Friday, November 16, 2007

LAN switch security: Your deepest fears answered

Network World

Cisco News Alert




Network World's Cisco News Alert, 11/16/07

Welcome to the Friday edition of Network World's Cisco News Alert in which we focus on the top items from Cisco Subnet, your gateway to Cisco news, blogs, discussion forums, security alerts, giveaways and more. Enjoy!

* TOP PICKS:
LAN switch security: Your deepest fears answered
ARP poisoning by a hacker is probably the worst attack your LAN could suffer because it's extremely sneaky, very efficient and all too easy to perform. But there are two ways to protect yourself from an ARP spoofing/posioning attack, according to Christoper Paggen, author of LAN Switch Security: What Hackers Know About Your Switches, published by Cisco Press. The options for your defense are to either monitor suspicious ARP traffic on a machine connected to the LAN (using ARPWatch for instance, a free Linux utility) or rely on the switch's built-in security mechanism, Paggen told attendees to Network World's recent live online text chat. Read the entire transcript of the chat here.

ALSO:

NAC: A to Z

From buying tips to peer discussions. From case studies to market trends. Network Worlds newly enhanced Network Access Control Buyers Guide has everything you need to stay current, research technology, compare products and implement solutions - all in one convenient location.

Click here to go to the Buyers Guide now.

Cisco's latest NAC service lets end users set up guest access to the corporate network 

Cisco Europe safe from softening sales (for now) 

Forbes mag article likes ShoreTel VoIP over Cisco

Cisco working on open source database connectivity protocol

* FROM OUR BLOGGERS:

Brad Reese on Cisco: What is SMARTnet, how does it work and how much does it cost?
SMARTnet is a Maintenance Contract for a specific piece of Cisco equipment. Price of the contract depends on the piece of equipment and the level of service. Basically you receive on-line or over the phone technical support, or on site support if you buy that level of service and the ability to download any software updates (revisions) for your piece of equipment. Lastly, if there is a problem with the equipment, Cisco will replace part or all of the unit, either next day or up to 4 hours, depending on your level of service contract.

Joe Panettieri's Eye on Cisco: Cisco, Oracle: Get ready for an encore
Cisco and Oracle. The two companies grew up in different markets. But they've got far more in common than you think. As Cisco pushes forward with its Web 2.0 and Unified Communications initiatives, John Chambers will need Larry Ellison in his corner.

Jeff Doyle on IP Routing: Designing your network in the 21st century
You need to make a business trip from San Francisco to Singapore. At the airport, you find out that you are going to be traveling on the inaugural flight of the brand new BoBus A888. “Cool,” you think as you board the latest in aviation technology. You gaze in admiration at the gleaming exterior and spotless interior. Settling into your seat, you strike up a conversation with the guy next to you; sticking to standard business traveler chitchat, you ask what he does for a living. “Why, I’m a principal architect for BoBus. In fact I led the team that designed this very aircraft,” he tells you.

Wendell Odom's Cisco Cert Zone: Which number goes where?
I'm going to turn our attention to a popular and sometimes confusing exam topic, and let Tuesday's discussion and polls regarding one possible value of certifications for Cisco customers percolate for a few more days. Specifically, we'll spend a few posts (at least) considering the issues related to what numbers sit inside the frames/packets/segments that flow in a network, specifically data link addresses, IP addreses, and TCP/UDP port numbers. This topic was one of the most requested from a survey a few weeks back, where I asked where you wanted to go with the technical topics in this blog.

Dheeraj Tolani's Cisco Routing & Switching Essentials: Cisco discovery protocol
Security is an interesting thing. Whether you are working on a router or a switch, there are certain essentials to consider. It’s also important to realize that there may be trade-offs, since you sometimes lose features while securing your network.

Michael Morris' Notes from the Field: More thoughts on network engineers and the CCDE
Network Engineers are a unique group of people. Network engineers are definitely different from Server Admins. How often have you noticed the difference between a server guy and a network guy? Most people, including myself, could not switch between the two jobs. Servers are cool, but not as much as the network. I think a lot of network engineers feel this way; we like networking. And it's another reason why most network engineers are drawn to telephony. It's a form of networking.

