Device Registration and VCS Clustering Introduction and Background Introduction When running a VCS cluster, some consideration needs to be given to the endpoint configuration parameters for client registration since providing [...]

I don’t intend to argue the merits of the suit, except to say that I’m skeptical that people really know what they mean when they say “best practice.” (I’ve written [...]

The compromise of RSA token keys has lots of people understandably worried. In theory, an attacker could gain enough information to generate real key codes, and thereby fool your authentication systems into giving them unauthorized access to your systems and data – a scary proposition.

At this session on “Wireless Fundamentals for Network Engineers”, Ron Trunk, CCIE #5942, Sr. Consultant, will present an overview of RF theory and technology designed specifically for network engineers to [...]

In my last post, I described the need for building defensible networks. If you are going to be able to thwart advanced persistent threats and cybercrime, security needs to be built into the design of your network, and not just “stuck on” as an afterthought.  

Overview LDAP is an open standard application protocol that provides a directory structure for housing information.  It is most often seen in Microsoft Active Directory.  In that context, LDAP provides [...]

I've been thinking for a while about how to make your networks more defensible against attack. The ideas have come from digesting all that has been written in the last year or so about attacks on U.S. Government systems and Google by the Chinese government, by fraudulent electronic transfers, and…

Prior to version 4.7.1 Cisco NAC would only support DES for Kerberos.  This affected the Kerberos authentication type and AD SSO authentication type.  With version 4.7.1, NAC started supporting negotiation of the encryption authentication that was used with NAC.   According to the 4.7.1 release notes, NAC can now "negotiate any…

Before version 4.6, the Cisco NAC Agent used registry key settings to for configuration.  Starting with version 4.6, the Cisco NAC Agent uses an XML file for configuration.  This file is located in c:Program FilesCiscoCisco NAC AgentNACAgentCFG.xml.  This configuration file provides many options for customizing the behavior of the NAC…

It's never fun trying to open a Cisco TAC case and realizing that you can't find the serial number of the NAC Appliance that is having a problem.  Instead of having to trek to the data center to grab the serial number, you can retrieve it by accessing the NAC…

This troubleshooting tip pertains to environments that use Cisco NAC in L3 OOB mode and use the Windows Firewall for end computer protection.  In this scenario, a problem could occur where the Windows Firewall incorrectly uses the standard profile when it should be using the domain profile.  This could cause…