Securing the Local Area Network

Securing the Local Area Network

1. Endpoint Securty

   • Antimalware Protection (AMP)
     • File Reputation
     • File Sandboxing
     • File Retrospection
   • Email Security Appliance (ESA)
     • Global threat intelligence
     • Spam blocking
     • Advanced malware protection
     • Outbound message control
   • Web Security Appliances (WSA)
     • Talos Security Intelligence
     • Cisco Web Usage Controls
     • Advanced Malware Protection (AMP)
     • Data Loss Prevention (DLP)
   • Network Admission Control (NAC)
     • can be used to
       • Recognize users, their devices, and their roles in the network
       • Evaluate whether machines are compliant with security policies
       • Enforce security policies by blocking, isolating, and repairing noncompliant machines
       • Provide easy and secure guest access
       • Simplify non-authenticating device access
       • Audit and report who is on the network
     • Components
       • Cisco NAC Manager (NAM)
       • Cisco NAC Server (NAS)
       • Cisco NAC Agent (NAA)

2. Layer 2 Security Threats

   • CAM table
   • VLAN
   • DHCP
   • ARP
   • Address Spoofing
   • STP