Speaking with quite a few network engineers in the last few months, I was shocked by the lack of real understanding of the Domain Naming System (DNS). It shocked me because it is the singular application functionality that is entirely network-based. Meaning that DNS is the…
Read More →Fairfax, VA -- (August 16, 2012) - NetApp, Inc. (NASDAQ: NTAP), a leader in data storage and storage provisioning enterprise and data center products achieved the Defense Department Unified Capabilities Approved Products List (UC APL) certification with the help of the…
Read More →Fairfax, VA -- (October 29, 2013) - Hewlett-Packard TippingPoint (NASDAQ: HPQ), a leader in intrusion protection system (IPS) security products achieved the Defense Department Unified Capabilities Approved Products List (UC APL) certification with the help of the Washington…
Read More →World IPv6 Launch, as it is being called, is this year's Internet Society IPv6 initiative meant to provide more IPv6 content saturation on the Internet. Similar to World IPv6 Day last June, but with one very key difference: they will be IPv6-enabled permanently! That's right, no…
Read More →Bottom line up front : Cisco has a broken implementation of OSPFv3 authentication. This story begins like many do with network engineers trying to do their best in implementing IPv6 after a thorough and exhaustive engineering exercise. Cisco's Aggregation Services Router (ASR)…
Read More →A couple of my buddies Shannon McFarland (Cisco) and Ed Horley (Groupware) did a great short video with Jeff Doyle (TCP/IP legend) on the urgency behind IPv6 in the service provider and the enterprise space. Enjoy! http://www.youtube.com/watch?v=oq0RxI1p6zc Also located in Ed's…
Read More →Picking up where we left off last, I was showing you the awesome usefulness, security and affordability of Yubikey (Yubico's 2-Factor authentication token) and using it for 2-factor authentication on network devices. Well, I'd like to go another step forward: 2-Factor…
Read More →In the DoD there is a strong requirement for 2-factor authentication in the network. For systems and workstations they use a successful implementation with Public Key Infrastructure (PKI) and a DoD common access card (CAC ) which has a client certificate. The user has a PIN;…
Read More →FIPS 140-1 and FIPS 140-2 had quite a bit of longevity. However, FIPS 140-3 is almost here. Based on previous NIST standards development processes, the 140-3 standard will most likely have a publication date of a year from now. So sometime in February/March 2014, FIPS 140-3 will…
Read More →A colleague brought up a very important issue in regards to vPC survivability. There are Nexus vPC Peer-Link interface options. Take a look at the below diagrams. As you can see, we have a big problem here with survivability that can often be overlooked: if the one single vPC…
Read More →