Securing the local area network
- 1. SECURING THE LOCAL AREA NETWORK
- 2. Which should be protected? Securing the edge device because of itsWAN connection? Securing the internal LAN? Securing the internal LAN is just as important as securing the perimeter of a network
- 3. Securing Endpoint Devices A LAN connects many network endpoint devices that act as a network clients. Endpoint devices include: Laptops Desktops IP phones
- 4. Securing Non-Endpoint Devices A LAN also requires many intermediary devices to interconnect endpoint devices. Non-endpoint LAN devices: Switches Wireless devices IP telephony devices
- 6. NAC NAC helps maintain network stability by providing two important features: Authentication and authorization Posture assessment Quarantining of noncompliant systems Remediation of noncompliant systems NAC can be implemented in two ways: NAC Framework Cisco NAC Appliance
- 7. San Networks
- 8. STORAGE AREA NETWORKS (SANS) Network and server downtime costs companies large sums of money in business and productivity losses. At the same time, the amount of information to be managed and stored is increasing dramatically every year. A SAN is a specialized network that enables fast, reliable access among servers and external storage resources. A storage device is not the exclusive property of any one server. They are shared among all networked servers as peer resources. A SAN does not need to be a physically separate network. It can be a dedicated subnet that carries only business- critical I/O traffic such as reading / writing a file from / to a disk, between servers and storage devices.
- 9. Storage Area Networks (SANs) Cisco SAN solutions provide a preferred means of accessing, managing, and protecting information resources across a variety of SAN transport technologies. For example: Fiber Channel Fiber Channel over IP (FCIP) Internet Small Computer Systems Interface (iSCSI) Gigabit Ethernet Optical network
- 10. SAN Transport Technologies Fiber Channel: The primary SAN transport for host-to-SAN connectivity. Fiber Channel networks provide a serial transport for the SCSI protocol. Uses a world wide name (WWN) to uniquely identify each element. iSCSI: Maps SCSI overTCP/IP and is typically used in the LAN. Leverages existing IP networks to build and extend SANs by usingTCP/IP to transport SCSI commands, data, and status between hosts or initiators and storage devices or targets, such as storage subsystems and tape devices. Uses a logical unit number (LUN) which is a 64-bit address as a way to differentiate individual disk drives within a common SCSI target device such as a disk array. FCIP: Popular SAN-to-SAN connectivity model that is used over the WAN or MAN. SAN designers can use the open-standard FCIP protocol to break the distance barrier of current Fiber Channel solutions and enable interconnection of SAN islands over extended distances.