Cisco Security
Cisco Hires New Security SVP from VMWare and formerly RSA Security
Cisco just announced it will be hiring Chris Young to head up its security group. This is the first time Cisco will have an SVP leading its security business. Chris will be reporting directly to Mrs. Warrior (CTO). Read more
Cisco offers Managed Security Services
Not many folks know that Cisco has been in the managed security services business for a few years now. It is certainly not something that Cisco markets aggressively that’s for sure. The service is called Remote Management Services (RMS) for Security. The RMS-sec service offers both security event monitoring and security device management. They can also do a co-managed management of your security infrastructure. Read more
Cisco security Live twitter chat Tuesday 1-10
I will be hosting a live twitter chat Tuesday. The topic is all things cisco security as well as all things PCI compliance.
Please come join me.
Here are the details:
January 11 9am pst
twitter hashtag #cl11
See you there.
Cisco Security Intelligence Operations Explained
This post is a followup post from my colleague Garett Redelings, Enjoy!
---
Last month I had written about Cisco's IronPort Application Visibility Controls. The information here on the Cisco SIO is a follow up based on readers comments to the previous article. You can read that article by clicking here.
What is the Cisco Security Intelligence Operations?
Read more
A look back at Cisco Security in 2010
Cisco's Security business had a good year in 2010. Not a great year, but a good one. Cisco has always struggled to be thought of as a best of breed security player and 2010 was no different. But what is different about 2010 is Cisco made some of the biggest mindshare gains among skeptics than it has in a very long time. Lets take a look back at Cisco Security in 2010. Read more
Hacker tool Metasploit now targeting Cisco network gear
Rapid 7 is now including exploits of Cisco gear in Metasploit. The tool can now automatically use authentication holes on Cisco devices that allow attackers to gain access to the network. As new vulnerabilities on Cisco become known, they too will be included in the penetration testing tool. Read more
Cisco Releases AnyConnect SSLVPN client for iPad
The Cisco AnyConnect Secure Mobility SSLVPN iPad client will soon release to the Apple App store. Before the iPad specific version releases though you can use the iPhone version of AnyConnect on any 4.2+ version iPad. The AnyConnect client allows your iPad users to VPN back to a Cisco ASA headend device located at your office or corporation. The client supports both an auto launch on-demand mode and a manual switch it on when needed mode. The on-demand mode will bring up and connect the client in the background whenever the iPad needs to send info to a protected network. Read more
Cisco's 3QCY10 Global Threat Report Results
Cisco recently released its third quarter 2010 Global Threat Report to the public. This report highlights the trends of Malware encounters, industry vertical risks breakdown, Stuxnet worm, Rustock Botnet, SQL inject attacks, Global Spam trends and the "Here you have" email worm. Here are the highlights from the report.
Malware Encounter Rates: Read more
-Enterprise businesses experienced an average of 133 Web malware encounters per month in 3Q10. (source Cisco Scansafe)
-Approximately 10% of Web malware was encountered via search engine traffic and/or services.
