I’m still digesting all the info we got from the keynotes today.

Some quick and dirty observations; Microsoft’s proposal that IPSEC and
IPV6 are the next great delineation tools that will replace physical
network segregation is a lofty goal. IPV6 really hasn’t taken off yet
and IPSEC networks are stiil the stuff of military-grade networks.

The over-arching theme of the conference is securing the information
asset as opposed to securing the perimeter that they contend is
dissolving. They’re also repeating what SANS has been saying for
years; defense-in-depth is the best solution.

Of course, being an RSA conference they’re championing data encryption
as a fluid defense that is superior to the static, ‘barrier’ security
currently being deployed by the industry I agree with this whole
heartedly and the marriage of RSA and EMC looks promising in that
aspect.

Symantec took a nice jab at Microsoft by stating its aa conflict of
interest for the operations platform vendor to be responsible for the
platform’s security. That earned a solid round of applause. Now if
only Symantec could make a better AV product, they could back up that
statement.

Lastly, I can’t moderate comments on the road, so excuse the delay in
comment moderation. I’ll moderate them as soon as I get an
opportunity.