Network Advisor

Aruba Networks and Force 10 Networks Offers Reliable Real Time High Speed WLAN for Campus

2010-11-22T19:25:00.001-08:00

Seamless Converged Mobility Solution

Force10 Networks® and Aruba Networks® have partnered to deliver an interoperable solution for seamless converged mobility with unmatched security services by combining best-of-breed switching and routing with WLAN infrastructure.

The inherent reliability of the Force10 C300 resilient switch guarantees predictable and constant access for all users, wired and wireless. Aruba’s customer focused approach to secure mobility extends network connectivity and enterprise security anywhere as a user roams, allowing the largest networks to be centrally managed.

Together, this innovative solution allows customers to provide a high performance wireless and wired network in education, healthcare, finance and enterprises large and small. By building a unified network fabric that extends pervasive reliability, network control and scalability, enterprises are ensured a network that is a strategic asset.

Polycom, Aruba now lead the Cloud Video Conferencing technology

2010-11-05T19:02:00.000-07:00

Aruba Networks and Polycom announced on August 26, 2010 that they are teaming up to deliver video features to users via cloud computing. Aruba will provide its Virtual Branch Networking (VBN) solution to its users -- typically through its cloud-based offerings -- who can then utilize Polycom's telepresence, videoconferencing and voice communications solutions.

Aruba said the joint solution will reduce the time, cost and network engineering needed to deliver the unified communications products to remote users working at home, in branch offices or on the road. Aruba said the cost involved in joint Aruba-Polycom remote access points can be as low as USD 99 per site. Aruba noted that its Virtual Intranet Client can deliver remote access points for virtually no cost to PC users while delivering security service economically to branches.

Aruba Networks offers the best solution for Video over WLAN

2010-10-24T18:49:00.000-07:00

Last week I got a chance to test and review the implementation of Video over WLAN. The test gear is Aruba AP 125, medium range of Aruba Controller and Axis Web Cam. The main medium is over wireless LAN. The overall test is enhanced with Azalea Video Technology (AVT). The result is really superb ! The video run smoothly.

How Oracle, Cisco to Challenge IBM, HP in Enterprise Data Centers ?

2009-11-23T21:40:00.000-08:00

Oracle, Cisco on Path to Challenge IBM, HP in Enterprise Data Centers

News Analysis: Oracle and Cisco Systems are working on entirely separate, but similar tracks in long-term efforts to become full-service systems providers on par with IBM and Hewlett-Packard. Oracle, a 32-year-old vendor of database and enterprise application software, will get a lot closer to that goal if it gets final regulatory clearance to close its $7.4 billion acquisition of server and storage manufacturer Sun Microsystems. Meanwhile, networking equipment vendor Cisco Systems, at 25, is focusing on its Unified Computing System initiative to expand its presence and influence in corporate data centers.

Oracle and Cisco Systems are rolling hard and fast on separate but parallel tracks to become full-service systems providers that want to enjoy the international business reputations and prestige of IBM and Hewlett-Packard.

As "full-service system providers," Oracle and Cisco would have to demonstrate the ability to deliver and assemble all the hardware, software and services needed to build an enterprise IT system or a new data center.

Oracle, due largely to its planned $7.4 billion acquisition of Sun Microsystems, is a 32-year-old database and middleware software company aiming to become a new-generation systems vendor.

Resource Library:

ITG Executive Summary: Business Case for IBM System x, BladeCenter, and System Storage
IBM BladeCenter S vs. HP BladeSystem c3000
How to Reduce CRM Infrastructure Sprawl: A Technical Guide to Consolidating Orac
Dollars from Data: How to turn Enterprise Information into Business Innovation

Cisco Systems, at 25 years of age, is primarily a networking hardware company that, behind its new Unified Computing System initiative, is evolving into its own network-centric systems company.

Both corporations are acquisition-oriented, each having added a number of companies in the last few years to build out their product lines. Both have charismatic chief executive officers [Oracle's Larry Ellison, Cisco's John Chambers]. Both are No. 1 in their specific market sectors; both are headquartered at IT's Ground Zero in Silicon Valley.

Each has played a major role in the growth and maturity of enterprise IT. Oracle rules supreme in the enterprise parallel database and middleware businesses; Cisco invented and has produced much of the networking equipment that serves as the framework for business on the Internet.

That's not all. Both have outgrown their primary market segments and must add incremental markets to their mix. They're like sharks that can't stop moving, needing more and more water through their gills and food in their stomachs to grow.

So, here's the theorem: Oracle, in Redwood City, Calif., and Cisco, about 15 miles south in San Jose, may have started under completely different circumstances at different times, but they are clearly aiming at the same target: The top couple of steps on the IT systems ladder.

True or false?

"Yes, I agree wholeheartedly with your assertion," David Hill, principal analyst with The Mesabi Group, told eWEEK. "Not all high-technology companies feel the compulsion to grow, but high-profile companies, such as Oracle and Cisco, want to grow -- because their executives want to reap the rewards of growth, but also because financial analysts, in particular, and the investment community, in particular, expect it of them."

As a "big fish in a size-limited pond, each has to grow outside its current market pond," Hill said.

"Moreover, the decision in enterprise IT infrastructure purchases is often about what bundle of products and services that they need (say for the new generation of data center) and individual products may be left out (even if they are the better products)," Hill said.

Oracle: An Old-Line Growth Strategy?

Charles King, principal analyst with Pund-IT, told eWEEK he agrees in general, but with a couple of caveats.

"To my mind, Oracle's efforts reflect old line thinking of a sort -- with the company owning or having its fingers on every piece of the business datacenter infrastructure and services chain, including hardware, software, middleware and services," King said. "In a sense, what Ellison is envisioning hasn't been previously accomplished; virtually every major IT vendor partners with someone.

"In LarryWorld, partners are relegated to developers who build on Oracle's platform. Cisco is approaching the future in a much more collaborative way, working closely with partners including EMC, VMware, NetApp and others. In fact, the company's Unified Computing concept is broad enough that most any vendor of storage x86 servers (though Cisco is, of course, planning their own offerings) could play a part."

Dave Vellante, an analyst with Wikibon, told eWEEK that he agrees that Oracle and Cisco are on similar tracks -- not parallel, but very similar.

"Here's the biggest similarity in my view: The IT business is becoming an oligopoly [a market form in which a market or industry is dominated by a small number of sellers] where IBM, HP, Cisco, Oracle and Microsoft really rule," Vellante said. "Any move that any one of these vendors makes will have ripple effects throughout the industry.

"You can make a case that Dell and EMC/VMware are on that list, but these five are the big dogs with $100 billion revenues and/or market valuations. The data center stacks are integrating, and big companies are aggressively acquiring to integrate stacks because they can't innovate (in house) fast enough."

Cisco has quite an appetite for acquisitions, and clearly that's always been part of its growth strategy, Vellante said. "Cisco also wants/needs to diversify; Oracle, on the other hand, sort of fell into this position which in my view occurred as a defensive play," Vellante said.

"Specifically, there was no way Oracle was going to let Java get into the hands of IBM or any other competitor, because Oracle software is developed in Java," Vellante said. "Ellison has always seen the value of integrated hardware and software (e.g. Apple), and I think saw this as an opportunity to continue to play with the big guns in the industry."

Is this potential IT oligopoly good or bad for business overall?

"In some respects, it marks the beginning of a long, slow consolidation period," Vellante said. "I think it can be bad for innovation, but good for stability. Customers like stability, so that's good, but growth requires innovation."

Room at the Top for a Big Four?

Hill said he believes there's room for more large, full-service systems vendors at the top.

"Even though the IT infrastructure pool as a whole is much larger than the database management systems and networking pools, it is still quite large," Hill said. "The resulting even fiercer competition that would result would be good for customers, from both a cost perspective and the chance to benefit from the innovation that the companies would have to accelerate."

However, customers would have to face a much more complex decision-making process and the vendor that can hold a conversation at the highest executive levels and effectively communicate its value proposition is likely to be the winner, Hill said.

"It is too early to handicap the winners and losers right now. Moreover, even though it is not a 'systems' vendor EMC has a broad reach in information infrastructure and has to be considered a player in the horse race," Hill said.

Would having four IT systems behemoths be a boost to the IT industry, or would four companies the scale and scope of HP and IBM be too many -- such that somebody is doomed to fail?

