I pulled some workshop hosting duty trying to fill Jimmy Ray’s big orange shoes this morning. The subject is a great one -- Intrusion Prevention in the Data Center with an incredibly sharp engineer, Stijn Vanveerdeghem. Stijn is one of those crazy smart security guys down in Austin, TX as he works with a bunch of old friends from the team of IDS experts we have there.
So much emphasis on the data center these days for obvious reasons and it makes sense that anytime we consolidate something valuable -- there is going to be an increase in creativity for how to get to it when your not supposed to.
We do these workshops as part of our TechWiseTV shows for their interactivity and the difference in the depth we can achieve. A number of references were made as to other resources, shows we have done as well as published papers and studies. I have included all the links we brought up below.
If you missed Stijn’s presentation or would like to go back and take better notes -- you can get to it at the same link you used to originally register OR I also highly recommend you bookmark ciscoworkshops.com
TechWiseTV Episodes referenced:
TWTV120 -- Defending the Data Center
Couple of notable segments within this show worth looking at here:
Clustering Technology with the 5585X
IPS 4500 Series
Episode 15, Firewall Reinvention with the ASA CX, is a good show throughout -- only one segment I will call out as a favorite however, a Master Class Jimmy Ray did on ‘Forensic Analysis.’ The differences between network device versus traditional computer forensics and network forensics best practices, why routers and firewalls aren’t the smoking gun, and how the Cisco Router Analysis Tool can help with your networking.
Fundamentals of IPS
Fundamentals of High End Firewalls
Couple of good pointers Scott Simkin lays out in his support of our workshop today -- thank you Scott.
The 2012 Verizon Data Breach Report (pdf)
Performance of the Cisco IPS 4300 and 4500 (Whitepaper, .PDF)
Global Correlation on Cisco IPS Sensors (Whitepaper, PDF)
IPS Tech Tips – Protecting Industrial Environments:
Cisco IPS Go page: http://cisco.com/go/ips
Thanks for watching!