April 05, 2004

Security, Cisco-Style

http://www.certmag.com/articles/templates/cmag_nl_infosec_content.asp?articleid=681&zoneid=39

This is a very short guide to a very extensive array of security information available at the Cisco site -- one which explains what can be found somewhat better, I think, than Cisco itself does. Covering security advisories for Cisco products; technologies: security including overviews, case studies, trends analysis, best practices, white papers, and more; enterprise and small-medium business security seminars, white papers, self-study courses, and more; ISPs: managed security services; a security glossary; plus the Networking Professionals Connection: Security Forum, this page indexes a wealth of Cisco information, itself more easily found due to this page.

Posted by jho at 08:53 PM | Comments (3)

March 22, 2004

Security Suggestions

http://whitepapers.comdex.com/data/detail?id=1079029984_674&type=RES&src=KA_RES_20040317

The URL indexes a white paper on "Integrated Security: Defending against Evolving Threats with Self-Defending Networks", which is Cisco's initiative to produce integrated security deep within the infrastructure. Something like this does seem like the best solution to this problem, and of course, can help improved Cisco's bottom line.

Some other security white papers from Cisco are:

Cisco IP Communications Security Policy Development and Planning Guide
http://whitepapers.comdex.com/data/detail?id=1078939330_728&type=RES&src=KA_RES_20040317

Trust and Identity Management: Solutions Overview
http://whitepapers.comdex.com/data/detail?id=1079026302_550&type=RES&src=KA_RES_20040317

IP Telephony Security in Depth
http://whitepapers.comdex.com/data/detail?id=1057858103_115&type=RES&src=KA_RES_20040317

Another major white paper on identity management, "Enterprise Identity Management: It's About the Business" defines the technologies involved to produce a solutions roadmap, and can be found here:

http://whitepapers.comdex.com/data/detail?id=1079109672_743&type=RES&src=KA_RES_20040317

A white paper on "Log Management: Closing the Loop on Security Event Management" explains this crucial networking activity, and can be cound at:

http://whitepapers.comdex.com/data/detail?id=1079109677_478&type=RES&src=KA_RES_20040317

Two security papers relating to the Windows world are "Best Practices for Designing a Secure Active Directory - Multi-Org Exchange Edition", available at:

http://whitepapers.comdex.com/data/detail?id=1042225768_732&type=RES&src=KA_RES_20040317

and "Architecture and Design Review for Security", which can be found here:

http://whitepapers.comdex.com/data/detail?id=1079366506_346&type=RES&src=KA_RES_20040317

Posted by jho at 09:58 PM | Comments (7)

December 13, 2003

Take Charge Of That Network

http://whitepapers.comdex.com/data/detail?id=1070907380_696&type=RES&src=KA_RES

In comparison to hardware and configuration details, network management often gets scanted in networking courses, even if it is supposed to be a curriculum item. Network management is just so theoretical and amorphous without an actual network to manage. This white paper: "Cisco - Network Management System: Best Practices White Paper" covers the 5 ISO management functional areas with reference to managing Cisco systems, and is therefore a potentially useful resource in making network management instruction manageable.

This paper on Wireless LANs may be useful as an adjunct to this: "Wireless LANs: The Essentials for Saving Your Sanity":

http://whitepapers.comdex.com/data/detail?id=1046952003_302&type=RES&src=KA_RES

The Cisco take on wireless LAN planning: "Preparing for Wireless LANs" is provided here:

http://whitepapers.comdex.com/data/detail?id=1057858029_986&type=RES&src=KA_RES

while this paper looks more closely at a major management concern: "Cisco - Change Management: Best Practices White Paper":

http://whitepapers.comdex.com/data/detail?id=1070907379_141&type=RES&src=KA_RE

and another management area is covered in this document: "Cisco - Configuration Management: Best Practices White Paper ":

http://whitepapers.comdex.com/data/detail?id=1071077473_593&type=RES&src=KA_RES

Posted by jho at 10:19 AM | Comments (0)

Pragmatical Practice

http://whitepapers.comdex.com/data/detail?id=1070473161_825&type=RES&src=KA_RES

If wireless security is not a concern, it should be; the basic WEP standard has demonstrated weaknesses, and undetected interception is so much easier with wireless that additional measures must be undertaken. This white paper: "Practical Solutions for Securing Your Wireless Network" can give you some pointers on how to reap wireless roses without security exploit thorns.

Another security paper from Cisco Systems focusses on: "Technology Best Practices for Endpoint Security":

http://whitepapers.comdex.com/data/detail?id=1070907383_68&type=RES&src=KA_RES

which introduces another layer into the security cake.

Posted by jho at 10:14 AM | Comments (0)

December 09, 2003

Enumerating Looming Threats

http://www.informit.com/content/index.asp?product_id=%7B29747BB6-292E-4B74-8E76-8D1696FACCBD%7D&120703

Article which covers threat analysis and classification for Cisco systems, providing a good primer to how things can go wrong with your network, especially if someone is actually trying to do you harm. Knowing where threats originate, and how they can be divided into different types of threats are both useful subjects for teaching network administration.

Posted by jho at 04:52 PM | Comments (2)

August 19, 2003

Stepping On It

http://whitepapers.comdex.com/data/detail?id=1057858101_721&type=RES&src=KA_RES

The journey of 1000 miles of network security begins with a single step -- this white paper: "Action Steps for Improving Information Security" explains how to complete the journey for your infrastructure.

Posted by jho at 08:43 PM | Comments (2)

August 05, 2003

SAFE-ty In Numbers

SAFE: IP Telephony Security in Depth http://whitepapers.comdex.com/data/detail?id=1057858103_115&type=RES&src=KA_RES

SAFE VPN - IPSec Virtual Private Networks in Depth http://whitepapers.comdex.com/data/detail?id=1014669748_545&type=RES&src=KA_RES

SAFE - Extending the Security Blueprint to Small, Midsize, and Remote-User Networks http://whitepapers.comdex.com/data/detail?id=1014669157_842&type=RES&src=KA_RES

SAFE: A Security Blueprint for Enterprise Networks http://whitepapers.comdex.com/data/detail?id=1057858038_851&type=RES&src=KA_RES

A series of whitepapers covering Cisco's secure blueprint for networks both large and small (SAFE), providing best practice information on the particular subjects addressed.

Posted by jho at 09:18 PM | Comments (2)

July 17, 2003

Cisco Security Flaw

http://www.cert.org/advisories/CA-2003-15.html

A vulnerability in many Cisco routers could lead to the device requiring a reboot to clear a potential exploit. Full details at the CERT advisory referenced above.

Posted by jho at 02:23 PM | Comments (2)

June 11, 2003

CCNA Today

http://certcities.com/editorial/Tips/story.asp?EditorialsID=25

Given that Cisco requires renewal of its certifications, and given also that the CCNA exam has changed, it is good to be able to sneak up on the beast and take it unawares with a volley of weighty study tips. Which is exactly what this article offers.

Posted by jho at 07:14 PM | Comments (1)