Hi,
All these issues with data access are generally down to topology. There are no insurmountable flaws with the SIF specification as it stands.
Security issues with open source software is an already well debated topic. Everyday security often comes down to software being well written, well maintained and regularly and swiftly updated.
If you are after a ZIS that conforms to the standards you could look at the open-source OFSZIS OFSZIS.co.uk which supports the full UK & US SIF specification (With both push and pull support).
OFSZIS also has added security that is transparent to the agents.
It is still in 'Beta' and requires more testing and a little more work on the logging features but we are not far from having a finished ZIS that should pass the certification. I would like OFSZIS certified as soon a possible but the charges for certification are quite heigh.
I may post some topology examples on the OFSZIS wiki with diagrams soon as this is indeed a rather confusing area.
Matt - OFSZIS Developer
