[j-nsp] Junos EVO RE Filters

[heasley]

Tue, Jun 18, 2024 at 07:20:12PM +0300, Saku Ytti via juniper-nsp:
> If you must use MGMT ETH, keep asking your vendors for true lights out
> ethernet, with its own CPU, DRAM and storage.

Yes, do that, please, but that does not really address the security
problems.  BMCs typically are not updated by their owners, s/w updates
for them are rarely offered by the vendor, usually have limited filtering
& security capabilities, and are difficult to manage.

You have to ask for much more.