IoT needs to be secured by the network

Everyone who has a stake in the internet of things, from device manufacturers to network service providers to implementers to customers themselves, makes important contributions to the security or lack thereof in enterprise IoT, attendees at Security of Things World were told.“The key to all [IoT devices] is that they are networked,” Jamison Utter, senior business development manager at Palo Alto Networks told a group at the conference. “It’s not just a single thing sitting on the counter like my toaster, it participates with the network because it provides value back to business.”“I think the media focuses a lot on consumer, because people reading their articles and watching the news … think about it, but they’re not thinking about the impact of the factory that built that consumer device, that has 10,000 or 20,000 robots and sensors that are all IoT and made this happen.”To read this article in full, please click here

Nutanix: We don’t need a traditional channel program | Channelnomics

Edge Computing: 5 Viable Telco Business Models

Download the HPE MEC Research Report, . Telecommunications (telco) providers are excited about Multi-Access Edge Computing (MEC) because it promises to make compute and storage capabilities available to customers at the edge of communications networks. Workloads and applications will be closer to customers, potentially enhancing experiences and enabling new services and offers. MEC is being... Read more →

Today, Eufy Genie Speaker With Alexa is Just $19.99 – Deal Alert

This Alexa-enabled smart speaker from Eufy is discounted 43% today on Amazon as part of their "Black Friday Week" event (see all of today's active deals here). Stream music from Spotify, Pandora, SiriusXM and others. Control smart home devices. Ask for weather, sports score, news and more. Eufy Genie currently averages 4 out of 5 stars on Amazon where Its typical list price has been reduced 43% to just $19.99. See it on Amazon here.To read this article in full, please click here

Matrix Banker malware spreads to multiple industries | Salted Hash Ep 7

The Matrix Banker malware, first found in Latin America, is now gaining a foothold in diversified targets. Steve Ragan breaks down the threat with Justin Fier, director for cyber intelligence and analysis at Darktrace.

Using Cisco Discovery Protocol Reporter

Basic Configuration of OSPF Over non-Broadcast Networks ( NBMA)

Today I will talk about the basic set of configurations of OSPF NBMA network type over the non Broadcast networks. Many of you guys already aware of the NBMA network type in the OSPF network. 

Before we start with the OSFP NBMA configuration part, I would like to tell you guys that we have our own youtube channel for various network videos that can further help you guys to study further. I will going to add many more videos soon on the channel, Please subscribe to the channel for the study network related videos

Subscribe us on Youtube: http://y2u.be/0c4lMYVp9go

Lets have a Basic OSPF Network diagram for you guys, then we will come up with the diagram showing the routers connected in the OSPF via Frame-Relay network which will act as a NBMA OSPF network type.

Fig 1.1- OSPF Network Connected to other Campus Via NBMA Networks- Frame Relay

NBMA stands for Non-Broadcast Multiple Access where the network types X.25 and Frame Relay has no capability to support Broadcast traffic. Here in our example we will take Frame-Relay as a NBMA network which is connected via two routers 1 and 2. I defined these routers as Continue reading

BrandPost: MPLS, SD-WAN Not an Either/Or Scenario

Software-defined Wide Area Network (SD-WAN) technology is providing enterprises with greater flexibility and agility over WAN connectivity, but is being used to supplement rather than replace existing implementations of Multiprotocol Label Switching (MPLS) WAN circuits.That may be a surprise to many who are wowed by the fast pace of SD-WAN adoption. “In the classic engineer’s formulation, ‘You can have it cheaper, faster, or better…pick two,’” writes John Burke, CIO and Principal Research Analyst - Nemertes Research. “From time to time new technology comes along and, by changing the basic assumptions underlying existing solutions, manages to be cheaper and faster and better all at once. SD-WAN promises to hit the trifecta.”To read this article in full, please click here

Why Does It Take So Long to Upgrade Network Devices?

