http://honor.icsalabs.com/mailman/listinfo/firewall-wizards

  • Next message: Mark Gumennik: "Re: [fw-wiz] commercial va"