Re: Sun cans Trusted Solaris, was Why Easy To Use Software Is Putting You At Risk

I am not sure what the question is.

Software life cycles have a beginning and an end, SUN  is merely adjusting its 
product based on business objective. As far as the platform goes you will still 
be able to purchase the modules and build ala cart, and they did say there will 
be product support  for at least eight years.

The testing assurance and certification cost of getting the EAL stamp, was 
probable factored in to what ever Government contract this product was 
developed for.

An EAL 4+ assurance can be achieved on out of the box platforms like AIX 5.3 as 
well, maybe SUN lost a big deal, or it appears to make good business steps for 
SUN's product cycle. 

Does your security policy require  all the aspects of an EAL4+ rating?  

If not just buy the parts you want from SUN or start an IBM deployment ans 
harden the server's as needed.


Bob Hines
CISSP


---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Tailor your education to your own professional goals with degree 
customizations including Emergency Management, Business Continuity Planning, 
Computer Emergency Response Teams, and Digital Investigations. 

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------