Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 35 guests online
 
Advertisement

You are here: Home arrow Ethical Hacking Discussions and Related Certificationsarrow Hardwarearrow Cisco Security
EH-Net
May 19, 2013, 05:33:04 PM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
   Home   Help Calendar Login Register  
Pages: 1 [2]   Go Down
  Print  
Author Topic: Cisco Security  (Read 20954 times)
0 Members and 1 Guest are viewing this topic.
shednik
Jr. Member
**
Offline Offline

Posts: 75


View Profile
« Reply #15 on: January 22, 2009, 03:26:17 PM »

Careful don, giving dynamik the go ahead to feel at home could result in too many posts. It takes a special guy to rack up that many posts in less than 2 years!!  We can't prove it but any down time over there is suspect to him overloading the server  Wink
Logged

CCNA, MCP, A+, N+

WIP: Masters of Infosec, CEH, & Mastering C
virtronic
Newbie
*
Offline Offline

Posts: 6



View Profile WWW
« Reply #16 on: January 28, 2009, 08:51:37 PM »


This IronPort sounds interesting.  I'm not a network hardware guy but I heard of a Cisco device used to mirror some network traffic thru a VPN to another IP addr where you have a virtual netwk of honeypots to collect and analyze any nasty stuff.
Anybody know what this device might be?
Logged
slimjim100
EH-Net Columnist
Sr. Member
*****
Offline Offline

Posts: 385



View Profile WWW
« Reply #17 on: January 29, 2009, 09:45:50 AM »

virtronic  what you are talking about is called DPI and most vendors have some kind of DPI out there. You can do this your self just using a Ethernet proble or a fiber spliter to get the mirrored traffic off of the line with out using a router or active network device. A company called netoptics makes many kinds of optical spliters and once you get the mirror feed over fiber (or ethernet) you can just used any sniffer or honeypot solution. If you need the mirror remote just plug the feed into a VLAN on a local switch and transport it where you need.

Brian
Logged

CISSP, CCSE, CCNA, CCAI, Network+, Security+, JNCIA, & MCP
virtronic
Newbie
*
Offline Offline

Posts: 6



View Profile WWW
« Reply #18 on: January 29, 2009, 04:56:32 PM »

Brian,

Thanks much! 


Jeez I love this place.
Logged
don
Editor-In-Chief
Administrator
Hero Member
*****
Offline Offline

Posts: 4165


Editor-In-Chief


View Profile WWW
« Reply #19 on: January 29, 2009, 05:01:00 PM »

 Grin Grin Grin Grin

Don
Logged

CISSP, MCSE, CSTA, Security+ SME
COm_BOY
Full Member
***
Offline Offline

Posts: 129


LivinG DeaD


View Profile
« Reply #20 on: February 03, 2009, 10:19:58 AM »

slimjim100,
are you talking about SPAN ? The "Cisco Catalyst Switched Port Analyzer" in which we can configure a port or several ports to send a copy of that data to specific port and that can be monitored using softwares like Wireshark or other network monitoring software ?

Correct me if I am getting it wrong .
Logged

It has become appallingly obvious that our technology has exceeded our humanity.
charlottebandit
Newbie
*
Offline Offline

Posts: 49


View Profile
« Reply #21 on: February 25, 2009, 08:46:18 AM »

Cisco just had ACS 5.0 come out which is a complete overhaul for AAA services.  What used to look like Windows 3.1 now looks sheek and slick.  Much more functionality too. 

Also waiting to get my hands on their new Spam & Virus Blocker product which was designed by Ironport for ALL Cisco partners.  It's supposed to have a 99% accuracy catch rate and -1% false positive rate which is shocking!  Hopefully we'll get one within a month to play with before selling.  Blows Barracuda away!

Logged

MS, CCSP, CCNP, CCDP, CEH, CHFI, CPTS
Pages: 1 [2]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.073 seconds with 23 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Advertisement

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.