Securing the LAN

Securing the LAN

1. Endpoint Security

   • Devices
     • Laptops
     • Desktops
     • Servers
     • IP phones
   • Protection
     • Traditional
       • Antimalware
       • Host-based IPS
       • Host-based Firewall
     • Borderless
       • SPAM filtering
       • URL filtering
       • Data Loss Prevention
       • Blacklisting
     • Modern borderless
       • Advanced Malware Protection
       • Email Security Appliances
       • Web Security Appliances
       • Network Admission Control
   • HW n' SW encryption
   • Advanced Malware Protection
     • Helps
       • Before
         • Discover
       • During
         • Defend
       • After
         • Contain
     • Enables protection
       • Fiel reputation
       • File Sandboxing
       • File retrospection
     • Threat-detect network
   • Email n' web security
     • Cisco ESA
       • Benfits
         • Global threats intelligence
         • Spam blocking
         • AMP
         • Outbound message control
     • Cisco WSA
       • Full control user's connection
       • Benefits
         • Talos Security Intelligence
         • Cisco Web Usage Control
         • AMP
         • Data Loss Prevention
       • Cisco CWS
         • Uses Cisco's cloud proxies
         • Granular web policies
         • Easy to integrate
         • Real-time update
   • Controlling network access
     • Categories
       • NAC framework
       • Cisco NAC appliance
     • Components
       • NAC Manager
       • NAC Server
       • NAC Agent
       • NAC Guest server

2. Layer 2 security

   • Mitiging threats
     • CAM table
       • Port security
         • Configure MAC address
         • Maximum MAC addresses
         • Violation
           • Protect
           • Restrict
           • Shutdown
         • Aging
           • Time
           • Type
         • MAC address notification
       • Attacks
         • Bombarding the switch
         • Flooding all ports
         • Affects only the local VLAN
     • VLANs
       • Attacks
         • VLAN hopping
         • Double tagging
       • Secure trunk lines
         • No DTP
         • Manually trunk link
         • Change native VLAN
         • Disable unused ports
       • PVLAN Edge
     • DHCP
       • Attacks
         • DHCP spoofing
           • Rogue DCHP server
             • Wrong default gateway
             • Wrong DNS
             • Wrong IP address
         • DHCP starvation
       • DHCP snooping
         • Checks Client Hw Address
         • Mitigates spoofing
         • Againts DHCP starvation
         • Trusted ports
           • Only for DHCP servers
     • ARP
       • Attacks
         • Spoofing
         • Poisoning
           • Man-in-the-middle
           • Own MAC address
       • Dynamic ARP Inspection
         • Not relaying ARP Replies
         • Requires DHCP snooping
     • Address spoofing
       • Attacks
         • MAC address hijack
         • IP address hijack
       • IP Source Guard
         • Requires DHCP snooping
         • Source IP filter
         • Source IP n' MAC filter
     • STP attacks
       • Attacks
         • STP manipulation
       • PortFast
       • BPDU Guard
       • Root Guard
       • Loop Guard

Bilder und Dateien der Mindmap