North American Network Operators Group|
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical
Re: Customer-facing ACLs
On Mon, 10 Mar 2008, Scott Weeks wrote:
The hard part is I now always take over networks that have been in operation a long time and enabling these policies can be very painful after the fact. Establishing them when the network is new is a different story.
The question is do you explain to you customers just as carefully what
your default policy doesn't do, as well as what it does. Do you take
just as much time to carefully explain the risks and what may break to your customers of allowing that traffic as you would of not allowing that traffic.
It seems to be very painful whatever decision is made.