maybe i just misunderstand you but you seem to portray these issues as black and white. they're not. ssh has had known security problems, and kerberos, while i like it myself, is damned easy to misconfigure which opens all kinds of holes.

The point here was not cisco or unix having some features but the fact that open systems are much easier to secure than proprietary stuff. SSH and kerberos were available on unix platforms for years. And if anyone thinks one can really secure cisco, try playing tricks with Internet protocols over CLNP :) --vadim