VoIP Security and Mitel IP Telephony Solutions. Dan York Chair, Mitel Product Security Team February 2006
|
|
|
- Merry Turner
- 6 years ago
- Views:
Transcription
1 VoIP Security and Mitel IP Telephony Solutions Dan York Chair, Mitel Product Security Team February 2006
2 Agenda The Challenge of Security Understanding VoIP Security Threats Mitel Security Solutions Tools, Contacts, Help Summary Questions / Answers Mitel Confidential 8/24/2009 slide 2
3 The Challenge of Security
4 The Implications are Clear Ensure privacy and appropriate access to information Maximize service availability Cost avoidance Confidence to extend services to broadest group of users: Local, remote, mobile Legal ramifications in some regions Security is strategic Mitel Confidential 8/24/2009 slide 4
5 The Noise is Deafening Everyone is issuing security advisories! Manufacturers of software and hardware Security research firms Vendors of security products / training / services Government (or quasi-government) entities Computer Emergency Response Team (CERT) CERT Coordination Center U.S. Computer Emergency Readiness Team U.K. s National Infrastructure Security Coordination Center (NISCC) AUS-CERT Each day brings more to your inbox and news! Mitel Confidential 8/24/2009 slide 5
6 The Problem is Complex Multiple vendors and applications Competing vendor and internal priorities Responsibilities spread among internal groups Comprehensive defense involves many layers Operating Systems Desktop PCs Network Switches Web Servers Systems PDAs Standards Firewalls Instant Messaging Voice over IP Internet Wireless Devices Gateways Mitel Confidential 8/24/2009 slide 6
7 What is Mitel Doing Specifically? Extensive portfolio of secure solutions available for you today Member of VoIP Security Alliance Connected to industry security groups including: CERT and US-CERT NISCC (National Infrastructure Security Co-ordination Center) Security portal: Public - Mitel Online Technical Support -> Security at Work Ongoing security vigilance Mitel Confidential 8/24/2009 slide 7
8 What is the Industry Doing to Help? VOIPSA s mission is to promote the current state of VoIP security research, VoIP security education and awareness, and free VoIP testing methodologies and tools. Membership includes: Mitel, Avaya, Nortel, Siemens, Alcatel, Extreme Networks, etc. Now over 100 members on the Technical Board of Advisors Committees: Security Requirements, Security Research, Best Practices, Testing Public VOIPSEC mailing list for discussion of VoIP security issues (and yes, it s all CAPS) VoIP Security Threat Taxonomy released in late 2005 Next project - industry-wide Best Practices So what are the actual threats to IP Telephony? Mitel Confidential 8/24/2009 slide 8
9 Understanding IP Telephony Security Threats
10 Before We Begin Nobody is 100 percent secure and never has been! Employ best practices from an organization perspective Be sensitive to operation and cost Security concerns are not new: Mitel offers extensive TDM defenses Mitel Confidential 8/24/2009 slide 10
11 Security Challenges CIA Confidentiality Integrity Availability Confidentiality Protect the voice and data stream including call control signaling Prevent eavesdropping on conversations, toll fraud, impersonation Integrity Ensure that information is protected from unauthorized modification Prevent discovery of a user, system or application password Availability Ensure that communication services are available to users Avoid any adverse effects resulting from a denial of service (DoS) attack or computer worm Mitel Confidential 8/24/2009 slide 11
12 Security Aspects of IP Telephony Media / Voice Manage ment TCP/IP Network Call Control Policy Mitel Confidential 8/24/2009 slide 12
13 Media / Voice The Media Path Manage ment TCP/IP Network Call Control Real-Time Protocol (RTP) Packets Policy Threats: Eavesdropping particularly if over wireless or open Internet (sniffing) IP phones Application Servers Degraded voice quality through Denial of Service (DoS) attack SOHO Defense Strategies: Encryption of voice path WPA, WPA2 for wireless Call Controller TDM IP Private Enterprise IP Network Internet VLANs Packet filtering wireless IP phones Softphone Mitel Confidential 8/24/2009 slide 13
14 Media / Voice The Signalling Path Manage ment TCP/IP Network Call Control SIP, H.323, MiNet Policy Threats: Denial of Service Impersonation IP phones Application Servers Snooping account codes Toll fraud SOHO Defense Strategies: Signalling path encryption Encrypted desktop load on 3300 ICP Call Controller Private Enterprise IP Network Internet Proper system programming wireless IP phones Softphone Mitel Confidential 8/24/2009 slide 14
