Securing the Local Area Network

Securing the Local Area Network

1. Endpoint Security

   • Traditional Endpoint Security
     • Antivirus
     • IPS
     • Firewall
   • Modern Endpoint Security Solutions
     • Antimalware Protection (AMP)
       • File Reputation
       • File Sandboxing
       • File Retrospection
       • formats
         • AMP for Endpoints
         • AMP for Networks
         • AMP for Content Security
     • Email Security Appliance (ESA)
       • Global threat intelligence
       • Advanced malware protection
       • Outbound message control
       • Spam blocking
     • Web Security Appliances (WSA)
       • Talos Security Intelligence
       • Cisco Web Usage Controls
       • Advanced Malware Protection (AMP)
       • Data Loss Prevention (DLP)
     • Network Admission Control (NAC)
       • NAC framework
       • Cisco NAC appliance
       • Cisco NAC Agent (NAA)
       • Cisco NAC Manager (NAM)
       • Cisco NAC Server (NAS)

2. Layer 2 Security Considerations

   • CAM Table Attacks
     • Enabling Port Security Options
       • Dynamically learned
       • Manually configured
   • Mitigating VLAN Attacks
     • Hopping Attacks
   • Mitigating DHCP Attacks
     • Wrong default gateway
     • Wrong DNS server
     • Wrong IP address
   • Mitigating ARP Attacks
     • Destination MAC
     • Source MAC
   • Mitigating Address Spoofing Attacks
     • Source IP address filter
     • Source IP and MAC address filter
   • Mitigating STP Attacks
     • PortFast
     • BPDU Guard
     • Root Guard
     • Loop Guard