Juniper boosts end-point security
503967
Company adds new features to its SSL VPN gateway to make sure devices connecting to a network are clean.
710524
In this new post on the Northclick blog, Soenke talks about the stream wrappers included in PHP and some of the magic that can happen when they're applied correctly. In this case, it's an application of the ssh2 library (by Sara Golemon).   The new system must be very stable with a strict error checking and has to support several ways of file transports (FTP, SCP/SFTP). SCP is faster then FTP and secure by nature. It's going to be the standard way for deployment.   After finding and loading the extension, things flowed along swimmingly - the code shows a simple transfer method of transfer over a secure ftp connection, complete with a few performance stats at the end.
508385
I need to expand my idea of a secure computing ecosystem into the real world. Let me explain.
346050
But don't just blame Vista New technology such as Windows Vista and IP v6 may solve some security problems but will bring new security threats as well, according to a senior Cisco security expert.â¦
724859
Symantec moves beyond storage security, includes more of its technology in Juniper networking devices.
149266
By Vaisman, Fima  Fiber cabling is best for IP security networks, but connectivity may not always be possible. Digital video surveillance is becoming a distributed IP network application.
57731
(InfoWorld) - Cisco SystemsÂ hasÂ expandedÂ aÂ range of security mechanisms for wired LANsÂ to theÂ wireless side of enterprise networks. The dominant LAN vendorÂ announceedÂ on Wednesday itÂ had upgraded its software and launched a set of guidelines for integrating wired and wireless security, called the Cisco Secure Wireless Solution. The new capabilities are available to any customer with current Cisco software, said Chris Kozup, manager of mobility solutions at Cisco. Customers can use the guidelines themselves to build a security architecture or enlist the help of Cisco's services organization or third parties. Enterprises are already able to bring wireless devices into Cisco's security system, which is built around ensuring any client is authorized and free of threats before it can hook up to the network. But bringing the same set of tools into the wireless domain can make that process easier, Kozup said. For example, if an enterprise wanted to secure wireless clients using Cisco's Network Access Control (NAC) appliance, the end user connecting via wireless would have to manually log into the NAC. Now that process can be transparent to the user, just as it is on the wired network, he said. In addition to the NAC, the architecture includes Cisco's ASA firewall, Cisco Security Agent (CSA), Cisco IPS (Intrusion Prevention System) software, Cisco Secure ACS (Access Control Server) and Cisco Secure Services Client. These long-time features of Cisco's wired security are being extended to wireless LANs as the company's latest step toward unifying wired and wireless into one network, Kozup said. The system makes the wired and wireless networks work together to bolster security. For example, if a notebook PC is connected to the LAN via a wired port, its wireless radio will be turned off automatically to prevent an attacker from using the wireless connection as a path on to the wired LAN. In addition, a Cisco wireless LAN controller, the mechanism in an appliance, router or switch that controls wireless infrastructure, can disconnect a wireless LAN client that poses a threat. The security built into all Wi-Fi products has improved in recent years and many vendors sell tools to secure wireless LANs, such as Aruba Wireless Networks Inc.'s technology that uses encrypted tunnels. Cisco's new approach may not be significantly more secure than those options, but it can simplify life for IT administrators, said Farpoint Group analyst Craig Mathias. For one thing, it's easier if security for both parts of the network uses a single directory of users, he said. Other approaches that are less expensive and more scalable can work just as well, according to Burton Group analyst Dave Passmore. "This is Cisco assuming the network perimeter needs to be protected right at the every edge, rather than a more centralized approach," Passmore said. There are no significant threats to an enterprise LAN that can't be handled from within the wired part of the network, he said.
522669
A new appliance and new software announced today by Cisco are designed to help business users improve application performance over networks.
740707
The 3SP SSL-Explorer is the world's first open-source SSL-based VPN solution of its kind. Released under the GPL, this entry-level VPN solution provides users with a means of securely managing their IT infrastructure from outside the network perimeter, armed with just a standard web browser. This second release now provides full Active Directory authentication for use within Microsoft Windows Server environments. The release also sees a change from using the MySQL database to an internal HSQLDB database and this means that post-installation database configuration is no longer required.   Download the SSL-Explorer v0.1.1 here: http://sourceforge.net/project/showfiles.php?group_id=116065  Find out more information on SSL-Explorer at: http://3sp.com/products/enterprise/ssl-explorer/ssl-explorer.jsp
478034
Revamped Endpoint Protection program enters public beta during vendor conference this week.
430680
(Source: RSA Security) Endpoint Data Protection allows companies to protect sensitive information and data at rest or in motion inside or outside of the organization from loss or misuse. Implementation of an endpoint data protection solution allows companies to maintain competitive advantage and ensures that their most sensitive data and intellectual property is protected. This report identifies successful strategies for mapping out risks associated with endpoints and end users as well as recommended actions and steps for success.
449182
Multiple vulnerabilities have been reported in version five of the widely-used Kerberos authentication protocol. The most serious could be exploited by crackers to gain root control to authentication servers.
371946
TechWeb - New Secure Connector feature gives remote users secure network-level access, including access to business applications, data, and network services.
