[Autogenerated] Now you can tell that by the hair and stuff like that.
When I started building networks and actually start off as a network engineer,
What side in this business of 18 ball firewall?
It came in the box right on It plugs into Iraq on you could point to it.
You could say that is my firewall, right?
That's of course.
Now, that completely changed.
Now you buy a virtual firewall.
Will you buy a box that has 10 firewalls in your
firewall sitting in a cloud somewhere, right?
So tell me about our think the D s s.
It's what 12 years old mouth there was written when
firewalls were physical device.
Yes.
It sort of reads like firewalls.
A physical device.
It does.
How do you How do you assess virtual files?
How do you assess cloud environments?
Where sometimes, like in aws, sometimes you don't really have a firewall.
You don't.
You don't have a physical device, right?
Uh,
you still in eight of us or in a virtualized environment
with virtual firewalls or the like,
AA or other kinds of software to find infrastructure.
You still have a place where you manage layer three access controls.
Right?
So you still have firewall rules, right?
In the way that you've had firewall rules for a long time.
And so managing those rules is still pretty much what it's always been in the d.
S s.
You still need justifications.
You still need to have a meaningful change management process for
adding or removing or modifying those kinds of rules.
You still need kind of the minimum necessary set of rules for traffic
going in and out of your in scope environments.
Right.
Uh, so those all are I don't want to say unchanged,
but those all still apply right.
The notions still apply,
even if maybe sometimes the wording seems a little funny.
Um,
and then the questions of device management are maybe either more abstract or
just applied to the place where you manage those rules,
right?
So when you're talking about who has the roles of the
responsibilities for doing this right,
that's now who can log into the eight of us Consul,
for example, and change the security groups rules,
right.
So that group should be defined, right?
And that group should have access,
and other people maybe shouldn't have access to that function,
right in the same way that once that group should have been able to
log into those physical devices and make rules changes and the
groups that didn't have the that responsibility maybe shouldn't
have had access to those devices.
So the notions air still largely there.
Um, you have thio occasionally.
Kind of use your head a little bit to think about how
they apply to this environment.
But this may actually be one of the easier.
It's sort of requirement sets to sort of think about in a cloud
or suffer to find infrastructure setting.
So think about the principle of where is the point where you define
where I p layer traffic go in and out your network,
right?
And that the firewall right in D S s terms, right?
Exactly.