"I've always thought that healthy competition has been at the heart if the IT industry's historic vibrancy," King of Pund-IT said. "The industry has matured rapidly, resulting in a certain stodginess among some (though not all) of the traditional larger players. Overall, I believe the additional competition should help keep everyone honest. If the future really is in cloud and 'smarter planet' computing, the market should be big enough for everyone."

As far as failure goes, both Oracle and Cisco are playing out of their traditional comfort zones, King said.

"However, I'd say that Oracle has had more trouble that Cisco in managing its myriad acquisitions. The company's bitten off a big piece with Sun Microsystems. Whether they digest it successfully or choke in the process in still playing out."

Mark Peters of Enterprise Strategy Group said he isn't particularly worried that having a large portion of the IT vendoring in the world done by a handful of companies is necessarily a bad thing.

"Let's say we do end up with four behemoths? That could be good for the industry (and innovation and consumers) even if one is doomed to fail!" Peters said. "Plus, they each do things differently: There's the acquire route, the R&D route, the partner route, et cetera, so smaller organizations are not necessarily ruled out.

"By the way, don't forget Dell in your market equation, and even the possibilities from smaller organizations such as EMC with its VMware, that aspires to be 'IT central' and can be a force. Interestingly companies like Microsoft often get mentions for strategic importance and could easily partake in an infrastructure play.

"And there's always the surprises, too (such as Google)."

Source : eweek.com

Botnets: who's behind them and why?

2009-11-23T21:33:00.000-08:00

By posing as a rogue programmer, Cisco researchers gained a unique insight into the world of botnets and their owners

Poor education, a criminal record and a dislike of authority can all turn programmers bad. That's the finding of Cisco researchers who posed as botmasters to enter the world of online crime.

"I wanna do what I wanna do, whenever I want," one botmaster told the researchers. By posing online as a rogue programmer, the researchers got him to reveal how he spams thousands of instant messenger users with enticements to install infected utilities.

For every 10,000 messages sent, "at least one per cent" will respond and become part of his botnet. The team, from Cisco's Security Intelligence Operations unit, found that for botmasters, criminality is just a by-product of running a small business.

The botmaster said he sold a 10,000-machine botnet for $800, but also claimed that selling off infected machines is relatively rare. He said that a friend made between $5,000 and $10,000 per week solely through renting out his botnet to phishing gangs.

Dumbing down

Today, those without the necessary computer skills can easily gain access to advanced tools for creating profitable, robust and secure botnets.

Over the course of their online conversations, Cisco's researchers learned of online marketplaces where the budding cybercriminal can buy everything he needs to set up a botnet.

"The bot software is advertised much like any other software," claims Cisco. "Anyone with basic computer experience is able to run one. It's not necessary to understand the code, nor is there a need to understand networking."

Following the money

Alex Constantinides is a director of UK-based online security consultancy MetaSec. "It just goes to show how these things have evolved," he told us. "Originally, simply knocking servers off the net was the thing – for fun. Then botnets became a blackmailing tool. Now they're predominantly used for financial gain."

Janet Williams is a Deputy Assistant Commissioner with the Metropolitan Police Service, and she heads up the Police Central e-crime Unit (PCeU). Williams has just launched the ACPO e-crime Strategy, designed to help police forces pool their resources in response to e-crime.

"This strategy is designed to assist law enforcement in building a response to this challenge," says Williams. "We trust that by doing so we'll enhance both industry and public confidence."

Potential botmasters tend to fit a profile, so identifying them shouldn't be difficult, as F-Secure's Mikko Hypponen points out:

"It's often the people with the skills but without the opportunities," he says. "Many of these online criminals are coming from developing countries. If you know how to code and are living in London – great! You'll get a job easy," says Hypponen. "If you know how to code and are living in Siberia – not so great."

"The only real way to find the perpetrators, like traditional bank robberies, is to follow the money," Roger Thompson, Chief Research Officer at AVG Technologies, told us. "However, even this becomes difficult as it involves multiple countries and there are many different layers and players."

The strongest psychological factor for many botmasters may simply be the excitement of breaking the law, as Hypponen concludes: "Some people would have the opportunities but still choose the dark side…" he says.

How to Configure NetFlow on Cisco Routers

2009-02-01T17:22:00.001-08:00

After researching the issue I found out the Cisco NetFlow protocol allows you to analyze the traffic that pass the router, however In order to get this done we need to
Configure our routers to do a few things:

1. Install Software that analyze NetFlow
2. Enable NetFlow on the router
3. Configure the router to send the logs to a netflow analyzer server (needs to be configure before)

Once you got the server or PC up and running with a netflow software (there are a lot of free application, I used Manage Engine NetFlow Analyzer 6 which allows you to monitor 2 router for free) , We need to tell the router to send the NetFlow logs to the server, To do that here is the commands we need to type:

Router(config)# ip flow-export destination {hostname|ip_address} 9996
Router(config)# ip flow-export source {interface} {interface_number}
Router(config)#ip flow-export version 5
Router(config)# ip flow-export version 5
Router(config)# ip flow-cache timeout inactive 15
Router(config)# snmp-server ifindex persist

To monitor and Check that we configured the Router to send the logs type:

Router# show ip flow export
Router# show ip cache flow
Router# show ip cache verbose flow

Configuration Sample:

router#configure terminal
router(config)#interface FastEthernet 0/1
router(config-if)#ip route-cache flow
router(config-if)#exit
router(config)#ip flow-export destination 10.60.1.254 9996
router(config)#ip flow-export source FastEthernet 0/1
router(config)#ip flow-export version 5
router(config)#ip flow-cache timeout active 1
router(config)#ip flow-cache timeout inactive 15
router(config)#snmp-server ifindex persist
router(config)#^Z

router# copy run start
router#show ip flow export
router#show ip cache flow

Cisco configuration of DHCP service on a Router or L3 Switch

2008-10-16T18:46:00.000-07:00

How to Configure Windows 2008 DHCP Server to Perform Dynamic DNS Updates

2008-10-16T18:29:00.000-07:00

By default, a Windows Server 2008 DHCP server automatically updates A and PTR records for DHCP clients that request a dynamic DNS update.

To Configure Your DHCP Server to Perform Dynamic DNS Updates

1. In Server Manager, expand Roles, and then expand DHCP Server.

2. Expand the server name, right-click IPv4, and then click Properties.

3. Click the DNS tab. Select Enable DNS Dynamic Updates According To The Settings Below.

4. To allow the DHCP server to remove resource records after a DHCP lease expires, select the Discard A And PTR Records When A Lease Is Deleted check box.

5. To perform dynamic DNS updates for client computers that are not capable of performing their own updates, select the Dynamically Update DNS A And PTR Records For DHCP Clients That Do Not Request Updates check box. Windows 2000 and all later versions of Windows can perform their own dynamic DNS updates. Click OK.

Cisco, Juniper face-off on software

2008-04-09T07:55:00.000-07:00

By Jim Duffy
Network World, 06/12/00

SANTA CLARA - Speeds and feeds are not all that matters when building reliable routers for the Internet core.

Indeed, the software component of these high-speed devices may play an even larger role in ensuring that packets and sessions are not dropped. That's why Cisco is building more resiliency and redundancy into its next generation IOS software. That's also why Juniper Networks plays up the reliability of its Junos operating system.

And perhaps that's why these two rivals try to point out the deficiencies of each others' software offerings. Although Cisco has been around a lot longer than Juniper, both companies are courting the same customers in the service provider market, where Cisco is a relative newcomer.

"Juniper continues to eat away at Cisco's leading market share - which is still in the 70% range - and this trend should continue," market researcher Current Analysis stated in a recent report.

"Our broader strength is our six major releases in 18 months," says Scott Kriens, Juniper CEO, commenting on Junos. "We can deliver innovation faster than anyone else. It's that accumulated breadth that is our competitive advantage."

Eighteen months pales in comparison to 15 years, which is how long Cisco has been developing and selling IOS.

"We are the market share leader from a control plane perspective," says Martin McNealis, marketing manager in Cisco's IOS Technologies division, referring to the Multi-protocol Label Switching, VPN, voice and multicast features of the Cisco software. "We're not hearing service providers hammer the table saying we need to have [certain features] because [Juniper] has it."

It's neither Juniper nor Junos that's prompting Cisco to build more resiliency, availability and redundancy into the next major release of IOS. IOS will feature "more intelligent" handling of outages and service upgrades, McNealis says.

"We're now looking to deliver a bulletproof architecture," McNealis says. "Now that we're a systems company, we have to accept that there will be hardware and software failures."

