[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x

Network Security

Network security consists of the policies adopted to prevent and monitor authorized access, misuse, modification, or denial of a computer network and network-accessible resources. Network security involves the authorization of access to data in a network, and covers a variety of computer networks; conducting transactions and communications among businesses, government agencies and individuals. Networks can be private, such as within a company, and others which might be open to public access.

Share tech news, updates, or what's on your mind.

Sign up to Post

Scenario 10
This article is about building Dynamic Multipoint VPN tunnels in Cisco CSR1000V router with IOS XE. There are two CSR1000V hub routers configured with dual hub dual cloud Phase 3 DMVPN.
0
CompTIA Network+
LVL 12
CompTIA Network+

Prepare for the CompTIA Network+ exam by learning how to troubleshoot, configure, and manage both wired and wireless networks.

Scenario 9
This article is about building Dynamic Multipoint VPN tunnels in Cisco CSR1000V router with IOS XE. There are two CSR1000V hub routers configured with single tier Phase 3 DMVPN Cloud.
0
Scenario 8
This article is about building Dynamic Multipoint VPN tunnels in Cisco CSR1000V router with IOS XE. There are two spoke routers connected to single tier Phase 3 DMVPN Cloud hosted on CSR1000V router.
0
Scenario 7
This article is about building Dynamic Multipoint VPN tunnels in Cisco CSR1000V router with IOS XE. There are two spoke routers connected to single tier Phase 1 DMVPN Cloud hosted on CSR1000V router.
0

If you're having problems where a lot of messages that Cisco Cloud Email Security would normally filter out have been coming in, it appears to be the result of an upgrade gone wrong. In our case, it took a P1 ticket to get resolved.


We found evidence of an issue by looking at the incoming mail policies (accessible by going to Mail Polices > Incoming Mail Policies):



You will notice that the Anti-Spam, Anti-Virus, and Graymail columns are all showing "Not Available". That is because they are all disabled. These all need to be enabled to get things working normally again.


When we accessed the Cisco IronPort Anti-Spam settings, it showed that it was globally turned off. (This can be accessed by going to Security Services > IronPort Anti-Spam).



However, we were completely unable to turn anything on, regardless of access level (I'm a Cloud Administrator, but my coworker is an Administrator).


The cause of the problem: Cisco upgrading our appliance, and it turned out the feature keys somehow got blown out. In setting them back in, there is a requirement of accepting an End User License Agreement. Somewhere within this area is where Cisco failed to properly handle things.


Resolving this required creating a ticket with Cisco (initially a P3 ticket, which eventually got escalated to P1). If you're seeing yourself with this exact same issue, know you're not alone. Hopefully, Cisco fixes this for all of their CES customers in one swoop, but just watch out for this just in case. 


This problem started this past Friday morning for us but has just gotten resolved as I'm creating this post. While getting the ticket resolved, I highly recommend requesting that Cisco adds an email address from your organization to Atlas so that you're notified of when upgrades are planned to take place.

1
Coming up with a good network security checklist can be challenging. The list below was created with input from not less than a dozen technology consultants and security experts.
4
LVL 98

Author Comment

by:Lee W, MVP
Comment Utility
Not a bad point.  BUT, keep in mind the general target audience is small to midsize companies and the consultants they use.  2FA on a Windows Domain in those environments isn't commonplace (I've not heard of any really good, really SMB affordable solutions... at least none come to mind).

If you have any recommendations, please feel free to make them.
0

Expert Comment

by:kevin_lovegrove
Comment Utility
I'd personally recommend ManageEngine PMP, it does a whole lot more than 2FA and I think the prices are very reasonable considering the risks it mitigates.

https://www.manageengine.com/products/passwordmanagerpro/

It supports a number of 2FA solutions:

https://www.manageengine.com/products/passwordmanagerpro/two-factor-authentication.html
0
Scenario 5
This article is about building a Route Based site to site VPN tunnels with VRF and dynamic routing protocol (OSPF) in Cisco CSR1000V router with IOS XE. There are two Route Based IPsec VPN tunnels configured on CSR1000V router, traffic from app server is with NAT and rest is without NAT.
0
SIEM must examine concepts of normality and abnormality traffic/data flow patterns. SIEM need to constitute use of adaptive intelligence. Companies need to evaluate SIEM products based on their own objectives to determine the product that best meet their needs.
2

Expert Comment

by:Gökhan POLAT
Comment Utility
Great article 👍
0

Expert Comment

by:Ahmed Ali Khan
Comment Utility
Very detailed and insight information of SIEM solutions!
0
Scenario 4
This article is about building a Route Based site to site VPN tunnels with dynamic routing protocol (OSPF) in Cisco CSR1000V router with IOS XE. There are two Route Based IPsec VPN tunnels configured on CSR1000V router, traffic from app server is with NAT and rest is without NAT.
0
When you have a Wi-Fi, you might want to isolate the untrusted network from your network, since Wi-Fi is more vulnerable to attacks, as is a guest network. You will still be able to manage guest/Wi-Fi from your network. This is possible to do with an Edge router
0
IT Degree with Certifications Included
IT Degree with Certifications Included

Aspire to become a network administrator, network security analyst, or computer and information systems manager? Make the most of your experience as an IT professional by earning your B.S. in Network Operations and Security.

