Learn about longtime user Rowby Goren and his great contributions to the site. We explore his method for posing questions that are likely to yield a solution, and take a look at how his career transformed from a Hollywood writer to a website entrepreneur.
Network Security
6K
Solutions
8K
Contributors
Network security consists of the policies adopted to prevent and monitor authorized access, misuse, modification, or denial of a computer network and network-accessible resources. Network security involves the authorization of access to data in a network, and covers a variety of computer networks; conducting transactions and communications among businesses, government agencies and individuals. Networks can be private, such as within a company, and others which might be open to public access.
Share tech news, updates, or what's on your mind.
Cyber security certifications or degree?
Cyber security is in demand—big-time. So what do you need to build a career in this lucrative field? Is a degree a must-have, or are industry-leading certifications more sought-after? Is it possible to break into cybersecurity without a bachelor’s or master’s degree in the field?
Active Protection takes the fight to cryptojacking
While there were several headline-grabbing ransomware attacks during in 2017, another big threat started appearing at the same time that didn’t get the same coverage – illicit cryptomining.
I'd like some design input regarding how best to peel off (and secure) traffic from a carrier network interface device (NID) providing both Internet and MPLS connectivity over a single pipe.
The carrier is providing a single circuit carrying both Internet and private data (MPLS backend) via different VLAN tags (let's say Internet=X, MPLS=Y) to a carrier-managed NID. There will be a pair of firewalls to handle the Internet traffic, so a pair of switches will be in front of them. Here's an overall simplified version of the scenario:
We’ll obviously extend the VLAN X from the switches to the firewalls, but I’m trying to determine the best way to handle the VLAN Y private traffic. I’ve recently seen a design where the customer had this external switch with a separate couple connections for the private VLAN directly to the core environment (so, bypassing the firewalls). Obviously, this is not wise, as these switches have a public IP, and compromise for them would provide access to the core directly.
So, the two options would seem to be 1) also trunk data VLAN (Y) over the same connection to the firewall, and then use them somehow to provide a layer of security/abstraction from the outside world, or 2) implement another layer of something off of these switches to do the same.
How are others handling enterprise Internet/WAN when these services are delivered over a single circuit?
I’m not afraid of reading, so reference links/resources would …
The carrier is providing a single circuit carrying both Internet and private data (MPLS backend) via different VLAN tags (let's say Internet=X, MPLS=Y) to a carrier-managed NID. There will be a pair of firewalls to handle the Internet traffic, so a pair of switches will be in front of them. Here's an overall simplified version of the scenario:
We’ll obviously extend the VLAN X from the switches to the firewalls, but I’m trying to determine the best way to handle the VLAN Y private traffic. I’ve recently seen a design where the customer had this external switch with a separate couple connections for the private VLAN directly to the core environment (so, bypassing the firewalls). Obviously, this is not wise, as these switches have a public IP, and compromise for them would provide access to the core directly.
So, the two options would seem to be 1) also trunk data VLAN (Y) over the same connection to the firewall, and then use them somehow to provide a layer of security/abstraction from the outside world, or 2) implement another layer of something off of these switches to do the same.
How are others handling enterprise Internet/WAN when these services are delivered over a single circuit?
I’m not afraid of reading, so reference links/resources would …
Network Security
6K
Solutions
8K
Contributors
Network security consists of the policies adopted to prevent and monitor authorized access, misuse, modification, or denial of a computer network and network-accessible resources. Network security involves the authorization of access to data in a network, and covers a variety of computer networks; conducting transactions and communications among businesses, government agencies and individuals. Networks can be private, such as within a company, and others which might be open to public access.
Top Experts In
Network Security
-
1
btan11,337 points -
2
David Favor5,400 points -
3
Pete Long5,000 points -
4
Jakob Digranes4,750 points -
5
madunix4,204 points -
6
Shaun Vermaak4,200 points -
7
McKnife3,550 points -
8
noci3,550 points -
9
atlas_shuddered3,550 points -
10
John3,150 points -
11
Qlemo2,650 points -
12
Jose Gabriel Ortega Castro2,600 points -
13
Rafael2,550 points -
14
Davy Paridaens2,550 points -
15
Kimputer2,050 points -
16
Michael B. Smith1,150 points -
17
yo_bee1,000 points -
18
Mahesh500 points -
19
nickg5300 points -
20
☠ MASQ ☠300 points -
21
Andrew Leniart238 points -
22
Lee W, MVP220 points -
23
Santosh Salunke147 points -
24
Alex Wilson102 points -
25
John Gowing75 points