SECURING THE LOCAL AREA NETWORK

SECURING THE LOCAL AREA NETWORK

1. Endpoint protecion

   • Host-based Protection
     • Traditional
       • Antivirus/Antimalware
       • SPAM Filtering
       • URL Filtering
       • Blacklisting
       • Data Lost Prevention (DLP)
     • Modern
       • Antimalware Protection (AMP)
       • Email Security Appliance (ESA)
       • Web Security Appliances (WSA)
       • Network Admission Control (NAC)
   • Host-based Firewall
   • Host-based IPS

2. Advanced Malware Protection (AMP)

   • Helps
     • Before
       • Discover Enforce Harden
     • During
       • Detect Block Defend
     • After
       • Scope Contain Remediate
   • Formats
     • AMP for Endopoints
     • AMP for Networks
     • AMP for Content Security
   • Analysis
     • File Reputation
     • File Sandboxing
     • File Retrospection

3. Email and Web Security

   • Email Security Appliance (ESA)
     • Global threat intelligence
     • Spam blocking
     • Advanced malware protection
     • Outbound message control
   • Web Security Appliance (WSA)
     • Talos Security Intelligence
     • Cisco Web Usage Controls
     • Advanced Malware Protection (AMP)
     • Data Loss Prevention (DLP)

4. Network Admission Control (NAC)

   • NAC framework
   • Cisco NAC appliance
     • Cisco NAC Manager (NAM)
     • Cisco NAC Server (NAS)
     • Cisco NAC Agent (NAA)
     • Cisco NAC guest server
     • Cisco NAC profiler

5. Layer 2

   • Attacks
     • VLAN
       • Hopping
       • Double-Tagging
     • DHCP
       • Starvation
       • Spoofing
     • ARP
       • Spoofing
       • Poisoning
     • Address Spoofing
     • STP
       • Manipulation
     • CAM Table
       • macof
       • Yersinia
   • Mitigation
     • Port Security
     • DHCP Snooping
     • Dynamic ARP Inspection (DAI)
     • IP Source Guard (IPSG)

Bilder und Dateien der Mindmap