Enterprise Architecture

2012 US Government IPv6 Mandate: The Day of Reckoning

Well, today is the day, or the last day I should say.  At midnight tonight, the US Government will have shut the books on yet another Fiscal Year.  Although, it’s not finances that has the technology industry glued to government tech news; it’s IPv6 adoption.  By the end of FY 2012, the entire US Government […]

2012 US Government IPv6 Mandate: The Day of Reckoning Read More »

Cisco IPv6 IOS Hardening – DoD Style

***Updated on 14 May 2014 – regarding NET-IPv6-022, See below*** Thousands of network engineers in the DoD out there looking at implementing IPv6 now have to address a few Security and Technical Implementation Guidance (STIG) items that they used to just annotate as “Not Applicable – NA.”  Now, IPv6 security is important.  If you are

Cisco IPv6 IOS Hardening – DoD Style Read More »

Why 802.1x is Not Enough: How to Implement SeND – Part 2

Last month I presented the case as to why 802.1x authentication is not enough for local network (wired or wireless) security (go back here to read).  In this post I will present an alternative: IPv6 Secure Neighbor Discovery (SeND).  If you have an IPv6 enterprise, small IPv6 deployment, or a little IPv6 lab then pay

Why 802.1x is Not Enough: How to Implement SeND – Part 2 Read More »

Tachyon Dynamics helps NetApp Achieve DoD UC APL Certification

Fairfax, VA — (August 16, 2012) – NetApp, Inc. (NASDAQ: NTAP), a leader in data storage and storage provisioning enterprise and data center products achieved the Defense Department Unified Capabilities Approved Products List (UC APL) certification with the help of the Washington DC-based Information Technology firm: Tachyon Dynamics. NetApp received its certification as the first

Tachyon Dynamics helps NetApp Achieve DoD UC APL Certification Read More »

Why 802.1x is Not Enough: Use IPv6 SeND – Part 1

There’s been much debate in the IPv6 community regarding the abysmal support or IPv6 Secure Neighbour Discovery (SeND).  To get you up to speed on what IPv6 Secure Neighbour Discovery is think IPv6 + 802.1x-like + ARP security + PKI environment.  Later in this blog I’ll show you how to set up an IPv6 SeND

Why 802.1x is Not Enough: Use IPv6 SeND – Part 1 Read More »

SDN, Open Flow and Cisco ONE: A First Look

Software Defined Networking (SDN) is the new buzzword in IT today.  It has become synonymous with things like cloud, cyber security, CDN, and yes even IPv6.  The curious thing is that they are all inter-related.  Open Flow, which is a specification of the Open Network Foundation, has defined this new phenomenon as something that, “enables

SDN, Open Flow and Cisco ONE: A First Look Read More »

IPv6 RA Guard Implementation Advice

Bravo to Fernando Gont for getting out a great Internet Draft (soon-to-be RFC) on the Implementation Advice on IPv6 Router Advertisement (RA) Guard.  This has been one of the open, gaping wounds in the side of IPv6 enterprise deployment for years.  In fact, many of us in the IPv6 and IPv6 security fields love to

IPv6 RA Guard Implementation Advice Read More »

Why SOPA and PROTECT-IP will kill the U.S. Internet: An Open Letter to Congress

I’m sure everyone has heard the headlines about the U.S. House of Representatives’ bill HR-3261 Stop online Piracy Act and the Senate Bill equivalent; Preventing Real Online Threats to Economic Creativity and Theft of Intellectual Property Act of 2011 (PROTECT IP).  Well it’s more than just hyperbole.  However, I’ll start with what these bills actually say, what

Why SOPA and PROTECT-IP will kill the U.S. Internet: An Open Letter to Congress Read More »

IPv6 IPsec – Reviving the Debate

John Spence from Nephos6 had a great article discussing IPsec and its place in the newest draft of the IPv6 Node Requirements RFC.  They offer a good opinion and perspective of the current state of the industry on IPv6 adoption, and how vendors (especially of small appliances) feel about adding IPsec to their IPv6 stack.  The

IPv6 IPsec – Reviving the Debate Read More »

Scroll to Top