LAN Security - creado desde un Mapa Mental

Página 1

Endpoint Security

Access Control

Layer 2 Secutity Threats

MAC Address Table Attack

LAN Attacks

Network Attacks

Network Security Devices

Endpoint Protection

Cisco Email Security Appliance

Cisco Web Security Appliance

Distributed Denial of Service (DDoS)

Data Breach

Malware

VPN-Enabled Router

NGFW

NAC

Authentication with a Local Password

AAA Components

Authentication

Authorization

Accouting

802.1X

Client (Supplicant)

Switch (Authenticator)

Authentication server

Switch Attacks Categories

Switch Attack Mitigation Techniques

MAC Table

VLAN

DHCP

ARP

Address Spoofing

STP

Port Security

DHCP Snooping

Dynamic ARP Inspection (DAI)

IP Source Guard (IPSG)

Table Flooding

Mitigation

Bombarding the switch with fake source MAC addresses

Implement por security

VLAN Double-Tagging

DHCP Messages

DHCP Attacks

ARP

Address Spoofing

STP

VLAN Hopping

CDP Reconnaissance