638955
Juniper Networks claims to have added an important piece of technology for delivering on its integrated network security strategy as part of the launch of its high-speed EX-Series of enterprise switches.With onboard capabilities aimed at extending security functions, including applications usage visibility and NAC (network access control), among others, Juniper executives said that the devices -- the company's first set of high-performance switches targeted directly at enterprises, versus its existing systems aimed at telecommunications providers -- allow the networking gear provider to address demands being made by large customers.As enterprises replace aging networks with new high-performance equipment, security capabilities are high on the lists of core features that buyers are requesting, said Mark Bauhaus, executive vice president and general manager of the Service Layer Technology Business Group at Juniper.?While the infrastructure-defense tools represent only one aspect of the larger push to make networks faster and more reliable to support business operations, they have become an increasingly central element of customers' long-term goals, the executive said.Increased integration capabilities established between the new switches and Juniper's existing access control, firewall, intrusion prevention and UTM (unified threat management) products is the most significant aspect of the devices' added security functions, according to Bauhaus. "This truly builds on our strength to do end-to-end security integration," he said. "We're not looking to become a pure-play security vendor, but these are features that customers are looking for in building high-performance networking infrastructure."In addition to allowing for more unified, integrated security throughout their networking architecture, Bauhaus said that customers are looking to onboard security functions as a way to save money and reduce complexity by replacing other devices, including inline NAC appliances. "Customers clearly want to collapse the sheer number of special-use security devices," he said. "And with the integration to our Unified Access Control technology, we think that this launch represents another important stepping stone by providing customers with the ability to utilize unified access with additional support from their infrastructure."While rival Cisco Systems has been positioning itself as much as a provider of security tools as a networking specialist for the last several years, at least in terms of its marketing image, Bauhaus said that Juniper is more interested in being viewed as a leading provider of high-speed gear that offers embedded security and standards-based ties to network-defense tools offered by other vendors. All of the security functionality being integrated into the EX-Series switches and Juniper's networking gear is focused primarily on fostering high-performance infrastructure for customers that is also safe and reliable, he said.Building its products around open industry standards, in particular the security tools, is crucial to allowing third party developers to take advantage of the features, Juniper executives repeatedly stressed at Juniper's Global Enterprise 2008 event held in New York on Tuesday.Officials from IBM, Microsoft, and Oracle took the stage to endorse the networking company's ability to foster stronger ties with their own products.Businesses applaud Juniper's move Calvin Choe, director of technical business development for the Enterprise Networking Group at Microsoft, highlighted the importance of Juniper's work to allow for tight integration between its infrastructure technologies and Microsoft's NAP (Network Access Protection) iteration of NAC, which will arrive next month with the introduction of the software giant's Windows Server 2008 software. NAP is also supported in Microsoft's Windows Vista operating system. "Used with NAP, this will allow network administrators to create policies around identity and assess users' state of compliance to enforce their own set of criteria," said Choe. "The support of standards is important because we wanted to make sure that customers had their choice of switching vendors."In addition to partners, Juniper also hosted several customers on stage, all of whom mentioned the EX-Series' security features as one of the core strengths of the new product line. "Security is one of the most important things to us, and we wanted an extra layer of access control to deliver defense-in-depth," said Frank Ziegler vice president of communications for the Philadelphia Stock Exchange.Some industry watchers said that the new EX-Series switches add a crucial piece that had been missing from Juniper's product portfolio from an integrated security standpoint. The new hardware should help the company differentiate from its rivals, including Cisco -- which has aggressively added to its own security holdings over the last several years, said David Willis, a communications market analyst for Gartner. "I think one of the more interesting elements of the launch is Juniper's work to integrate with third parties like Oracle; Cisco has announced similar intentions to do so, but it may take them years to get products ready -- and the size of Cisco's installed base may actually represent a problem in terms of getting products to market," said Willis. "With Cisco, it's also not unusual to run into customers who may have as many as 50 different versions of its OS on its devices, and from that standpoint, sometimes nothing beats a fresh start."The analyst that just said how much of an advantage the new products could represent on the enterprise market will likely depend on how seriously customers view Juniper's efforts to truly embed security throughout its networking gear versus merely adding individual features.Other experts said that the addition of the switches' security features could threaten providers of standalone devices, such as inline NAC appliance vendors like ConSentry and Autonomic Networks."Clearly the fact that Juniper hasn't had a switching product in this space has limited the reach of UAC, but with customers that have existing investments in Juniper firewalls and VPNs, this could be seen as good news," said Paul Roberts, analyst with The 451 Group. "There's always the question if anyone is really going to do a rip and replace to get NAC functionality, but for companies doing upgrades and looking for the features, this could be a viable option," he said. "In some ways, the new switches may give Juniper the ability to leapfrog Cisco, Extreme Networks, and other rivals with some of these features for access control and applications visibility."
336721
Network equipment maker Juniper Networks ( juniper.net ) announced on Monday that ARSYS ( arsys.es ), a Spain-based Web hosting company, is significantly upgrading its network infrastructure with routing and ...
531067
Juniper Networks has been building up its presence in Asia for some time now, primarily concentrating on modernizing its networking business with the goal of creating a competitive advantage for its customers with its networking and security solutions.
695305
Cisco Systems issued a security advisory warning that some networks using its routers may be vulnerable to denial-of-service attacks. Devices running Internetwork Operating System and enabled for the open shortest path first (OSPF) ...