ChannelSurfing with Ken Presti: UC battle brewing: Cisco vs. Avaya
We’re getting used to thinking about unified communications as a battle primarily between Cisco and Microsoft. Not if Avaya has anything to say about it! Oh sure. Both Cisco and Avaya are well-known to be competitors in the unified communications space, but the message from Avaya’s 2007 analyst conference in Boston suggests the battle may be heating up.

Jamey Heary: Cisco Security Expert: My security Christmas list
Christmas ’07 is fast approaching and my kids already have their Christmas lists done. So, I thought I’d do a Christmas list of my own, with a twist. If I could get Santa’s elves to build me a shiny new piece of network security hardware what would I want? We’ll I’d ask for a reputation based firewall that’s what!

NEW: Author Expert: Michael Behringer: PE routers on customer premises? What about password recovery?
Some VPN users ask to have a service provider PE (provider edge) router on their premises. The motivation normally is to serve several VPNs locally to the site, but to only have a single uplink to the provider. A clueful provider will decline such a request. For security reasons. (Yes, this argument is used a bit too frequently these days, but here it is applicable.) The reason is that any router on customer premises cannot be fully trusted.

NEW: Joe Chapman's Network Training Edge: Service transparency
Services as far as the eye can see... If you were to look at all the potential options that could be conceiveably be supported within the world that is Metro Ethernet, it would make your head swim. Last blog entry I mentioned that there are roughly two categories for ME services; point-to-point and multipoint. I also wrote that point-to-point Ethernet Virtual Connections (EVCs) can be used to provide a replacement for Frame Relay service. And most WAN connections are typically terminated with some type of routed interface.

HOT DISCUSSIONS AMONG CISCO SUBNET READERS:

Cisconet: Where is David to Cisco's Goliath? 

Reese: Cisco customers kept in the dark about NetFlow-NBAR combo 

Odom: Cisco certs are dead 

Morris: Separating network design and the CCIE 

FREEBIES, GIVEAWAYS AND OTHER NOTABLES:

* Enter to win a Skyline-ATS training course of your choice worth up to $3,495. Details here. FINAL FEW DAYS TO ENTER!

*Enter to Win a Cisco Press Book: Up for grabs are 15 copies of "MPLS VPN Security" by Michael H. Behringer and Monique J. Morrow, is the first book to address the security features of MPLS VPN networks and to show you how to harden and securely operate an MPLS network. Details here. Get a sneak peek of a chapter from one of the books here. Read Michael Behringer's blog for Cisco Subnet here.

* Read a free chapter from "IPsec Virtual Private Network Fundamentals" by James Henry Carmouche. Free excerpt here

* Check out Cisco Subnet's library for more free chapters from Cisco Press books.

* Browse through Network World's IT Buyer's Guide: Cisco products

MOST-READ STORIES:
1. Testing all-in-one firewalls
2. Latest e-mail scam targets executives
3. SysAdmin of the Year winner
4. NAC's dirty little secrets revealed
5. 10 career killers to avoid
6. Microsoft releases Vista SP1 RC Preview
7. Networking's 50 greatest arguments
8. Top 5 security-menace predictions for 2008
9. Boeing completes prototype heat shield
10. Cisco boosts server-to-storage computing

MOST-DOWNLOADED PODCAST:
5 Myths about 802.11n wireless


Contact the author:

Managing Editor Jim Duffy covers Cisco for Network World.

Assistant Site Editor Linda Leung edits Cisco Subnet.

Cisco Subnet: The independent voice of Cisco customers

 



BONUS FEATURE

90% of IT Managers are leaving their company at risk for a DNS ATTACK. Get the tools and resources you need to keep your DNS healthy and secure. Run a DNSreport on your domain today - 56 critical tests run in 8 seconds.

Visit www.dnsreport.com to learn more. (apply coupon NWW2007NLA for a 25% membership discount)


PRINT SUBSCRIPTIONS AVAILABLE
You've got the technology snapshot of your choice delivered to your inbox each day. Extend your knowledge with a print subscription to the Network World newsweekly, Apply here today.

International subscribers, click here.


SUBSCRIPTION SERVICES

To subscribe or unsubscribe to any Network World newsletter, change your e-mail address or contact us, click here.

This message was sent to: networking.world@gmail.com. Please use this address when modifying your subscription.


Advertising information: Write to Associate Publisher Online Susan Cardoza

Network World, Inc., 118 Turnpike Road, Southborough, MA 01772

Copyright Network World, Inc., 2007

No comments: