Archive for the ‘Security’ Category

Security Solutions for System Engineers (SSSE) 3.0

December 15th, 2008 by Bojana Stucin


Do you feel confident enough to upgrade your foundation knowledge about network security, design concepts and user-level operating system concepts? Best practices for designing the security countermeasures for hosts as well as for networks can be achieved by SSSE 3.0 course and labs! NIL is currently the only partner providing training and ...

Book review: Voice over IP Security

December 5th, 2008 by Ivan Pepelnjak


Based on the title, I would assume that the Cisco Press book Voice over IP Security: Security best practices derived from deep analysis of the latest VoIP network threats attracts primarily senior voice engineers who know that they have to secure their production networks. The author of the book strongly ...

Free access to SNAF remote lab exercises

November 20th, 2008 by Bojana Stucin


Have you passed the CCNA Security exam and now you’re working toward the CCSP? Or perhaps you just want to expand your knowledge about adaptive security appliances (ASA)? Well, grab this opportunity!! Securing Networks with ASA Fundamentals (SNAF) remote lab exercises - FREE OF CHARGE to the first five students who ...

Pre-Shared Keys

September 4th, 2008 by Bostjan Sustar


While reading Jan’s blog entries about how public key infrastructure (PKI) is misunderstood and misused (Part 1 , Part 2, Part 3), I thought about the fact that many people decide against using PKI in IPSec solutions because they do not understand it and consider it to be too complex. ...

New IINS 1.0 Remote Labs!

August 27th, 2008 by Bojana Stucin


In addition to providing IINS classroom training, NIL offers the ability to test various aspects of security remotely on real equipment. With no extra costs and concerns about equipment, you simply order IINS remote labs and practice the task-oriented exercises to extend your Cisco IOS network security knowledge. Available for ...

PKI Hell, Part 3: Non-global PKIs and Some PKI Humor

August 7th, 2008 by Jan Bervar


In parts 1 and 2 of this series I bashed some aspects of the current state of real-life PKI implementations, the "global PKI," and the use of self-signed certificates. What we have left are PKIs that are not global, nor do they use self-signed certificates. I am talking about private ...

PKI Hell, Part 2: We Have Met the Third Party and It is Us

July 28th, 2008 by Jan Bervar


In part 1 of this series, I started laying out what I perceive to be the basic problems of how certificates and PKI are (ab)used today, especially in Internet applications. Today, I want to take things a step further and discuss self-signed certificates and how browsers' user interfaces have handled ...

PKI Hell Part 1: Back to Basics

July 23rd, 2008 by Jan Bervar


For a number of years now, it has been unfashionable to criticize the condition of PKI and X.509. We use a subset of these standards daily to surf the web (HTTPS), exchange email (S/MIME, SMTPS, etc.), and so forth. Some pains of PKI are well documented (see Peter Gutmann's "Everything ...

Cisco should embrace VMsafe, big time!

June 26th, 2008 by Jan Bervar


If you missed the announcement of VMware’s VMsafe a while ago, go check it out. VMsafe is an open API for vendors to add security services to VMware’s ESX hypervisor. It allows third-party add-ons to control connectivity with virtual networking and execution of guest operating systems or applications. In this ...