@@ -1518,11 +1518,10 @@ This is often implemented with:
* deployment guidance
* product architecture
Many of the items above are operational environment requirements, and often product user's responsibility to implement correctly.
Using segmentation makes it easier to detect undesired traffic in the management network.
Segmentation limits the attack surface from other connected networks, but it does not remove integrity, confidentiality and authentication requirements as all control traffic
Many of the items above are operational environment requirements, and often product user's responsibility to implement these means correctly. Using segmentation eases the detection of undesired traffic in the management network.
And, segmentation limits the attack surface from other connected networks, but it does not remove integrity, confidentiality and authentication requirements.
Management traffic in this context refers to command and control instructions that change the system operation or the managed network element operation.
Management traffic in this context refers to command and control instructions that change the product or the managed network element operation.
