Currently viewing the tag: "ACL"

Cisco: How to use reflexive access-list and why they are useful

By On March 30, 2009 · 4 Comments

Reflexive access-list are one of the method that help us achive firewall functionality with a router hardware. The other methods that serve to the same purpose are Context-Based Access Control (CBAC) and TCP Intercept. For an introduction to CBAC with example please check my older post Cisco: Use CBAC to achieve firewall functionality on router device . For TCP Intercept check my blog in the next weeks.

Today, I will present Reflexive access-list [...]

Continue Reading →

The stateful LAN: Layer 7 visibility and control

By On March 16, 2009 · Leave a Comment

Enterprises have seen an explosion of new applications, devices and classes of users on their LANs, which makes it harder than ever for IT to ensure network performance, secure corporate assets and comply with regulations. In response, next-generation intelligent LAN switches are emerging that are designed to provide stateful, deep-packet inspection up through Layer 7, providing granular user- and application-level controls.

Other network devices that have already “moved up” the protocol stack include WAN-acceleration platforms and load-balancing switches. Now, by maintaining state information, intelligent switches [...]

Continue Reading →

Cisco: 6 best practice security tips for BGP

By On February 5, 2009 · 1 Comment

As we all know, in today’s digital communication world, there is a very big possibility that your network is or was target for a malicious activity. BGP is one of the most targeted routing protocols when we are talking about network attacks.Why? This is quite simple. BGP is your connection to the exterior world (peer networks, Internet and everything which is outside your LAN/MAN), so it is somehow normal to be the main target of the conducted attacks. If in case of the WWW, DNS, [...]

Continue Reading →