Cisco Aims to Change the Game with a IronPort Hosted Email Security Offering
Cisco jumped into the cloud based hosted email security business with little fanfare about a year ago. Since then it has quietly built out its hosted email security offering to the point where it is now a major player in this space. Sometimes it is better to be late to the game I suppose, it lets you learn from others mistakes. It seems that Cisco IronPort may have done exactly that but I'll let you be the judge. For those that aren't familiar with hosted email security here is a basic idea. Read more
Cisco Announces New ASA 5585X High Speed Firewall and IPS Appliance
Cisco announced the orderability of its new ASA hardware line called the ASA 5585X. It is made up of a single 5585X 2-slot chassis that has 4 different Security Service Processor (SSP) options. The top one, the SSP-60, is a screamer at over 35Gbps of large packet stateful firewall throughput and more importantly up to 350,000 connections per second setup rate. This type of setup rate is unprecedented and when you consider the ASA 5585X is only a 2RU platform just think of the performance per rack this little rocket can deliver. Read more
Apple Posts Cisco's AnyConnect iPhone SSLVPN Client to the App Store
Apple posted the Cisco Anyconnect client to the App Store late last week. Now users of the Cisco ASA VPN platform can take advantage of the new features being offered in the iPhone version of the Cisco AnyConnect client. If you are already using the Cisco IPSEC client that is built into iOS then I have some good news for you. The transition to the AnyConnect client is incredibly easy. I'll touch on how you do that in a minute, but first here are the features you'll get in the AnyConnect iPhone client: Read more
Hidden Secrets in the Cisco ASA
Think you know ASA pretty well? Have you worked with it for years and honed your ASA skills to a razor fine edge? Think you know all of the hidden secrets the ASA has to offer? I'll bet you answered yes to the first two but might have been reluctant to shout out a definitive yes to the last one. Why, because the ASA is a complex system that includes hundreds and hundreds of features making it near impossible to know all the tricks. In this blog I'll talk about a few of the lesser known features and commands that most ASA administrators find useful. Read more
How to guide: Cisco ASA SSLVPN using Certificates for 2-factor Auth
I have seen a big shift over the past year towards using digital certificates for 2-factor authentication. Sure tokens are still the market share leader for this function but certificates are gaining due to their inexpensive cost and advancements in ease of management and deployment. The Cisco ASA has supported certificates for a long time now, but it is only this past year that I see mainstream companies starting to take advantage of the feature in mass. This tech tip will run you through how to quickly setup the ASA for two-factor authentication using certificates. Read more
Cisco Security Manager Gets a Major Update
Recently, Cisco introduced its 4.0 version of Cisco Security Manager (CSM). CSM is an enterprise class device management solution for managing Cisco security devices like ASA, IPS, IOS devices and VPN gateways. CSM is full of features designed to make life easier for administrators that work with lots of Cisco security devices and want a central management and troubleshooting solution. CSM offers policy-based management so you can create configuration policies once and then share them between multiple devices. Read more
Cisco among Winners of National Cybersecurity Awareness Challenge
Secretary Napolitano announced the winners of DHS’ National Cybersecurity Awareness Challenge July 14th. This contest called on companies to develop creative ways to enhance awareness of the importance of cybersecurity with the goal of safeguarding America’s computer systems and networks from attacks. The contest, kicked off last march, received over 80 proposals from both public and private entities. Seven were selected as winners, with Cisco being one of those. Read more
Cisco warns attendees that the Cisco Live database was hacked
I, along with thousands of others, received an interesting e-mail from Cisco this morning warning me that details about me seem to have wound up in the hands of unauthorized people. Cisco Subnet editor, Julie Bort, also received an e-mail tip from a reader about the situation. You know I have many thoughts and opinions to share, but before I get into that, here's the e-mail in full. Read more
Cisco releases new AnyConnect SSLVPN Client
Cisco recently released version 2.5 of its AnyConnect SSLVPN thick client. This release brings with it two new innovative features called Always-on VPN and AnyConnect Secure Mobility. Several other feature additions made it into this release as well not least of which is optimal gateway selection. AnyConnect 2.5 is a maintenance release so it includes bug fixes and other reliability improvements. Read more
Cisco finally releases 64bit IPSEC client
The Long awaited release of a Cisco IPSEC client for 64bit operating systems has finally come to pass. The new Cisco VPN client version 5.0.07 is ready for download. The new client supports Windows 7 x64 and Vista x64. Unfortunately, no support for XP x64 machines. It is strongly recommended that if you use Vista that you upgrade to SP2 or later. Check out the release notes here: http://www.cisco.com/en/US/docs/security/vpn_client/cisco_vpn_client/vpn...
Top 5 Security No Brainers for Businesses
Occasionally folks forget about covering the fundamentals of security and start off down a rabbit hole following some shiny new technology that turns out to be just a rat hole. With today's limited security budgets you need to be sure that you've adequately covered your highest risk areas before moving on to other things. The high-risk areas are, of course, not the same for everyone and will change on you fairly frequently. The bad guys are always mixing it up; the attacks we see prevalent today are not those that we saw just a few years ago. Read more
Is Cisco Truly Committed to Security? Prove it!
Recently, a security analyst blogged about Cisco's security efforts and questioned Cisco's commitment to the market. As you know, I am not only a Cisco Press author, but I also work as a security consulting systems engineer for the company. From my point of view, Cisco is most definitely not taking its eye off the ball in the security market. Read more
-
Network World, Inc
The Connected Enterprise