Cisco earlier this week announced hardware intended to safeguard networks at a lower cost, but it could lead to infighting in IT departments.
The five new security modules plug directly into Cisco's Catalyst 6500 line of data switches, which regulate the flow of data on a network. The modules can tap into the switches' wide bandwidth and eliminate the need for separate, costly hardware to control security features such as a company's firewall, the company said.
"We're integrating security into the network," said Tom Russell, director of marketing and product development for Cisco's security business unit.
Security and network administrators should be able to manage the modules easier than the stand-alone security appliances they replace, said David Passmore, a networking analyst with the Burton Group, a research and consulting company. But adding security functions to a networking device could lead to trouble within companies' information technology departments, he said.
The IT specialists who are in charge of security at an organisation are typically not the same people who handle networking, so having both types of functions on the same device could lead to some infighting, he warned.
"Security folks in particular tend to be control freaks," Passmore said. "The idea that they're going to give up control of the firewall and let the networking guys stick it within the networking switch may not go down well with them."
But integrating the network and security hardware into one box has its benefits, Russell said. By including security modules inside the networking switch, customers can deploy security services throughout their networks, he said. For instance, a customer could set up a dynamic, multipoint VPN (virtual private network) service, instead of the typical point-to-point VPN connection, Russell said.
Cisco's five new hardware offerings consist of the firewall services module, the Internet Protocol (IP) VPN services module, a Secure Sockets Layer (SSL) module and two network analysis modules.
2%
4%
