This is going to be my 2nd Cisco Live, and i’m very excited because i’ve learned a lot over the past 8 years and i’m in a different professional stage at the moment that 8 years ago it was just a dream. I’m a strong believer that these events are important to grow your “networking” … Read more
Black Hat Europe in London this year is not a mirage, it’s real! Wake Up, time for action! Briefings, Training, Arsenal and beer you choose! Register here And if you are a student on the cyber security arena, you can get a free scholarship which allows full access to all Briefings on Wednesday, December 6 … Read more
Automation and orchestration capabilities these days are the key for many Organizations, and this session will show you what can you achieve with the R80.10 API. Specifically, this session covers: Introduction to using the R80.10 APIs using Postman and Ansible Tips on how to add objects and services to adding rules via CLI RESTful API … Read more
Cisco is climbing fast, Fortinet faster, PaloAlto still leading and filling their gaps in portfolio and Check Point released finally the R80 for gateways. I predict 4 Leaders next year, it will be a nice race to watch! Full Report on Report Magic Quadrant for Enterprise Network Firewalls 2017
Working a lot around Response Policy Zone (RPZ) these days, it’s better to start collecting some valuable tools, whitepapers, research, best practises, etc DNS Servers Name Description BIND The most widely used DNS software on the Internet Bundy Integrated authoritative DNS and DHCP server (the continuation of the BIND 10) Dnsmasq A lightweight, easy to … Read more
How can we detect and mitigate a kill chain in encrypted traffic without breaking users privacy and same time with minimal false positives? Cisco Catalyst 9k is the newest platform with this capability which is called Encrypted Traffic Analysis (ETS). Machine Learning & metadata seems to be the right ingredients to make the wheel work. … Read more
Cisco announced a new platform, Catalyst 9k (fixed and modular), a new hit for the Enterprise Architecture. Some of the benefits i’ve captured: Secure segmentation with SD-Access Unmatched 60W POE on every access port DNA Center IoT readiness Cloud readiness IOS-XE UADP 2.0 StackWise Virtual IEEE1588 MACsec256 Encrypted Traffic Analysis (ETA) Licensing mode changed (no … Read more
You can check here the CPX 2017 Presentations, for exclusive access to full slide decks from each presentation, please log into your Check Point CheckMates account.
An interesting read about TLS and DTLS Best practises… https://www.rfc-editor.org/rfc/rfc7525.txt
A misinterpretation from browser perspective which can lead to a phishing attacks, read here https://nakedsecurity.sophos.com/2017/04/19/phishing-with-punycode-when-foreign-letters-spell-english-words Chrome is fine now (v58+) but Firefox not, so stay sharp!