When there’s no patch: how to find and fence unfixed flaws

Some flaws will never get a patch, some don't have one yet, and some have one you can't install. How to find them, fence them, watch them and plan their exit.

Some flaws will never get a patch, some don't have one yet, and some have one you can't install. How to find them, fence them, watch them and plan their exit.

Arista's tunnel decapsulation flaw has been on CISA's KEV list since June, and Arista says no software fix is planned. Find the exposed switches and fence them with ACLs.