How to manage your multivendor firewalls like a pro
230823
Third-party software helps companies comply with regulatory requirements and industry standards while managing and consolidating rules so firewalls run more efficiently, customers and experts say.
8774
Blog: ZoneAlarm 7.1 offers true two-way firewall protection for Windows Vista users.
727065
SonicWallÂ Tuesday announced the release of a low-cost firewall device aimed at small businesses and designed to allow remote users to communicate via a VPN (Virtual Private Network).
682524
The data center fabric will at a minimum bring together network, server, and storage administrators. Are you ready? Can you handle it?
32966
Dave Dash has posted a configuration that he had shared with him for getting nginx and the symfony framework to work happily together.   I almost gave up on nginx and was going to settle on lighttpd or Apache, but I decided to check the symfony list and in minutes Kiril Angov (Kupokomapa) answered with a working nginx configuration. This is why I like the symfony community.   He includes the config in an easy to use/c&p kind of format so you can drop it into your install and get it up and running quick.
198749
Ponders options as ContentGuard gains third owner
6384
We have a few domains hosted on Network Solutions.  For one reason or another we were in a hurry and just used NetSol as our registrar.  BIG mistake!  They are one *pathetic* organization!  They are a DNS company.  That's what they DO!  Their DNS admin only allows 10 IPs. Of course they don't tell you this when you signup.  You only find out that the UI doesn't allow for additional IPs until try to add them.  To add insult to injury when you try to move AWAY from NetSol by changing your primary and secondary they drop your IP configuration immediately.  You're just out of luck if there are clients which have cached your primary and secondary DNS servers.  Now of course the solution would be  ...
720906
In preparation to a full migration to IPv6, Scott Hogg recommends using dual stack strategies when possible and -- if necessary -- using tunnels to carry one protocol inside the other.
385943
Security specialist Symantec has admitted to a number of vulnerabilities in its firewall and gateway products. The weaknesses make them liable to denial of service attacks and other compromises.
504765
Symantec has announced that several of its firewalls and gateways are vulnerable to denial of service attacks, and has released firmware to fix them.
704290
Telecom managers will have their hands full securing a VoIP network. Experts say layered security is the best way to protect it.
703235
The upcoming Outpost Firewall Pro 2.5 operates seamlessly with XP SP2 to improve security and privacy.
137514
(InfoWorld) - Cisco Systems will begin offering IronPort's security filtering tools to its firewall customers after the networking giant's acquisition of the company closes on June 25. On tour to evangelize the benefits of the buyout to media, analysts and customers, top Cisco security executives and IronPort Chief Executive Scott Weiss said that the combined company will move quickly to create a software upgrade package that will provide content filtering functionality and behavioral reputation intelligence into the networking market leader's 2.5 million existing firewall systems. Once the deal closes on Monday, Weiss will assume a role as a senior security marketing executive with Cisco, he said. The for-pay security add-on derived from IronPort, which has maintained a San Bruno, Calif. headquarters, will allow customers to employ what the company has dubbed as "wide traffic inspection" at the firewall, arming users with more comprehensive network traffic analysis tools, the executives said. The content filtering package represents only the first of many opportunities borne of San Jose, Calif.-based Cisco's $830 million buyout of the firm, said Weiss and Mick Scully, vice president of product management at Cisco's Security Technology Group.Â  "The e-mail and Web filtering capabilities we bring into Cisco's self defending network vision will allow customers to do more granular filtering of traffic traveling across ports that have traditionally been left open by firewalls," Weiss said. "Today, most threats are coming into the network as links embedded in e-mail messages; putting this type of intelligence at the firewall will increase its efficacy in stopping those attacks." Through blending the malware-distribution data gathered by IronPort's SenderBase IP address reputation service into Cisco's Adaptive Security Appliance (ASA) firewalls, the devices will become more dynamic security filtering gateways that can detect a far greater number of potential attacks before they enter the network, the companies claim. "As Cisco takes what it has been doing at the network layer and adds content awareness, customers will be provided with a whole new set of traffic monitoring abilities," said Scully. "This is a new business model for us, but we believe we can take advantage of the fact that content filtering has traditionally been a highly-fragmented market." Scully estimates that the firewall market