Re: [sacm] [sacmwg/draft-ietf-sacm-information-model] Section 6: No software, no hardware...no endpoint? (#80)

[adammontville <[e-mail]>]

Hi Cliff, thanks for your response (it's been a while :-). I do not believe the paragraph in question qualifies the endpoint model to those known to SACM sensors:

```The following figure shows the make up of an Endpoint asset which
   contains zero or more hardware components and zero or more software
   components each of which may have zero or more instances running an
   endpoint at any given time as well as zero or more identities that
   act on behalf of the endpoint when interfacing with other endpoints,
   tools, or services.  An endpoint may also contain other endpoints in
   the case of a virtualized environment.```

But, I take your point relative to observations from outside the bounds of the endpoint (i.e. MAC address, as your example states). In that case, I think this ticket should change from "do we need to update our model?" to "can we improve this paragraph to mention why endpoints can be modeled without hardware or software?"

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/sacmwg/draft-ietf-sacm-information-model/issues/80#issuecomment-309850261