One of my readers sent me a question about his favorite annoyance:

During my long practice, I’ve never seen an Enterprise successfully managing the network device software upgrade/patching cycles. It seems like nothing changed in the last 20 years - despite technical progress, in still takes years (not months) to refresh software in your network.

There are two aspects to this:

Network Automation Engineer Persona: Proof-of-concepts

If you’ve chosen to do a proof-of-concept (PoC), you should already know what the challenge or requirement is, what your satisfactory results look like and what the product or tool set is that will deliver on your commitment. A proof-of-concept is a recipe that should give you a well baked set of results.

Approaching a PoC

Approaching a PoC is a conscious decision to trial an idea that if successful, your business will put in to daily production to satisfy one or more business requirements.

So why aren’t the results more apparent in our day to day lives? Why do we not see these decision points more transparently?

Some people approach PoCs as a tyre kicking exercise, or a means to get a vendor to commit to them and then use as leverage against cost. If you’re just playing, you’re wasting time. If you’re tyre kicking then be prepared for lack of commitment or interest in the future from individuals or organisations. Genuine PoCs and evaluations are a normal and acceptable part of business, so the responses are different from those assisting with PoCs.

Approach a PoC with clear intent and understanding of the challenge that faces you. You must Continue reading

Worth Reading: Classifying Route Leaks

Did you know there’s an RFC describing typical BGP route leaks? I didn’t until I stumbled upon this blog post.

5 ways to design your container network

There’s been a lot of talk about container networking in the industry lately (heck, we can’t even stop talking about it). And it’s for a good reason. Containers offer a fantastic way to develop and manage microservices and distributed applications easily and efficiently. In fact, that’s one of the reasons we launched Host Pack — to make container networking even simpler. Between Host Pack and NetQ, you can get fabric-wide connectivity and visibility from server to switch.

There are a variety of ways you can deploy a container network using Host Pack and Cumulus Linux, and we have documented some of them in several Validated Design Guides discussed below. Wondering which deployment method is right for your business? This blog post is for you.

Docker Swarm with Host Pack

Overview: The Docker Swarm with Host pack solution uses the connectivity module within Host Pack, Free Range Routing (FRR) in a container. The FRR container runs on the servers and uses BGP unnumbered for Layer 3 connectivity, enabling the hosts to participate in the routing fabric. We use Docker Swarm as the container orchestration tool for simplicity.

Choose this deployment if:

• You’re looking for the easiest and simplest container Continue reading

Cisco Wireless Solution : Local Mode Vs Flex Connect

Today I will talk about the Wireless deployment modes and will discuss which and why to use that deployment mode in the your wireless network. 


Wireless Deployment :Local Mode

In local mode, an AP creates two CAPWAP tunnels to the WLC.  One is for management, the other is data traffic.  This behaviour is known as "centrally switched" because the data traffic is switched(bridged) from the AP to the controller where it is then routed by some routing device.

Locally switched means the traffic is terminated at the local switch adjacent to the access point. 

Fig 1.1- Local Mode behind Mesh Network

Its a good idea if you have traffic that the client is sending to the local site rather than it going via the controller and travelling over the WAN link twice say for file or print services

Wireless Deployment : Flex Mode

Flex Connect also known as HREAP by the old timers, allows data traffic to be switched locally and not go back to the controller.  It basically causes the AP to behave like an autonomous AP, but be managed by the WLC.  In this mode, the AP can still function even Continue reading

Software Defined Networking : Introduction to VeloCloud SD-WAN Solution

Arista vEOS Vagrant Libvirt Box Install

Arista vEOS Vagrant Libvirt Box Install

Accenture, Pivotal Spin Up Cloud Migration Business Group

Two Accenture Pivotal Business Group sites, in Columbus, Ohio, and New York City, will open by the end of the year.

Chef and Puppet Throw DevOps Features at AWS OpsWorks Platforms

Chef and Puppet both trail Red Hat Ansible as DevOps tool of choice.

Securing the Multi-Cloud: It’s Harder Than It Looks

Enterprises must realize the advantages of the cloud without introducing new risk.

Korean Corner