currently represents a roughly $5 billion annual sales opportunity. By integrating content filtering, which Cisco projects as a $2 billion per-year market that is growing at 30 percent per year, the executive said that the massive networking and security firm expects its products to serve a $10 billion per-annum segment sometime around 2011. For its part, Weiss said that IronPort is expecting to report growth of 70 percent for its current fiscal year, pushing its revenues over $200 million. After moving to integrate the filtering specialists' tools into its firewall business, Scully said that Cisco would begin adding IronPort's technologies into its Integrated Services Router (ISR) products. "We'll be integrating IronPort's content and e-mail filtering technologies into our switching and routing products over the next several years," said the colorful Cisco security executive. "This is a strategy that reaches beyond the current wave of Web 2.0 technologies and services oriented architecture technologies into the next decade and beyond as customers demand more integrated security features." Weiss said that another immediate benefit of the merger will be an opportunity for Cisco to expand its abilities to provide data leakage prevention (DLP) protection at the network gateway. "We'll be looking to leverage the footprint of firewall and switches to better inform customers about many different aspects of security," he said. "Anything we can add to what Cisco is already doing has a network effect, and there will be a lot of opportunities for us to help companies monitor for malware and even look into issues such as data leakage prevention." At least one industry analyst said that the IronPort acquisition dovetails nicely with emerging customer demands to look at patterns in IP traffic to eliminate malware attacks such as botnet programs -- without having a negative impact on their overall network performance. "When you look at reputation services, if you know who the people are who are sending out spam or malware, there's a big opportunity to filter-out a lot of unwanted content at the gateway," said Andrew Jaquith, analyst with Boston-based research firm Yankee Group. "To do that you must have visibility into the actual flow of data, and that's what Cisco and IronPort should be able to provide." Selling additional features and services to existing customers is a sensible place for the two companies to begin their joint efforts, but their new products will need to prove their efficacy at stopping threats such as botnets which remain problematic for many large enterprises today, to gain wide acceptance quickly, the analyst said. "If you know that certain IP ranges are harboring botnets, or see something within the company network trying to communicate with those addresses, you have a pretty good clue that you've got a problem," he said. "That's one of the best potential uses for tying-in visibility into external reputations and correlating that with things going on inside the network." Jaquith believes that IronPort's technology will find its way into many of Cisco's routing and switching products over the next several years, and he cited the ability to leverage reputation-oriented information about what types of Web sites endpoint devices have visited in Cisco's network access control (NAC) technologies as another potential benefit of the merger. "Cisco really wants to be thought of as a security player, and for them to do that, it means they needed to move up the stack a couple of layers and start looking at e-mail and layer seven type-applications, they really needed to play in that space," the analyst said. "It's a mature market, and Cisco picked a strong company to help plant its security flag a little deeper."
489254
(Source: Fluke Networks)  This white paper describes best practices to ensure SNMPv3 migration improves security and makes ongoing monitoring easier and more accurate.
697902
This article discusses how to take SSH Identity/Pubkey trust relationships to the next level, by using ssh-agent as a keymaster to manage a user's authentication needs automatically.
566375
SmoothWall is a best-of-breed Internet firewall/router, designed to run on commodity hardware, and to give an easy-to-use administration interface to those using it. Built using open source and Free software, it's distributed under the GNU Public License.   SmoothWall is very proud to announce the long-awaited final release of the worlds favorite free network firewall - SmoothWall Express 3.0 (Codename Polar).  For more information please consult:  http://www.smoothwall.org
629286
(Source: ProCurve) More networks are being attacked and threatened, in more devious and creative ways, than ever before. Incidents range from viruses and worms to Trojan horses and internal sabotage.  ProCurve Network Immunity Manager is a cost-effective software solution for managing internal network threats. Network Immunity Manager brings security and the network together by leveraging internal attack detection in conjunction with external network and security information to monitor the network for internal threats. Download this white paper to learn more.