To put a perspective on the bug/vulnerability thing - we have to upgrade somewhere around 40-50 firewalls due to a vulnerability in a GUI page that shows a geographical map of activity on the firewall. Years ago, those 40 or 50 firewalls would actually be more like 200-250 firewalls, because of virtualization, you can run what used to be several different firewalls on one big firewall. And some of these are BIG firewalls.
We don't use that geographical mapping service. I don't even know where it is on the GUI. They're eye candy you set up for when there is a tour of VIPs coming through your department to show...uh...something. But since I'm the vulnerability/compliance guy on the team, I have to deal with it because of the vulnerability.
This page has examples of currently available GIS services/systems.
Ultimately it's garbage like that running on firewalls that I consider to be a poor use of resources - and increases the attack surface too. The vendors think differently - more service/functionality - charge more money!
I've mentioned this before - this is at least part of the reason that FB, Google, AWS don't use firewalls/network equipment from these vendors. They roll their own.
ok. I'm tired, and when I'm tired I get chatty..and grumpy. But I'm on call - and naturally I'm getting dragged into things now.
We don't use that geographical mapping service. I don't even know where it is on the GUI. They're eye candy you set up for when there is a tour of VIPs coming through your department to show...uh...something. But since I'm the vulnerability/compliance guy on the team, I have to deal with it because of the vulnerability.
This page has examples of currently available GIS services/systems.
Ultimately it's garbage like that running on firewalls that I consider to be a poor use of resources - and increases the attack surface too. The vendors think differently - more service/functionality - charge more money!
I've mentioned this before - this is at least part of the reason that FB, Google, AWS don't use firewalls/network equipment from these vendors. They roll their own.
ok. I'm tired, and when I'm tired I get chatty..and grumpy. But I'm on call - and naturally I'm getting dragged into things now.

