Security archives - David’s Cisco Networking Blog

David’s Cisco Networking Blog:

Security

Jun 29 2009   10:46PM GMT

Introduction to Cisco ASA 5500 Series Adaptive Security Appliances



Posted by: David Davis
Cisco, ASA, 5500, Security, firewall

In this article from the Petri IT Knowledgebase, Tom Finnis covers the Cisco ASA 5500 series appliances - what models are available and what they offer you. All the key features like Firewall, SSL, IPSec VPN, Intrusion Prevention (IPS), and Content Security are covered.

To read the full article, take a look at:

Introduction to Cisco ASA 5500 Series Adaptive Security Appliances

May 31 2009   5:07AM GMT

Prevent Network Attacks on your Cisco Network including the ping of death



Posted by: David Davis
Cisco, network, Security

Over at TrainSignalTraining, they recently published towCisco Security articles that I found to be very helpful if you have any remote interest in preventing networks attacks. The articles are:


May 30 2009   8:31AM GMT

Cisco IOS How-To Tips and Tricks



Posted by: David Davis
Cisco, ios, tips, tricks

I have published over 20 different Cisco IOS tip and trick articles over at the Petri IT Knowledgebase. In these Cisco tips, I cover things like setting up a Cisco switch, VLAN configuration, DDNS, ACLs, and selecting the right router for your CCNA studies.

Of these 20+ Cisco tips, here are 5 of the most popular:

I hope you will check them out!


May 28 2009   12:16AM GMT

Free Network Security Scanner from GFI LanGuard



Posted by: David Davis
network, Security, scanner, free


Like free tools? Who doesn’t! GFI, the makers of the very popular network security scanner, are now offering a free version LANguard!

LANguard performs:

  • Vulnerability scanning
  • Patch Management
  • Network Auditing
  • And More…

Download the FREE GFI LANguard (5 IP Edition) Here!


Mar 28 2009   1:13PM GMT

Video: How to perform DHCP Snooping from Train Signal



Posted by: David Davis
Cisco, ios, dhcp, snooping, CCNA

In this sample of the Train Signal Cisco CCNA training course, Chris Bryant offers a demonstration on how to perform DHCP snooping in the Cisco IOS.


Feb 25 2009   11:06PM GMT

Cisco administration 101: Five interface commands you should know



Posted by: David Davis
Cisco, ios, interface, configuration

Configuring Cisco routers isn’t hard if you don’t know how to use interface commands. Let’s face it, you have to know commands like no shutdown, ip address, description, bandwidth, and access-group.

In my new article, I discuss all of these commands in detail with configuration examples. Read the full article at: Cisco administration 101: Five interface commands you should know


Feb 23 2009   1:53AM GMT

Take advantage of the Cisco License Manager to keep you organized



Posted by: David Davis
Cisco, license, manager, compliance, ios

Software license compliance is critical in IT Departments today. After all, you don’t want your company to get into legal trouble over mismanagement of licenses, do you? To help you out, Cisco has something to make your life easier.

Did you know that Cisco offers a free device inventory, license inventory, and license/feature deployment software application? Registered Cisco users can download this application for free from Cisco.

Read all about it, learn how it can help you, and where you can download the free Cisco License Manager at my article: Take advantage of the Cisco License Manager to keep you organized


Feb 22 2009   5:55AM GMT

Converting from old to new with the PIX to ASA Migration Tool



Posted by: David Davis
Cisco, PIX, ASA, migration, conversion, tool

In my blog post “Sadly, the PIX Firewall Is Discontinued,” written early in 2008, I said how much I had enjoyed working with the Cisco PIX over the years and how disappointed I was that it was announced by Cisco to be “End of Sale” on January 28, 2008.

Now, you can easily migrate your PIX configurations to ASA configuration for your new devices. Find out how to do it, step by step, in my new articleL Converting from old to new with the PIX to ASA Migration Tool


Feb 22 2009   5:42AM GMT

VIDEO: Cisco CCNA Security Firewall & SDM



Posted by: David Davis
Cisco, CCNA, Security, sdm

Learn how to use the Cisco Security Firewall and SDM in this step by step video, recorded by Chris Bryant, CCIE. This is a great way to prepare for your CCNA. Enjoy the video!

(or click on the video to go and watch it wider and in HD)


Feb 15 2009   8:13AM GMT

What’s your firewall of choice? And Cisco launches new ASA model!



Posted by: David Davis
Networking, Security, Cisco

What is your firewall of choice? What firewall do you really use?

Cisco has launched a new addition to their ASA firewall lineup - the new ASA 5580.

However, this new firewall is only for the lucky few that can afford it. You see, the 5580 comes in 3 flavors, the 5580-20, the 5580-20VPN, and the 5580-40. The 5580-20 starts at around $50,000 and the 5580-40 starts around $100,000. So, you see, most of us out there aren’t going to get to have a new 5580 anytime soon (if you have one, let me know because I would like to :) “demo it”).Cisco ASA Firewalls

At my company, we tried a PIX 515 but it just lacked the full “unified threat management (UTM)” approach. In other words, it didn’t have anti-virus & content filtering and, when compared to other alternatives, it just wasn’t easy to use. We ended up settling on a Fortinet 100 because it does anti-virus, content filtering, and the GUI is so simple to use. The content filtering was the real savings. While a PIX could use a 3rd party content filtering service like websense, that type of service was going to cost us like $25K per year. With the Fortinet and their Fortiguard service, the cost is only a few thousand per year.

Recently for testing, I bought a Cisco ASA5510. While it is an improvement over the PIX, without the proper module, it can’t do the “anti-X” and the content filtering is still an extra charge.

-David
Personal Website: HappyRouter.com
Checkout David’s Video Training:
VMware ESX Server Video Training
Cisco CCNA & CCNP Video Training