Cisco is building stateful redundancy into IOS whereby information on the state of routes, sessions or packets can be replicated within a router chassis. Currently, Cisco offers redundancy between two distinct routers via the Hot Standby Routing Protocol in IOS.

Juniper refers to this version of IOS as IOS NG, with NG standing for "Next Generation." IOS NG is Cisco's attempt to be more competitive with Junos by having a more modular architecture and being tailored specifically for service providers, Kriens says.

Juniper's definition of modular means separate processes - such as routing protocols, management and security - each run in protected memory. Currently, IOS is "monolithic," Kriens says, meaning all processes run together and are interdependent.

"It's kind of comparing Windows with DOS," Kriens says, noting the modular nature of Windows vs. the monolithic nature of DOS.

Perhaps it's best to compare an operating system that was built from the ground up to perform routing vs. one that has its roots in a general purpose operating system such as Berkeley Sockets - the precursor to Unix - but has been modified to do routing, says Cisco's McNealis. IOS is the former while Junos is the latter.

"IOS was always tailored for infrastructure," McNealis says. "It's very network-centric. It's control plane and data plane optimization vs. a general-purpose operating system. You do make some compromises when it has to be that portable."

Juniper selected Berkeley Sockets as the source code for Junos because it was readily available in the public domain, Kriens says. But JUNOS represents 4 years and 300 to 400 man years of development on top of that Berkeley Sockets source code, he says.

"Any resemblance [to Berkeley Sockets] would be so remote as to be irrelevant," Kriens says.

Cisco Nexus 7000 Series Switches

2008-02-17T23:26:00.000-08:00

A More Scalable and Flexible Data Center

Build a flexible, scalable framework for your new data center network with Cisco Nexus Switches.

The Cisco Nexus 7000 Series is a modular data center-class switching system designed for 10 Gigabit Ethernet networks. The Cisco Nexus architecture scales beyond 15 terabits per second, with future availability of 40Gb and 100 Gb Ethernet and unified fabric I/O modules. This new platform is designed for exceptional scalability, continuous systems operation, and transport flexibility.

The Cisco Nexus 7000 Platform is powered by Cisco NX-OS, a state-of-the-art operating system. The Cisco Nexus 7000 Series is purpose-built for the data center and has many unique features and capabilities designed specifically for the most mission-critical place in the network, the data center.

Virtualisation gets a leg up

2008-02-17T21:57:00.000-08:00

OPEN-SOURCE solutions provider Red Hat recently announced its Integrated Virtualisation Inside campaign that aims to encourage the use of virtualisation technology among open-source software users.

The company said virtualisation will become more mainstream as enterprises look for ways to boost productivity and performance of its IT infrastructures.

“The problem with most applications is that they run on specific operating systems and are hardcoded into the hardware making it difficult to deploy,” said Red Hat Asia Pacific Pte Ltd general manager for Asean, Teong Eng Guan.

“Virtualisation will allow enterprises to run their applications on multiple operating systems while enabling them to run on virtual servers.

“So instead of running one application per server, enterprises can save on electricity and real estate by running them on one server,” he said.

Red Hat’s virtualisation capability is integrated into its Red Hat Enterprise Linux 5 operating system.

Red Hat virtualisation will run on most desktop and server platforms including Intel Xeon and Itanium, AMD Opteron and IBM Power systems, Teong said

Source: The Star (Malaysia)

Malaysian Government should support an open source solution for future implementation.

Juniper offers new switches

2008-02-17T21:55:00.000-08:00

NETWORKING equipment vendor Juniper Networks Malaysia has unveiled its EX series of enterprise-class Ethernet switches – the EX 3200, 4200 and 8200.

Juniper believes the new series will allow it to compete more effectively in the crowded enterprise networking segment of the market.

“Enterprises are demanding more than what has been offered by traditional switching vendors,” said Juniper Networks Malaysia country manager Wan Ahmad Kamal. “They want performance, reliability and simplicity in a switching solution.”

He said the problem in a typical networking environment is that it is highly complex, thanks to different versions of software running on various brands of equipment.

This, he said, makes it difficult to manage and upgrade networks.

Juniper’s solution to the problem is its Junos software, which is included in the EX series. It is a single-source network operating system that simplifies operations and integrates business applications across the network, the company said.

“Aside from wanting simplicity in a network, enterprises are getting increasingly concerned about system security,” Wan Ahmad added. “The new switches will fully integrate with Juniper’s Unified Access Control solution, which allows administrators to enforce access control and security down to individual ports and users.”

The EX 3200 and EX 4200 switches will be available from next month while the EX 8200 will only be available in the second half of the year. No local pricing has been announced yet.

IPS gaining ground over IDS

2007-10-30T22:26:00.000-07:00

IT security managers say the dangers posed by computer worms and hacker attacks have compelled them to shift defenses from passively monitoring their networks to actively blocking attacks, even though legitimate traffic sometimes gets blocked.

With the growth of intrusion-prevention systems, established IPS vendors and start-ups are introducing an ever-widening array of products.

However, while IPSs appears to be usurping intrusion-detection systems (IDS) in more organizations, they come with the risk of blocking good traffic and bad.

"It's a calculated risk," says Chris Hoff, information security officer at Western Corporate Federal Credit Union (WesCorp) in San Dimas, Calif., about his company's decision to shift from IDS to IPS over the last six months.

WesCorp, which has $25 billion in assets and provides back-office management services to about 1,000 credit unions, deployed the Internet Security Systems (ISS) Proventia G-100 IPS appliance to start automatically blocking attack traffic. The main reason is that even one hit from the growing number of worms and hacker attempts would be too high a price to pay, Hoff says. However, the downside is that legitimate traffic occasionally is blocked along with attack traffic, he adds.

"Legitimate traffic can be blocked, and we spend an enormous amount of time tracking down false positives and false negatives," Hoff says. He adds that there needs to be improvement in IPS blocking to filter out the "harmful stuff" while allowing good traffic through.

In spite of the problems false positives cause - the same kind that plagued passive IDS sensors over the years - Hoff says he has no intention of giving up intrusion prevention. He adds that WesCorp isn't buying network-based IDS any more. Instead, the company is using vulnerability-assessment much more than it did in the past, and deploying products from Skybox Technologies and Qualys to determine which server and desktops require patching and updates.

Hoff says he's interested in host-based IPS, too, but is waiting for prices to drop. Costs typically run into the hundreds of dollars for the software for each server that needs protection.

According to IDC, the market for IDS and IPS together - collectively known as intrusion detection and prevention (IDP) - is about $730 million, with host-based software half of network-based software and hardware last year.

Several analyst firms, including Infonetics Research and IDC, say it's admittedly hard to figure out the exact number of blocking-capable IPS products that were sold in any year vs. IDS. This is because some of the larger IDP vendors, including ISS and Symantec, are reluctant to break this out. The reason often given is that IPS typically includes passive IDS functionality, and sometimes customers use IPS for passive monitoring or in a "mixed mode" where they block some traffic but monitor other portions.

Nevertheless, there's strong reason to believe IPS is gaining ground among enterprise customers, says Charles Kolodgy, research director for security products at IDC. He predicts that within a matter of a few years "IPS will eventually be the predominant technology."

IPS is selling better than IDS, confirms Clarence Morey, senior manager for product strategy at ISS, adding IPS is often preferred for the most mission-critical networks. ISS, which focused on software-based intrusion detection until the launch of its Proventia appliance line in mid-2003, declines to offer more detail on numbers. But in its latest quarterly legal filing at the Securities and Exchange Commission, ISS indicated that the Proventia line of IPS appliances accounted for 61% of product and license sales in the third quarter of this year, and 53% of sales revenue for the nine months of the year. ISS stated its nine-month revenue as $88.9 million, as opposed to $76.1 million for the same period a year ago. According to this statement, IPS has overtaken sales of traditional IDS.

IDC also points out that several of the top vendors in the IDP market - McAfee, NetScreen Technologies (which Juniper bought last year) and Top Layer Networks - generate their revenue through IPS products alone. IDC also cites the explosion of new market entries in the last six months as an indicator of growing demand for IPS.

On the host-based IPS side, eEye Digital Security's Blink software and products from start-ups such as Bodacion and Determina were introduced this year.

On the network-based IPS side, the new-product barrage came from start-ups such as Barrier Group, Beadwindow and Captus Networks. A few, such as Sentryware, offer network- and host-based IPS.

McAfee recently unveiled two new versions of its IntruShield IPS, the multi-gigabit models 4010 and 3000 with expanded ports for large corporations and ISPs.

