Mobile Broadband Ecosystem
Mobile Broadband… You might have heard this term before, possibly in an ISP environment. The term has always represented a name of a department within a mobile operator or a vendor organization. It is always there in profile description for telecom professionals. It is everywhere actually when it comes to a certain ecosystem or framework that delivers Internet Service […]
The post Mobile Broadband Ecosystem appeared first on Cisco Network Design and Architecture | CCDE Bootcamp | orhanergun.net.
SDxCentral’s Top 10 Articles — June 2016
Microsoft tried to buy Docker, MPLS team members resign from Cisco, and more.
Don’t Confuse Hyperconvergence With Web-Scale
There are big differences between hyperconverged systems and the web-scale architectures used by Google and Facebook.
Heavy Metal In The Data Center
Metal heads have nothing over data center managers.
Understanding Firepower DNS Policies
One cool feature added with Firepower version 6 is probably best described as DNS-based Security Intelligence, Inspection and Sinkholing. The thought is pretty simple. If a host issues a DNS request for a host that is known to be malicious, that response is manipulated. The manipulated response can be host not found, an alternative IP address or no response at all. This allows an administrator to provide another layer of protection by preventing hosts ready access to the IP addresses of known malicious hosts.
So the first question that might come to mind is how are hosts on the Internet classified as bad. The short answer is that Talos maintains lists of known bad fully qualified domain names (fqdn). These are actually categorized and delivered into the Firepower solution as a feed. Each of the following category can be selected into one or multiple DNS Rules.
DNS Feeds and Lists
- DNS Attackers
- DNS Bogons
- DNS Bots
- DNS CnC
- DNS Dga
- DNS Exploitkit
- DNS Malware
- DNS Open_proxy
- DNS Open_relay
- DNS Phishing
- DNS Response
- DNS Spam
- DNS Suspicious
- DNS Tor_exit_node
In addition to the above, there are two built in lists that can be controlled by the UI.
- Global-Blacklist-for-DNS
- Global-Whitelist-for-DNS
The final way Continue reading
On Their Way Out: Proprietary Security Appliances in Branch Offices
The attack landscape has broadened.
Golang: Exercising pointers, interfaces, functions and wrapping
This article is inspired by my somewhat confused learning experience with interfaces, methods and wrapping functions in Golang. Needless to say, there was some serious learning to do here given first of all I was a C junkie then moved swiftly to Python for ease and speed in the networking world. Lots to learn.
Golang
The reason for concentration on Golang? It’s simple, powerful, quick to compile and massively supported with a vibrant community. A little like the film ‘Lock Stock and Two Smoking Barrels’, I take the tenet of ‘guns for show, knives for a pro’ approach with Python and Golang; roughly translating to Python for proof-of-concepts, speed and simple apps, Golang for performance and services. Therefore knowing how interfaces, pointers, types and methods based on types are critical knowledge components!
Show me the code
The code below is an exercise of interfaces, function wrapping, pointers and mixing usage of them all. It does not cover why you might want to do it, so go and learn that yourself. Pointers are great for highly optimised applications and can also save memory if used correctly. With Golang’s garbage collection, worrying about freeing memory is not an issue. Exercise 6 will Continue reading