Securing the Local Area Network

Securing the Local Area Network

1. Endpoint Security

   • Antimalware Protection
     • Sourcefire
       • Cisco added Sourcefire's Advanced Malware Protection (AMP) technology to protect endpoints and networks more effectively than traditional host-based malware protection
   • Email and Web Secury
     • IronPort Systems
       • Cisco Email Security Appliance (ESA)
   • Controlling Network Access
     • Cisco Network Admission Control (NAC)
       • is to allow only authorized and compliant systems, whether managed or unmanaged, to access the network. Cisco NAC is also designed to enforce network security policy.

2. Layer 2 Security Considerations

   • Mitingatin VLAN Attacks
     • VLAN Hopping Attacks
     • VLAN Double-Tagging Attack
   • Mitigating ARP attacks
     • ARP Spoofing and ARP Poisoning Attack
   • Mirigating DHCP Attacks
     • DHCP Starvation Attack
       • using port security
   • Mitigating Addres Spoofing Attacks
     • configure the IP Source Guard (IPSG
   • SPANNING Tree Protocol
     • attack by spoofing the root bridge and changing the topology of a network
       • PortFast,BPDU Guard,Root Guard,Loop Guard