Amid this cornucopia of IPS offerings, there's no shortage of early adopters willing to try network-based IPS to protect their networks through blocking.

"I look at it as a disaster-prevention element," says Eben Berry, manager of IS at managed healthcare provider Network Health in Cambridge, Mass., which serves 60,000 Medicaid recipients. The healthcare organization uses V-Secure's 100M bit/sec V-100 appliance at the perimeter to block attacks on its Web site.

Berry says the V-100 appliance doesn't rely on signatures to pinpoint attacks but instead monitors patterns of activity. On its internal LAN, Network Health deployed a different IPS: Juniper's NetScreen IDP-100, because it can filter on a bidirectional basis, something V-Secure's appliance only recently added.

Todd Woyke, engineer at Diversico Industries, a tool manufacturer in Minneapolis, decided to use Barrier Group's IPS after being blitzed repeatedly by dozens of computer worms and hackers that broke into servers. "So far, all I can say is we aren't seeing any intrusions," Woyke says, and adds he's sold on intrusion prevention.

Unclassified but Sensitive Internet Protocol Router Network Security Policy

2007-10-30T22:23:00.000-07:00

The Unclassified but Sensitive Internet Protocol Router Network is a network of government-owned Internet protocol routers used to exchange unclassified but sensitive information between DoD users. The Unclassified but Sensitive Internet Protocol Router Network is also the primary entrance into the Internet. As of August 2000, over 70 percent of Unclassified but Sensitive Internet Protocol Router Network traffic is directed toward the Internet. As the growth and usage of the Internet surge, so do the dangers of intrusion into sensitive networks. In a policy memorandum on "Increasing the Security Posture of the Unclassified but Sensitive Internet Protocol Router Network," August 22, 1999, the Assistant Secretary of Defense (Command, Control, Communications, and Intelligence) expressed interest and concern over the multitude of interconnections between the Unclassified but Sensitive Internet Protocol Router Network and the Internet.

Secret Internet Protocol Router Network (SIPRNET)

2007-10-30T22:22:00.000-07:00

SIPRNET replaces the DDN DSNET1 as the SECRET portion of DISN. Its complete architecture will be achieved by constructing a new worldwide backbone router system. The primary method for secret-level network connectivity is via Base secret-level networks which in turn provide Base Router connectivity to SIPRNET. Various DOD router services and systems will migrate onto the SIPRNET backbone router network to serve the long-haul data transmission needs of the users. Transmission services will use smart multiplexer and 512 kilobits per second (kbps) channels. Other transmission services will be acquired or leased as needed. Future expansion will progress to the T1 circuit data rate of 1.544 Megabits (Mbps) and potentially to the T3 data rate of 45 Mbps. High speed packet switched service will be provided through the use of IP routers. This SECRET router layer of the DISN is intended to support national defense C3I requirements, to include the issuing of COMSEC keys used with the STU-III to make secure dial-up SIPRNET comm server connections.
The Secret Internet Protocol Router Network (SIPRNET) has matured to be the core of our warfighting command and control capability. Many expeditionary commanders ask for SIPRNET ahead of secure voice when deploying their forces. SIPRNET is fast becoming the defacto standard of preferred data services, even over NIPRNET. The SIPRNET is the new, worldwide router-based network replacing the older X.25-based packet switched network (the Defense Secure Network One (DSNET1) of the Defense Data Network (DDN)). The initial SIPRNET backbone router network went online 3 March 1994. Subscribers started coming on line shortly thereafter. The SIPRNET WAN (as of 31 May 1995) consisted of a collection of 31 backbone routers interconnected by high-speed serial links to serve the long-haul data transport needs of secret-level DoD subscribers. Additional SIPRNET backbone routers are being planned to meet increased customer requirements. SIPRNET supports the DoD standard Transmission Control Protocol/Internet Protocol (TCP/IP) protocol service. Subscribers within the DoD and other Government Agencies are able to use the SIPRNET for passing datagrams at the Secret-Not Releasable to Foreign Nationals (SECRET-NOFORN) classification level.

Security and VPN Management Solution

2007-10-23T20:39:00.000-07:00

As today's enterprises transform their networks into a tool that enables employees to be more productive, they must find ways to protect the network and the data that traverses it. The Cisco Self-Defending Network leverages integrated Cisco security infrastructure to ensure the enterprise network defends against external security threats, protects systems and information through internal trust and identity policies, and provides secure business communications. The result is security assurance and protection of company profits and assets.

The Cisco Security Management Suite is a framework of products and technologies designed for scalable policy administration and enforcement for the Cisco Self-Defending Network. This integrated solution can simplify and automate the tasks associated with security management operations, including: configuration, monitoring, analysis, and response. The key components of this suite are the Cisco Security Manager and the Cisco Security Monitoring, Analysis, and Response System (Cisco Security MARS).

1. Cisco Security Manager is a powerful but easy-to-use solution for configuring firewall, VPN, and intrusion prevention system (IPS) policies on Cisco security appliances, firewalls, routers, and switch modules.

2. Cisco Security MARS, is an appliance-based, all-inclusive solution that allows network and security administrators to monitor, identify, isolate, and counter security threats.

Cisco Security Manager and Cisco Security MARS can be deployed separately to provide flexibility for any network environment. However, when used together, an administrator can achieve even greater value and productivity benefits. These applications are integrated to provide an outstanding ability to continuously monitor and improve the security of the network as threats arise. This allows organizations to realize the following business benefits:

1. Simplified management of an integrated security fabric
2. Higher network availability through faster threat mitigation
3. Reduced complexity across multiple security platforms
4. IT Investment preservation

With a powerful set of applications, an integrated architecture, and a comprehensive ecosystem partner strategy, the Cisco Security Management Suite is positioned as the ideal management solution for the Cisco Self-Defending Network

Cisco Cable High Speed Data (HSD) Solutions

2007-10-22T20:43:00.000-07:00

Add DOCSIS-Based High-Speed Data Services
Cable operators have enjoyed great success offering Internet access. Cisco has the real-world experience, proven products, and advanced technologies to help you supply cable high-speed data (HSD) services, based on DOCSIS standards, for homes and businesses.

Cisco HSD solutions (Figure 1) blend broadband cable RF technology with Cisco’s highly scalable, secure, and flexible IP core technology. The Cisco portfolio includes industry-leading, DOCSIS-compliant CMTSs, leading-edge business and home CPE, and advanced IP backbone and edge products. Along with residential HSD products, Cisco offers tested business service solutions, including VPNs, Metro Ethernet, and virtual LANs, that can generate higher margins and higher revenue.

Cisco works with you to integrate its broad array of products into a single, highly productive HSD solution tailored to your needs.

How the DOCSIS-Based Solution Works
Your high-speed data backbone can be used for interconnection between different regional networks, as well as to external networks. High-speed trunks using DWDM and SONET/SDH technologies support Ethernet interfaces used by both routers and switches. The statistically multiplexed links can, in turn, use Dynamic Packet Transport (DPT), Resilient Packet Rings (RPRs), or other Ethernet transport standards such as 10 Gigabit Ethernet links.

Next-generation technology incorporates Modular CMTS architectures (M-CMTS) based on DOCSIS 3.0 downstream channel-bonding techniques that more effectively use bandwidth. Your customers can receive 100 Mbps services and beyond via your existing cable plant. You can add this new technology on a node-by-node basis, responding to competition as it arises. Our solutions let you take advantage of DOCSIS 3.0 channel bonding without a major infrastructure upgrade and also allow you to support DOCSIS 1.x, 2.0, and 3.0 simultaneously.

Figure 1 Cisco Cable DOCSIS-Based High-Speed Data Solutions
Click on a product name for more information

Best Practices for Software Performance Testing

2007-10-18T02:16:00.000-07:00

Many organizations fail to utilize automated tools as a means to test the large scale performance of applications. This significantly limits their ability to adequately measure the capabilities of programs under various user loads, network conditions and server and database utilization rates. This Podcast details best practices for performance testing, highlighting the various errors that such testing can bring to light.

This Podcast highlights the best practices necessary for effective software performance testing. In this Podcast, you will learn about:

The components of performance testing
Issues performance testing uncovers
Important factors affecting software performance
The impact of Web 2.0 and Ajax on software performance testing

CLICK HERE TO PLAY THE AUDIO
--------------------------
SPEAKERS:

Paul Gillin
Principal, Paul Gillin Communications
Paul Gillin is a veteran technology journalist with more than 23 years of editorial leadership, including positions as chief editor of TechTarget and Computerworld. He is now a content marketing consultant specializing in technology and new media. He advises business-to-business marketers on how to optimize online channels to reach buyers most cost-effectively. His forthcoming book about social media, The New Influencers, will be published by Quill Driver Books in Spring, 2007.

