Greg Young

I spent Wednesday visiting with several of our enterprise customers at their offices.  I find these face to face meetings very enjoyable and informative: in person is always a better exchange than by phone
One of the recurring themes for the day was Nokia.  Many of the companies I met with happened to be using Check [...]

[Read more →]

ITSec has a long and shameful history of taking any newsitem and trying to find a nexus that means you need more ITSec.  The worm turns, and we are seeing another barrage of bad marketing around linking the downturn and ITSec in some very unbelievable ways.
Don’t reward companies that use FUD like hackers will have [...]

[Read more →]

The 2H09 Enterprise Network Firewall Magic Quadrant (MQ) was published on Friday here.
This edition of the firewall MQ was more challenging than most years because the acquisition of Secure Computing by McAfee, and the announcement by Nokia of changes to their security appliance business happened in the middle of the analysis.  Also, my coauthor John [...]

[Read more →]

The blogosphere and vendorsphere is shrill with talk about cloud security.  I’ve started translating these rants by replacing the word "cloud" with "PKI", and if the assertion still makes sense, I ignore it.
This morning I delivered a presentation on In the Cloud Security at the Gartner Enterprise Network Conference (and yes, I self-assessed by applying [...]

[Read more →]

I’m at the Gartner Enterprise Networking Summit in Orlando, Florida.  The previous sentence provides two interesting segues: first, I’m reminded why so many northeasterners winter in Florida, and second, the majority of attendees here work in enterprise networking, the organizational colleague of network security. 
There is a stereotype that Security people say ‘no’ all the [...]

[Read more →]

(Infrequently, I’ll divert from security blogging to provide some regional items.)
When life hands you lemons…
The Ottawa tech sector is a smoking crater.  The tech salad days in Ottawa saw JDS being a large employer, Nortel trading above $100, the stellar early successes of companies like Entrust, Newbridge and Corel, and a burgeoning start-up culture [...]

[Read more →]

This week Peter Firstbrook, Adam Hils and I published a research note  titled The Secure Web Gateway Will Not Converge With Enterprise Firewalls.
This note was the product of some cross-group discussions, where we examined the different deployments of SWG and firewalls in enterprises, branch offices and small and midsize businesses (SMB).

[Read more →]

Security companies can lose sight of you, the customer, and get distracted with only what competitors are doing.  Sure, you want some competitive comparison but you should look for vendors who tell you what you will get as a result of all these claims.  Every IPS vendor claims to be best at delivering IPS signatures [...]

[Read more →]

From the 17-19th of Nov. I’ll be at the Gartner Enterprise Networking and Communications Summit (aka Net3).  From the security team, Lawrence Orans will also be there as well.  The event is at the Gaylord Hotel in Orlando, FL. 
I spend most of my conference time attending security themed events, so Net3 will be interesting.  [...]

[Read more →]

Network and host security are cousins, but not close ones.  In enterprises, they have different operations centers, buying priorities and budgets, and different business and service goals.  No, they won’t converge any time soon.  Yes, there are some marginal benefits to having some links, such as visibility between network and host so you can coordinate [...]

[Read more →]