In computing, Vulnerability assessment and penetration testing are used to assess systems in light of the organization's security posture, but they have different purposes.
3
A discussion about Penetration Testing and the Tools used to help achieve this important task.
0
Password-Managers
Each password manager has its own problems in dealing with certain websites and their login methods. In Part 1, I review the Top 5 Password Managers that I've found to be the best. In Part 2 we'll look at which ones co-exist together and why it's often useful to use more than one.
11

Expert Comment

by:Jorge Carretero
Comment Utility
Great Article !!!!

But when it comes to Security i think Linux is the king, so i recommend this solutions.-
https://www.lastpass.com/es
LastPass supports also Linux and has better security, if you are too paranoic the second option.-
https://keepass.info/
May be your solution, but its harder to configure and maintain, in the past i only used Firefox master password, so maybe my advice is not so good.
Good Luck.
0
LVL 23

Author Comment

by:Andrew Leniart
Comment Utility
Hi Jorge and thank you for your comments about my article.

The problem with your recommendation about lastpass is that it's owned by LogMeIn - a company I will now be avoiding like the plague because of the way they treated both their paying and nonpaying customers recently in just dropping the Xmarks bookmarks manager like a hot potato.

To see what I'm talking about, see the thread still getting comments here:

https://www.experts-exchange.com/questions/29092048/Alternatives-to-the-Xmarks-com-Bookmarks-Synchronization-Service.html

You're welcome (in fact encouraged) to contribute your thoughts to the above thread.

I didn't much like Lastpass as a solution before, but after what LogMeIn recently did after taking over Xmarks, I would no longer consider any solution that they have any control over -  and that's coming from someone who used their LogMeIn Rescue product at a cost of about $1,000 a year for nearly 10 years.

Their killing of a solution that so many were enjoying (and subscribing to use Pro features for) without any decent explanation is bound to hurt them in the long run imo and I'll discourage anyone who asks about any LogMeIn solution in the future for that reason.

Avoid using LastPass - who know's when it will just disappear, just like Xmarks did, when logmein decides they don't want to play anymore?!

Cheers...

Andrew
0
2017 was a scary year for cyber security. Hear what our security experts say that hackers have in store for us in 2018.
0
Last month Marc Laliberte, WatchGuard’s Senior Threat Analyst, contributed reviewed the three major email authentication anti-phishing technology standards: SPF, DKIM, and DMARC. Learn more in part 2 of the series originally posted in Cyber Defense Magazine.
1
How to fix a SonicWall Gateway Anti-Virus firewall blocking automatic updates to apps like Windows, Adobe, Symantec, etc.
0
Phishing emails are a popular malware delivery vehicle for attack. While there are many ways for an attacker to increase the chances of success for their phishing emails, one of the most effective methods involves spoofing the message to appear to come from a trusted source. Ready to learn more?
1
What monsters are hiding in your child's room? In this article I will share with you a tech horror story that could happen to anyone, along with some tips on how you can prevent it from happening to you.
4
A new hacking trick has emerged leveraging your own helpdesk or support ticketing tools as an easy way to distribute malware.
1
HTML5 and CSS3 Fundamentals
LVL 12
HTML5 and CSS3 Fundamentals

Build a website from the ground up by first learning the fundamentals of HTML5 and CSS3, the two popular programming languages used to present content online. HTML deals with fonts, colors, graphics, and hyperlinks, while CSS describes how HTML elements are to be displayed.

In this article, WatchGuard's Director of Security Strategy and Research Teri Radichel, takes a look at insider threats, the risk they can pose to your organization, and the best ways to defend against them.
0
Will you be ready when the clock on GDPR compliance runs out? Is GDPR even something you need to worry about? Find out more about the upcoming regulation changes and download our comprehensive GDPR checklist today !
0
How does someone stay on the right and legal side of the hacking world?
10
In this article, we’ll look at how to deploy ProxySQL.
0
Compliance and data security require steps be taken to prevent unauthorized users from copying data. Here's one method to prevent data theft via USB drives (and writable optical media).
3
LVL 98

Author Comment

by:Lee W, MVP
Comment Utility
Ok, thanks!
0
LVL 10

Expert Comment

by:Senior IT System Engineer
Comment Utility
Thanks for sharing the great article.
0
In this blog we highlight approaches to managed security as a service. We also look into ConnectWise’s value in aiding MSPs’ security management and indicate why critical alerting is a necessary integration.
0

Network Security

Network security consists of the policies adopted to prevent and monitor authorized access, misuse, modification, or denial of a computer network and network-accessible resources. Network security involves the authorization of access to data in a network, and covers a variety of computer networks; conducting transactions and communications among businesses, government agencies and individuals. Networks can be private, such as within a company, and others which might be open to public access.