Siva Darivemula
Director of Product Marketing, Hewlett-Packard Company
Siva Darivemula is the Director of Product Marketing for the HP Performance Center software product line. In this role, he is responsible for the go-to-market strategy of performance testing solutions. He has many years of experience with enterprise software and solutions and product marketing. He has worked at IBM, Microsoft and Adobe Systems with industry-leading solutions such as WebSphere, Microsoft Office, and Flex.

Small Business Networking

2007-10-18T02:07:00.000-07:00

By James Gaskin

HP's c3000 aims at medium and small businesses.

If you're drooling over the advances in the world of blade servers, wishing you could afford a rack or two of them, that day may arrive sooner than you think. Looking to replace the jumble of servers stacked in the storage closet, er, server room? Don't have a fancy raised floor and heavy duty air conditioner? No problem.

Of course, if you read about the heavy power requirements for a rack full of blades, such as three phase power modules, you figure blades will elude you forever. When you read about problems large companies have cooling a cabinet full of 64 blade servers, all with two processors and 32GBs of RAM generating heat like the August sun, you may be glad to avoid such headaches.

But the truth is blade servers create less heat, and require less power, than stand-alone servers with the same horsepower. They just need the power and cool air in one small spot. Second generation blade server chassis now do a better job dispersing the heat generated by blades than ever before, and cooling product vendors have adapted their tools to better handle the heat created by racks of blade servers. Still takes work, but it is getting easier.

Even better, HP now has a smaller blade enclosure system called the c3000, or Shorty. The company based the unit on the enterprise class c7000 blade enclosure used by the big data centers, so many parts from the high end system work in the c3000, such as the special cooling fans. Aiming at branch offices of large companies, HP actually made a great “introductory” blade server system for small and midsize businesses.

The best thing about the c3000 for small businesses is its ability to run in the same kind of environment your current servers do: the “nothing special” environment. It runs on power from a normal 120 volt wall socket. It runs in rooms cooled by standard office air conditioning. In other words, you can get a blade system and treat it as badly as you treat your current servers. There's no need to upgrade your storage closet/server room.

Blade system vendors say the price for blades evens out with stand-alone servers when buying five servers. You have to amortize the cost of the chassis over five servers to get the individual server cost down to match similar stand-alone server pricing. While it's more efficient to provide power and cooling fans in the chassis for multiple servers rather than in each case for stand-alone servers, that does drive up the cost of the chassis. Blade production volumes continue to increase, but traditional servers still get lower pricing from higher volume production runs.

Full height blade servers aren't much smaller than the rackable 1U pizza box style servers they replace. They moved the cooling and power supplies off the server motherboard into the chassis, but they didn't make a huge leap in server density. Blades reduced management overhead and did away with 9 of 10 cables used inside a normal rack, but the server density didn't jump way up.

HP's half height blades, however, pack two complete servers into the same space as one of their full height blade slots. Since the c3000 Shorty chassis can handle four full height blades, eight half height blades, or any combination that works mathematically, you can choose exactly what your blade server system includes.

These second generation blade servers, both full and half height, include more storage options onboard and storage blades, packed with hard disks rather than processors, provide additional capacity as well. The release of 3.5 inch hard drives with 1 terabyte of data space really allows you to pack plenty of storage into a small space. In this case, pack it into a small slot.

Blade technology dominates future plans in large data centers. For the first time, small and growing businesses can jump into blade territory without worrying about concentrated cooling and power demands faced by the enterprise data centers.

Keep an eye on Network World's review pages. Tom Henderson, a fellow member of the Test Alliance, has a c3000 on his testing bench for review right now.

Although vendors only promise you'll come out even price-wise if you buy five blade servers, you should plan ahead a little. If you need three servers now, or even two, check out the c3000, especially if you know your next server purchase will be within a few months.

Like the book from the '70s said, small is beautiful. Small and powerful, however, is gorgeous.

Juniper unveils giant router

2007-10-17T01:33:00.000-07:00

Juniper claims router surpasses Cisco offering

Juniper Networks Monday announced a eight-slot core router for service providers that boasts bandwidth of 1.6Tbps, more than twice that of the company’s previous high-end system.

The vendor’s T1600, in a half-rack configuration, blows past the 5-year-old T640, which tops out at 640Gbps. Juniper claims its new box provides 2.5 times the capacity of Cisco’s CRS-1 router with 30% less power and cooling requirements.

T640 customers can upgrade to the new router in 90 minutes without service interruption, Juniper says.

Given that the T640 came out in 2002, they might be eager to do just that.

“The T640 is old,” says Mark Seery, an analyst at Ovum. “Five years is a long time in this business.”

Service-aware routers
The T1600 is also “service aware,” according to Juniper, meaning that it can provide content-specific transmission quality depending on the traffic type – voice and video, in addition to data. Core networks that are not service aware delay new service introduction, lead to inefficient use of resources, force the construction of complex network architectures, and ultimately limit an operator’s competitiveness, according to Juniper.

Service awareness is achieved through in-depth packet processing and policy control. Policy is enabled by Juniper’s recently announced Session Resource Control products, hardware-based controllers running applications which mange subscribers and network resources.

The T1600 also supports the recently introduced point-to-multipoint MPLS (P2MP) feature in the JUNOS operating system. P2MP is intended to provide efficient core video distribution and enhanced optical network integration at 10G and 40Gbps.

A potential downside to the T1600 is its initial lack of support on Juniper’s TX switching matrix, a centralized fabric designed to connect T-series routers into a multiterabit-per-second virtual megarouter. Juniper says customers are demanding higher density and capacity in individual elements for scale rather than connecting multiple lower density systems together.

Juniper also says TX will require an upgrade to support the 100Gbps-per-slot capacity of the T1600. Company officials did not say when this upgrade would be unveiled.

What carriers think
Ovum’s Seery says carriers are not yet confident in the multichassis interconnect options from their vendors.

“I believe all carriers are trying to assess whether they are comfortable with multichassis configurations,” he says. Some carriers are looking for redundancy features, such as the ability to deploy dual distributed switch fabrics, to eliminate the single point of failure current offerings present, Seery says.

Juniper’s hoping carriers won’t wait for the TX support before buying the T1600. Juniper’s deployed 2,500 T640s to date but the company’s share in the core router market slipped from 37% to 30% over the past year.

And Cisco, which announced Monday that it shipped 900 CRS-1s since the product’s launch in 2004, stole some thunder when AT&T picked the CRS-1 to replace its Avici Systems installation after Avici announced it was exiting the core router market.

“The T1600 will help defend Juniper against [Cisco’s] CRS-1,” Seery says. “But it’s not in a strong position until it’s in a TX configuration.”

The T1600 is slated for fourth quarter availability.

The vendor’s T1600, in a half-rack configuration, blows past the 5-year-old T640, which tops out at 640Gbps. Juniper claims its new box provides 2.5 times the capacity of Cisco’s CRS-1 router with 30% less power and cooling requirements.

The Right Fit for Your Business—Versatile Value and Premium Power Networks

2007-10-17T01:32:00.001-07:00

3Com® secure converged networks are unique in terms of value and performance. They let customers address their individual needs with choices that feature advanced, end-to-end solutions backed by years of networking experience, robust research, focused development and global support services—all with an emphasis on reduced complexity and cost.

With increasing dependence on meeting business challenges using secure converged networks, organizations need to align performance requirements and budget limits. How can they affordably help people thousands of miles apart meet online to solve a problem, undergo training, edit documents or serve customers—using voice, video or web conferencing technologies and an IP network? How can mobile workers be assured of instant access to critical applications and data? How can communications and business assets be kept safe and secure? How can budgets and resources be stretched?

3Com helps address these challenges. Standards-based, best-in-class security, wireline and wireless switching, routing and Voice over IP technology deliver sophisticated solutions with minimal complexity to ensure fast returns on investment, increased productivity and high-performance communications.

Cognio's spectrum intelligence technology to enhance, complement Cisco's Unified Wireless Network vision

2007-09-23T17:45:00.000-07:00

SAN JOSE, Calif. - September 18, 2007 - Cisco® today announced a definitive agreement to purchase Germantown, MD-based Cognio, Inc., the market leader in wireless spectrum analysis and management for wireless networks.

