<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body dir="auto">
<div>Thanks for this great summary Ed. I'm on board. </div>
<div><br>
</div>
<div><img src="cid:DAE883FC-4143-4B88-8F8A-B85DAFDEC76A" alt="image1.GIF" id="DAE883FC-4143-4B88-8F8A-B85DAFDEC76A"><br>
<br>
<div>Sent from my iPhone</div>
</div>
<div><br>
On Jan 11, 2018, at 10:32 AM, Ed Leatherman <<a href="mailto:ealeatherman@gmail.com">ealeatherman@gmail.com</a>> wrote:<br>
<br>
</div>
<blockquote type="cite">
<div>
<div dir="ltr">From what info I'm aware of, hypervisor fixes (at least vmware) are not resulting in a perceptible performance degradation, however fixes at the guest OS level are showing performance issues depending on the type of operation involved.
<div><br>
</div>
<div>To completely mitigate the vulnerabilities, seems like in most cases it requires a multi-faceted effort, BIOS/firmware/CPU, Hypervisor (if present), and OS all must be updated to address all of the attack vectors. Right now the fixes at the OS layer don't
see fully baked.</div>
<div><br>
</div>
<div>I feel like if you're 100% appliance based VM's wrt Cisco UC apps and they are the only things running in the cluster, your risk is pretty low and letting details/patches get sussed out is logical before you go crazy patching things.</div>
<div><br>
</div>
<div>If there are non-UC or non-appliance items running in the same cluster, then addressing at the hardware and hypervisor level is important, followed by guest OS fixes for those other VMs once you understand the impact on those. Just my current thinking
anyway. I bet we don't see any UCOS patches that address this at the OS level until its fully baked or its just part of the linux kernel they use.</div>
<div><br>
</div>
<div><br>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Tue, Jan 9, 2018 at 8:32 PM, Lelio Fulgenzi <span dir="ltr">
<<a href="mailto:lelio@uoguelph.ca" target="_blank">lelio@uoguelph.ca</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="auto">
<div><br>
</div>
<div id="m_2340608209908556410AppleMailSignature">To be honest, I'm a little worried about the rumoured slowdown the fixes are gonna have. Will this impact the supported status of certain CPUs in collab suite?</div>
<div id="m_2340608209908556410AppleMailSignature"><br>
Sent from my iPhone</div>
<span class="">
<div><br>
</div>
</span></div>
</blockquote>
</div>
<br clear="all">
<div><br>
</div>
-- <br>
<div class="gmail_signature" data-smartmail="gmail_signature">Ed Leatherman<br>
</div>
</div>
</div>
</div>
</div>
</blockquote>
</body>
</html>