Category: General Interest

Post NAC: Cisco Identity Services Engine (ISE) and Lancope StealthWatch for Total Access Control

Controlling who and what access your network is a critical element to keep your resources safe from malicious threats. Network Admission Control (NAC) solutions like the Cisco Identity Services Engine (ISE) can police who and what is permitted network access as well as enforce policy for those devices. READ MORE

Big Problems in 140 Characters or Less

There is no silver bullet to protect your twitter accounts or other confidential assets from being hacked, but there are steps you can take to identify and stop malicious activity before it becomes a crisis. READ MORE

StealthWatch Is Not a Four-Letter Word

Understanding the common complications with SIEM can not only help you better utilize your SIEM, but also know how to augment the data it provides (or in some cases, doesn’t provide). Flow collection bridges the gap between packet capture and SIEMs. Collecting NetFlow can provide a complete repository of host-to-host communication down to the leaf nodes on your network, and this level of visibility is critical for making sense of today’s complex threats. READ MORE

In Network Security, the Best Defense Is a Good Offense

Lately, the news is plastered full of stories about outside attackers who have made their way inside a network. The question is: while many security teams are on high alert waiting for IDS/IPS alarms to sound, who's watching the inside? READ MORE

The Changing Nature of Incident Response: Part 3

Unfortunately, many organizations have a perimeter-centric approach to network security and don’t have a lot of visibility into what is going on inside their networks. Closing this internal network visibility gap can be a key ingredient in a comprehensive approach to protecting an organization from Advanced Persistent Threat. READ MORE