Cognio's industry-leading spectrum technology enhances performance, reliability and security of wireless networks by detecting, classifying, locating and mitigating sources of radio frequency (RF) interference. The acquisition will provide Cisco with complementary and differentiating technology, intellectual property and a core team to expand Cisco's leadership in unified wireless networking.

Wireless and mobility are becoming mission critical components of today's networks, with businesses viewing the wireless spectrum as a strategic corporate asset. Businesses now require robust, next generation wireless networks to support the unprecedented growth of wireless devices and the increased reliance on mobility applications. Cognio's spectrum intelligence solution enables network managers to proactively manage their wireless spectrum and minimize RF interference for an optimal user experience.

"With a strong product and technology portfolio and consistent innovation from a talented group of engineers, Cognio has emerged as the leader in spectrum intelligence technology," said Brett Galloway, vice president and general manager of the Wireless Networking Business Unit, Cisco. "Wireless spectrum is a strategic asset for our customers, and its management is key to the robust delivery of mobility applications. Cognio's innovation in spectrum intelligence will help ensure Cisco continues to differentiate our ability to deliver our customers rich and dependable end-user mobility experiences."

The Cognio acquisition complements Cisco developed technology as well as expertise from other acquisitions that Cisco has made in the wireless networking space. This acquisition will expedite the delivery of industry-changing capabilities and is consistent with how Cisco uses business development strategies to move into new markets or to gain new technologies. Cisco classifies wireless networking as a Cisco Advanced Technology -- one of six -- with application networking services, home networking, security, storage networking and unified communications being the others.

The Cognio acquisition is subject to various standard closing conditions and is expected to close in the first quarter of Cisco's 2008 fiscal year. Upon the close of the acquisition, Cisco plans to integrate Cognio into its Wireless Networking Business Unit, under the Ethernet and Wireless Technology Group.

The Cognio acquisition will be No. 122 for Cisco and the first one in fiscal year 2008.

Complete Security and Networking Tools

2007-09-19T18:38:00.000-07:00

This is what almost computer geek want. 175 Security and network monitoring tools in one package. Good News is its completely Freeware. Yes its freeware i love freeware. imagine if you have to pay fo 175 Software. That coss a lot. So spend your money for your girlfriends. Make she feel happy. Stop mumbling.

Lets take look what inside this freeware called Net Tools.
Net Tools 5.0.70
All-in-one network and system toolkit

1. IP Address Scanner
2. IP Calculator
3. IP Converter
4. Port Listener
5. Port Scanner
6. Ping
7. NetStat (2 ways)
8. Trace Route (2 ways)
9. TCP/IP Configuration
10. Online - Offline Checker
11. Resolve Host & IP
12. Time Sync
13. Whois & MX Lookup
14. Connect0r
15. Connection Analysator and protector
16. Net Sender
17. E-mail seeker
18. Net Pager
19. Active and Passive port scanner
20. Spoofer
21. Hack Trapper
22. HTTP flooder (DoS)
23. Mass Website Visiter
24. Advanced Port Scanner
25. Trojan Hunter (Multi IP)
26. Port Connecter Tool
27. Advanced Spoofer
28. Advanced Anonymous E-mailer
29. Simple Anonymous E-mailer
30. Anonymous E-mailer with Attachment Support
31. Mass E-mailer
32. E-mail Bomber
33. E-mail Spoofer
34. Simple Port Scanner (fast)
35. Advanced Netstat Monitoring
36. X Pinger
37. Web Page Scanner
38. Fast Port Scanner
39. Deep Port Scanner
40. Fastest Host Scanner (UDP)
41. Get Header
42. Open Port Scanner
43. Multi Port Scanner
44. HTTP scanner (Open port 80 subnet scanner)
45. Multi Ping for Cisco Routers
46. TCP Packet Sniffer
47. UDP flooder
48. Resolve and Ping
49. Multi IP ping
50. File Dependency Sniffer
51. EXE-joiner (bind 2 files)
52. Encrypter
53. Advanced Encryption
54. File Difference Engine
55. File Comparasion
56. Mass File Renamer
57. Add Bytes to EXE
58. Variable Encryption
59. Simple File Encryption
60. ASCII to Binary (and Binary to ASCII)
61. Enigma
62. Password Unmasker
63. Credit Card Number Validate and Generate
64. Create Local HTTP Server
65. eXtreme UDP Flooder
66. Web Server Scanner
67. Force Reboot
68. Webpage Info Seeker
69. Bouncer
70. Advanced Packet Sniffer
71. IRC server creater
72. Connection Tester
73. Fake Mail Sender
74. Bandwidth Monitor
75. Remote Desktop Protocol Scanner
76. MX Query
77. Messenger Packet Sniffer
78. API Spy
79. DHCP Restart
80 File Merger
81. E-mail Extractor (crawler / harvester bot)
82. Open FTP Scanner
83. Advanced System Locker
84 Advanced System Information
85. CPU Monitor
86 Windows Startup Manager
87. Process Checker
88. IP String Collecter
89. Mass Auto-Emailer (Database mailer; Spammer)
90. Central Server (Base Server; Echo Server; Time Server; Telnet Server; HTTP Server; FTP Server)
91. Fishing Port Scanner (with named ports)
92. Mouse Record / Play Automation (Macro Tool)
93. Internet / LAN Messenger Chat (Server + Client)
94. Timer Shutdown/Restart/Log Off/Hibernate/Suspend/ Control
95. Hash MD5 Checker
96. Port Connect - Listen tool
97. Internet MAC Address Scanner (Multiple IP)
98. Connection Manager / Monitor
99. Direct Peer Connecter (Send/Receive files + chat)
100. Force Application Termination (against Viruses and Spyware)
101. Easy and Fast Screenshot Maker (also Web Hex Color Picker)
102. COM Detect and Test
103. Create Virtual Drives
104. URL Encoder
105. WEP/WPA Key Generator
106. Sniffer.NET
107. File Shredder
108. Local Access Enumerater
109. Steganographer (Art of hiding secret data in pictures)
110. Subnet Calculater
111. Domain to IP (DNS)
112. Get SNMP Variables
113. Internet Explorer Password Revealer
114. Advanced Multi Port Scanner
115. Port Identification List (+port scanner)
116. Get Quick Net Info
117. Get Remote MAC Address
118. Share Add
119. Net Wanderer
120. WhoIs Console
121. Cookies Analyser
122. Hide Secret Data In Files
123. Packet Generator
124. Secure File Splitting
125. My File Protection (Password Protect Files, File Injections)
126. Dynamic Switch Port Mapper
127. Internet Logger (Log URL)
128. Get Whois Servers
129. File Split&Merge
130. Hide Drive
131. Extract E-mails from Documents
132. Net Tools Mini (Client/Server, Scan, ICMP, Net Statistics, Interactive, Raw Packets, DNS, Whois, ARP, Computer's IP, Wake On LAN)
133. Hook Spy
134. Software Uninstaller
135. Tweak & Clean XP
136. Steganographic Random Byte Encryption
137. NetTools Notepad (encrypt your sensitive data)
138. File Encrypter/Decrypter
139. Quick Proxy Server
140. Connection Redirector (HTTP, IRC, ... All protocols supported)
141. Local E-mail Extractor
142. Recursive E-mail Extractor
143. Outlook Express E-mail Extractor
144. Telnet Client
145. Fast Ip Catcher
146. Monitor Host IP
147. FreeMAC (MAC Address Editor)
148. QuickFTP Server (+user accounts support)
149. NetTools Macro Recorder/Player (Keybord and Mouse Hook)
150. Network Protocol Analyzer
151. Steganographic Tools (Picture, Sounds, ZIP Compression and Misc Methods)
152. WebMirror (Website Ripper)
153. GeoLocate IP
154. Google PageRank Calculator
155. Google Link Crawler (Web Result Grabber)
156. Network Adapter Binder
157. Remote LAN PC Lister
158. Fast Sinusoidal Encryption
159. Software Scanner
160. Fast FTP Client
161. Network Traffic Analysis
162. Network Traffic Visualiser
163. Internet Protocol Scanner
164. Net Meter (Bandwidth Traffic Meter)
165. Net Configuration Switcher
166. Advanced System Hardware Info
167. Live System Information
168. Network Profiler
169. Network Browser
170. Quick Website Maker and Web Gallery Creator
171. Remote PC Shutdown
172. Serial Port Terminal
173. Standard Encryptor
174. Tray Minimizer
175. Extra Tools (Check Out Yourself)

Net Tools requires Microsoft .NET Framework 2.0

Download hereA bunch of tools ha!

