IP Security (IPsec) is a framework of open standards developed by the Internet Engineering Task Force (IETF). IPsec provides security for transmission of sensitive information over unprotected networks such as the Internet. IPsec acts at the network layer, protecting and authenticating IP packets between participating IPsec devices also known as IPsec peers. IPsec has two […]
[Continue reading]
In my enterprise work environment, our corporate private and public network spans across many buildings and locations and uses thousands of private IP addresses (in the range specified by RFC1918) and hundreds of public IPs as well. How do we handle the management of such a huge address space? The secret is an IPAM (IP […]
[Continue reading]
A “Firewall” is one of the most popular computer and network security devices that professionals use to protect their enterprise IT assets and networks. Just like a fire-resistant door in buildings which protects rooms from a possible fire and stops the spreading of flames within the building, the security firewall has a similar function to […]
[Continue reading]
This post will deal with creating Layer 2 VLANs on Cisco switches and performing all relevant configurations. Up to 4094 VLANs can be configured on Cisco catalyst switches. By default, only VLAN 1 is configured on the switch, so if you connect hosts on an out-of-the-box switch they all belong to the same Layer 2 […]
[Continue reading]
Network systems are continually evolving – getting complex and innovative. To make students familiar with them, new educational tools and updated curriculum is emerging all the time. Today, there are many simulation tools available that can be used to learn networking, and they have made the life of both teachers and students, very easy. In […]
[Continue reading]
There are so many acronyms in the networking and security field that can drive you crazy. The terms IPS, IDS, WAF etc might be known acronyms in the field of network security but many beginner professionals sometimes have difficulty to understand the concept behind these technologies, how they compare etc. In this article I’ll do […]
[Continue reading]
A network sniffer, or packet sniffer, is a specialized software (or even a hardware device) that listens in over a network and records the IP packets of data that travel through it. Many network administrators use these tools to determine the efficiency of a network, to troubleshoot communication problems, to identify common network bottlenecks etc. […]
[Continue reading]
The Internet Crime Complaint Center (IC3) of the FBI has reported that the cost of cybercrimes doubled last year to a whopping $2.7 billion. What’s more? The IC3 reported that most of the complaints included personal data breaches, extortion, non-payment/non-delivery scams, and romance or confidence fraud. What does that mean for your business? With cybersecurity […]
[Continue reading]
The Border Gateway Protocol (BGP) is considered to be the routing protocol of the Internet because it runs between Internet Service Providers (ISPs) to interconnect all Autonomous Systems (AS) comprising the whole internet. Of course the above refers to External BGP (eBGP) which runs between different Autonomous Systems. There is also another “flavor” of BGP […]
[Continue reading]
In this blog I usually share practical configuration examples and how-to guides about Cisco networking devices and technologies (routers, switches, ASA firewalls etc). However, there are a lot of people out there interested in more generic and fundamental networking topics because they either just starting out in this field or are learning the basic concepts […]
[Continue reading]
Log management and log analysis tools play a vital role in maintaining healthy and secure systems and network infrastructure. Logs provide “visibility” into what is going on in your network and systems, both from the operational perspective but also from the security perspective as well. Comprehensive logging involves the recording of statuses and events from […]
[Continue reading]
Usually, in the world of network security, when we talk about Firewalls we mean the devices that help protect your computer systems and networks from attacks and provide a “wall” in front of servers and IT resources. The above concept of a “Firewall” refers to the classic network hardware firewall such as the Cisco ASA, […]
[Continue reading]
Although we live in an era of network virtualization and software defined networking, the traditional hardware ethernet switch is still at the backbone of most networks. Cisco switches have been among the leaders in this field. The original Catalyst series of switches (running on IOS software) are still in production and powering millions of networked […]
[Continue reading]