Dumb switches will blast packets to all interfaces that are connected. If there's a machine on the switch that's in promiscuous mode, it can see all the packets on the local network (including the backups coming in from customers).
Managed switches typically have ACL support. I get the KISS principle, but this setup seems to be trading security for simplicity.
Managed switches typically have ACL support. I get the KISS principle, but this setup seems to be trading security for simplicity.