Check out yourselfDownload Net Tools

Juniper and Symantec security alliance to challenge Cisco

2007-09-16T19:54:00.000-07:00

The recent announcement of an alliance between Juniper Networks Inc and Symantec Corp in the area of security means they will present a united front, particularly against Cisco Systems Inc.

The two Californian companies, Juniper from Sunnyvale and Symantec from Cupertino, recently announced what they call "a broad strategic partnership" in security, involving joint development of unified threat management (UTM) appliances, intrusion-prevention systems, and network access control.

The two are heavyweights in their respective areas, and though they compete today in firewall/VPN, NAC and IDS/IPS, they are both major competitors to Cisco, a factor that clearly forms the backdrop to this alliance.

Depending on the analyst firm, Juniper is either number two or three in the carrier routing market behind Cisco. The other player is Alcatel, which some analysts rank above Juniper whose efforts to break into the enterprise market with its J-Series routers had a tepid reception, so two years ago it adopted a different tack, and spent $4bn to acquire firewall/VPN, SSL VPN and IDS/IPS upstart NetScreen.

Earlier this year it began to move into UTM appliances, which are multi-function security appliances aimed primarily at the branch and remote office environment, adding a routing capability to offer what some analysts are calling a branch-in-a-box, or BiaB, product: its Integrated Security Gateway portfolio. The products compete directly with Cisco's Integrated Services Router and Adaptive Security Appliance product lines, which use some perimeter security functionality from Symantec competitor Trend Micro.

Meanwhile, Symantec last year acquired Sygate, taking the AV heavyweight into endpoint security where Cisco has its Network Admission Control offering and Juniper its Unified Access Control.

However, rather than continuing to compete in isolation against the networking giant, the two are now pooling their NAC technologies and working within the context of the standards-based approach by the Trusted Computing Group, based on its Trusted Network Connect spec, which they both want to drive to avoid Cisco dominance of this emerging space.

Equally, Cisco has just unveiled a collaboration with Microsoft Corp to make its NAC interoperate with the Microsoft's Network Access Protection technology that is due to appear in Vista and Longhorn. This clearly behoves Symantec and Juniper to drive TNC-based NAC harder now before it is rendered irrelevant by a de facto standard represented by the Cisco NAC/Microsoft NAP coupling.

Another recent development that is also a factor here is EMC's June $2.1bn acquisition of authentication vendor RSA. Market rumors suggested EMC swooped on RSA before another major player got there, with Symantec the name most commonly bandied about. Since its merger/acquisition of storage software heavyweight Veritas last year, Symantec has been butting heads directly with EMC's own software division. Industry insiders say that with RSA providing some encryption technology used in EMC's arrays, the prospect of the token authentication vendor falling into the hands of Symantec was unpalatable.

However, that move also left Symantec in edge security (anti-X, content filtering, firewall/VPN, and IDS/IPS) with a play in the core (NAC), but needing to beef up its offering in the latter, which is one of the areas the alliance with Juniper seeks to address.

While Juniper has been getting into UTM this year, Symantec a couple of month ago made a hazy announcement that it was exiting, or at least de-emphasizing the appliance market, a move which the announcement with Juniper throws into a new light. Rather than go it alone on UTM box development, Symantec sees benefits to riding in with its technology on Juniper's hardware, leveraging both their channels to get to market.

On the back end, both companies have research teams sitting in network operation centers around the world, monitoring screens for threats and exploits. Juniper has its J-Security Team and Symantec the Global Intelligence Network, collaboration between which should in theory enable more a comprehensive service of security info feeds to common customers.

Symantec is already a significant security services player, and another recent relevant development is that IBM's Global Services arm recently acquired IDS/IPS pioneer ISS, whose recent business strategy had been all about populating its customer's networks with its Proventia security appliances, then selling the info feeds to them as part of an overall services play.

The Symantec/Juniper partnership looks similar in approach, at least in terms of the U and IPS strains of the announcement, while the NAC part appears to be a way of gaining mindshare and market share to compete with Cisco. Joint developments in all three areas will give the partners a portfolio to rival that of Cisco in security, even though neither company is currently in Ethernet switching, which is still the largest single contributor to the networking giant's $29bn annual revenue. However, there are persistent rumors of a project deep within Juniper to develop a low-cost switching line based on Marvell silicon for launch in the second half of 2007.

Cisco adds NAC to ISR, updates endpoint recognition

2007-09-16T19:49:00.000-07:00

Network access control (NAC) has been hyped as the network-based security to end 'em all, but NAC adoption has been somewhat stagnant because, many experts claim, it is quite complex or just too immature.

Cisco, however, hopes to change that. The networking giant announced today that it's releasing a Network Admission Control module for its widely popular Integrated Services Router (ISR) -- which has more than 3 million deployed to date -- in hopes of getting NAC into more locations, namely branch offices.

The Cisco NAC Network Module for ISRs is a modular security solution that is integrated into the network infrastructure. It authenticates, authorizes, evaluates and remediates remote user machines connected via wired or wireless links, prior to granting them access to corporate networks. The NAC module for the ISR, designed for branch offices, thwarts potential threats and vulnerabilities locally before they're sent over the WAN to prevent them from entering the network, said Fred Kost, director of security solutions for Cisco.

The module includes all of the features of the Cisco NAC Appliance Server and is supported by the Cisco 2800 and 3800 Series ISRs. It enforces security policy on networked devices such as Windows, Mac and Linux machines; laptops; desktops; PDAs; printers; and IP phones.

The NAC module works in concert with firewalls, intrusion-prevention systems and VPNs to round out the security offered in the ISR, giving branches a secure infrastructure.

Kost said the module is designed for branches and office locations that don't have the time or resources to manage separate security solutions in addition to the routing infrastructure.

According to Ladi Adefala, security practice manager with systems integrator and Cisco partner World Wide Technologies, adding the NAC module to the ISR has the potential to give branches more bang for their buck when they are working with limited management and financial resources.

"From the administrator standpoint, the user is empowered with that all-in-one solution for the branch office," Adefala said. "You get the same level of security on the endpoints, and you get it with something less complex."

A modular NAC approach eliminates the need to devise new solutions around how to centralize management of security at a time when a lot of enterprises are focusing on centralization, he said.

"Aside from streamlining our management, the NAC ISR module allows us to concentrate our security efforts within the network itself," Adefala said. "It gives us an opportunity to offer our customers more synergy between their network and security as well."

Moreover, he added, eliminating the complexity should make NAC as a whole more marketable and affordable.

"You want to make sure whatever level of security you have at headquarters is carried over to branch offices, and this does that," he said.

Andrew Braunberg, research director with Current Analysis, agreed that putting NAC capabilities in the ISR brings more visibility to the edge, where it's needed most.

"The fact that they're going to be able to push NAC capabilities out to the branch makes sense," he said. "Logically and physically it makes sense to put them together."

Braunberg said he questions whether or not the NAC module for ISR is a step toward or away from Cisco's trying to marry both the NAC appliance and the CNAC framework, which has been rumored to be in the works for more than a year.

Along with the ISR module, Cisco enhanced its NAC Appliance Server by offering the Cisco NAC Profiler, an endpoint-recognition technology that keeps an inventory of networked devices so they can be evaluated before and during sessions on the network. The Profiler boosts the ability of networked devices that aren't associated with particular users to be identified, authenticated and then granted or denied network access. Devices that are unassociated with a particular user include printers, IP phones, wireless access points, sensors and medical devices. The Profiler also performs continuous behavioral assessments for post-admission access control.

"The Cisco NAC Profiler arrives at a time when businesses are supporting growing numbers of devices critical to operations and productivity," said a Cisco statement. "The NAC Profiler addresses the growing complexity of protecting an increasingly diverse array of networked devices by taking an in-depth and automated inventory and enabling actions to be taken based on their behavior."

NAC Profiler, which stems from an OEM agreement with Great Bay Software, consists of a software update on the NAC Appliance Server, and the NAC Profiler Server pulls information from the NAC Appliance Server and sends it to the management console, according to Brendan O'Connell, Cisco's NAC product marketing manager.

"It's about making sure a device is what it claims to be," O'Connell said, adding that in the past, devices like printers, copiers and other IP-addressed devices weren't assessed by NAC tools. "It's gathering information about the networked endpoint to ensure it's doing what it should be doing."

Braunberg agreed. "This does all of the heavy lifting of making sure there's an updated list of these non-responsive hosts," he said. "Since it can look at the behavior from a particular address, you can know what that device is supposed to be and what it's supposed to be doing. That can help considerably."

Huawei constructs All IP Network for QSC in Germany

2007-09-10T21:55:00.000-07:00

Carrier deploys Huawei's award-winning Multi-Service Control Gateway ME60

[Berlin, Germany 28 August 2007] Huawei Technologies Co., Ltd. (Huawei), a leader in providing next generation telecommunications network solutions for operators around the world, today announced that it has accomplished the installation of its multi-service control gateways (MSCG) ME60, in the All IP network of German leading telecommunications provider QSC AG.

The ME60 is a next-generation multi-service edge solution designed to meet the challenges in the transformation toward a customer-centric All IP architecture network for multi-play applications. The ME60 offers a perfect QoS mechanism to help QSC deploy services more quickly at highly reliable levels and achieve intensive service operations. It also provides QSC with a unified operation platform for services and applications, reducing the capital and operational expenditure of its broadband network. After a strict test and selection process, QSC chose Huawei as a partner to build up its All IP network.

QSC is one of the leading fixed network carriers in Germany. Its broadband network is accessible nationwide in Germany and offers voice and data services to business- and private customers. QSC also provides other carriers and internet service providers with wholesale services.

In 2006 QSC has founded Plusnet GmbH & Co. KG. This "network manufactory", now a joint venture between QSC and TELE2, plans, builds and operates QSC's next generation network.

"Huawei owns advanced technologies and rich experiences in telecoms market in data communication field, our cooperation with Huawei on MSCG is a good start. We will join hands with Huawei to provide higher-quality service experience for our users." said Mr. Eivind Dugstad, Managing Director Plusnet GmbH & Co KG.

"We are pleased to see Huawei MSCG devices recognized by leading European carriers such as QSC," commented Chen Junhua, president of Huawei's data communications product line. "Huawei's data communications product line has always been devoted to serving the needs of carrier markets by offering its vast technology resources and extensive network construction experience to customers. Huawei will continue to focus on customers' demands and help QSC build up operable, maintainable and manageable broadband networks."

Huawei ME60 was awarded the 2006 InfoVision Award by the International Engineering Consortium for its innovative contribution to the industry. The ME60 has been successfully rolled out across the networks of over 70 carriers in more than 30 countries, such as China Telecom, Vodafone New Zealand, and provides over 60 million users worldwide with communications services.

Cisco Infrastructure for i-City

2007-05-27T17:33:00.000-07:00

NETWORK solutions provider Cisco Malaysia Sdn Bhd will hook up the i-City commercial development project in Shah Alam with a complete information technology infrastructure.

Residents and businesses in i-City, touted as Selangor's first Multimedia Super Corridor Cybercentre, will enjoy a variety of IT services.

These range from datacentres to wireless networks to high-end videoconferencing facilities; the first phase of the project will be completed by year end.

Kumaran Singaram, managing director of Cisco Malaysia, said companies planning to have their business premises in i-City would not have to build their own IT infrastructure from scratch. Everything they need will be at their disposal as soon as they move in.

“IT services will be available to every building,” he said, adding that in i-City, IT services would be as available as basic utilities such as running water and electricity.

Eu Hong Chew, chief executive officer of I-Berhad which is developing i-City, said the company's objective is to build an IT hub in Selangor.

He said Shah Alam was chosen because it is a well-known spot for industries. “Industries here will be able to use i-City to support their R&D clusters,” he said.

Cisco IP Telephony Solution Wins Voice Industry's Premier IP PBX Competition

2007-05-06T19:56:00.000-07:00

In a head to head comparison with solutions from other leading IP Telephony solution vendors (Alcatel, Avaya, and Nortel Networks) of large-scale IP PBX systems capable of supporting 1,000 or more users, the Cisco solution emerged as the clear winner.

The test was run by Miercom, a leading network consultancy and product test center. Miercom tested the IP PBX systems by rating each of the four vendors' products in six categories: architecture, endpoints, management and administration, features, performance and security.

Cisco took first place in the phones, management and administration, and performance categories ensuring first place overall. Cisco also attained second place in architecture and security and third in the features category.

The complete results of the review are available now in the January edition of Business Communications Review (BCR) magazine: Miercom IP PBX Review.

"Cisco took the lead in the (endpoints) category thanks to the breadth of its offerings, as well as some notable features and excellent phone design," according to the BCR report. In the management and administration category, the article states: "Cisco took the gold in this category. It's clear that the vendor has been doing its homework, and its management application has become one to beat in this market."

In the performance category, the Cisco solution was the only one which managed 100% call completion. This was measured over a nine-hour period in which the Cisco PBX handled thousands of repeated setups and tear-downs.

Marthin De Beer, vice president and general manager of Cisco's IP Communications business Unit, said "We have won what is widely considered the industry's top award for enterprise-class IP PBX systems. It is a tremendous achievement and a testament to the overall quality and performance of our system developed by the seasoned voice team we have in place at Cisco."

Cisco VPN Client and Aladdin eToken Access Solution Suite

2007-04-25T21:31:00.000-07:00

The Access Solution Suite includes secure remote access solutions for Cisco VPN Client combined with Aladdin eToken for strong authentication. Optionally, each solution is integrated with eToken Management System (TMS) for eToken enrolment and full life-cycle management. Each solution within the suite helps organizations establish trusted access to employees, customers, suppliers and partners. The solution provides interoperability among different remote access solutions such as VPN & Wireless and various authentication methods such as digital certificate (PKI) and One-Time Password (OTP).

Cisco Integrated Services Router – Security Practices with Aladdin eToken

2007-04-25T21:27:00.000-07:00

The Cisco IOS® Software-level integration of Aladdin eToken drivers provides partners and customers with enhanced security router practices:

1. Secure Provisioning of Cisco Router Configurations: Combining eToken drivers with Cisco integrated services routers helps Cisco partners mount router configuration on eToken and securely send them to end customers.

2. Portable Credential Storage for Cisco VPN: VPN credential storage on eToken provides off-platform generation and secure storage of VPN credentials. Encryption keys are loaded when eToken is plugged in, and removed when eToken is removed.

MPLS VPNs: What's Next (webinar)

2007-04-09T22:04:00.000-07:00

MPLS VPNs create a robust platform for converged services allowing for cost-effective, any-to-any connectivity. As convergence moves to the next stage, distinctions between wireless and wired networks are blurring, and collaboration is becoming part of the holistic networking environment. Attend this webcast to learn how the network is becoming more intelligent and application-aware, reaching toward a dynamic, unified IT environment that will be more cost effective, agile, and high-performing.

Static NAT to a range tcp ports

2007-03-21T22:00:00.000-07:00

Question: I want to map a range of tcp ports to an internal host from the internet. I could use the ip nat inside static tcp command for mapping an specific port, but what if I want to map the tcp port range from 8000 to 8050?, Is there a way to do that with a single command?

Answer
1.create static translation:
ip nat inside source static 192.168.60.10 172.16.181.195 route-map MAP extendable
ip nat inside source static tcp 192.168.1.2 80 172.17.181.195 80 extendable

2. Define the port range
access-list 101 permit tcp host 192.168.60.10 range 8000 8050 any

route-map MAP permit 10
match ip address 101

frame-relay static route problem

2007-03-21T21:58:00.000-07:00

FAQ

the problem occur when two routers connected via frame-relay switch (2522 router), the configuration on switch is correct as well as on both routers, the loop back interface has been made on RB router i.e RB has 20.0.0.0/8, while at RA router the static router is defined as
ip route 20.0.0.0 0.255.255.255 serial 0

it was not able to send packets to 20.0.0.0/8 when run debug, it got error like encapsulation failed, now when it replaced the static route with next hop ip it was working fine, why ????

When a layer3 packet is going to be sent out, the router must know the layer 2 header to encapsulate the Layer3 packet.In this case, it must know which dlci number (as well as other layer2 information) to encap the IP packet. If you only indicate a connected interface for the static route, and there are many dlci numbers on this interface, the router will not know which dlci number to use and thus gives you a encapsulation failure message.

On the other hand, if you indicate a next-hop address on the static route and there is a frame-relay map which maps a dlci number to this next-hop address , the router will know the exact dlci number to encapsulate the ip packet and the packet will be sent out successfully.

Review from the Cisco's end user

2007-03-21T01:16:00.000-07:00

The posted reviewed is based on my experience managing dan configuring cisco product such as access switch, router, core switch etc.