15 Media / Voice The Management Path Examples Telnet, HTTP, FTP, SNMP, XML, TAPI Manage ment TCP/IP Network Policy Call Control Threats: Snooping passwords Denial of service Application Impersonation Remote Service Remote Service Monitoring call patterns Malicious system modifications Internet Defense Strategies: DoS defenses in network infrastructure Changing default passwords Call Controller Enterprise IP Network Ensure physical security Authentication secure port access! NMS System Secure Socket Layer (SSL) Application Server System Admin Mitel Confidential 8/24/2009 slide 15
16 Media / Voice and Legacy Devices Manage ment TCP/IP Network Call Control Analog LS, ISDN, Q.SIG, DPNSS Policy Threats: Toll fraud via public network attack IP phones Application Servers Impersonation Feature access SOHO Defense Strategies: Class of Restriction (COR) Call Controller Private Enterprise IP Network Internet Class of Service (COS) Account Codes Analog Gateway Trunk Restrictions Interconnect Restrictions Existing PBX wireless Analog to IP media and signaling conversion Softphone Mitel Confidential 8/24/2009 slide 16
17 Mitel Security Solutions
18 Mitel Security Today Secure Voice / Media Secure Call Control / Signalling Secure Management Interfaces Secure against legacy threats Secure against common network attacks Manage ment Media / Voice TCP/IP Network Policy Call Control Mitel Confidential 8/24/2009 slide 18
19 Mitel 3300 ICP Encryption Manage ment Media / Voice TCP/IP Network Call Control Encryption across full Mitel desktop portfolio Voice Stream: Secure RTP using 128 bit Advanced Encryption Standard (AES) Call control encrypted using Mitel s Secure MiNet (AES) Full support for all current and recent sets Mitel 5201, 5207, 5010, 5020, 5212, 5215, 5220, 5224, 5230, 5235, 5240, Navigator IP Phones Mitel Your Assistant Softphone Encryption of signaling and media path between multiple ICPs (clusters) Policy Mitel Confidential 8/24/2009 slide 19
20 Secure Management Interfaces Manage ment Media / Voice TCP/IP Network Call Control Web management interfaces for systems and applications implement SSL Authenticated access to provisioning, administrative user interfaces Different levels of access with different passwords Mitel 7100 Management Access Point: Secure remote admin for VPN or Dial-up access XML APIs All traffic encrypted using standard SSL Strong certificate-based authentication required Live Business Gateway Uses SSL/TLS-encrypted SIP for communication to Microsoft Live Communication Server Policy Mitel Confidential 8/24/2009 slide 20
21 Secure against legacy/ threats Manage ment Media / Voice TCP/IP Network Call Control Extensive Class of Restriction avoids misuse of communications resources Well-proven toll fraud restrictions: Traditional TDM COS/COR Account codes Restrictions on trunk-to-trunk connections SMDR records Ability to flag calls as malicious Feature access restrictions Policy Mitel Confidential 8/24/2009 slide 21
22 Secure against common network attacks Manage ment Media / Voice TCP/IP Network Call Control Denial of Service protection within 3300 ICP and desktops Performance may be reduced but system doesn t shut down Sets include micro-firewall and rate throttling to fend off DoS attacks Support for VLANs to segregate voice and data traffic Core Platform OS, VxWorks, is not susceptible to Windows OS viruses / attacks Application operating systems hardened against attack Mitel is IP infrastructure agnostic giving our customers choice HP, Foundry, Cisco, or others Set authentication requires unique association of MAC address, IP and user entered PIN registration number Set software downloads are encrypted and tamper-proof to ensure sets cannot be spoofed Sets in MiNet mode do not include a web browser or other services that can be attacked Policy Mitel Confidential 8/24/2009 slide 22
23 Support for 802.1x Manage ment Media / Voice TCP/IP Network Call Control How do you know who is plugging into your network jacks? Network device must be authenticated before switch port is opened 802.1x Authentication for Desktops Support for Extensible Authentication Protocol (EAP) EAP-MD5 challenge Support for authentication via EAP to a RADIUS (or other similar) server Username and password entered through the phone interface Supported on dual mode 5212, 5215, 5220, 5224, 5235 and Navigator IP Phones Policy Mitel Confidential 8/24/2009 slide 23
24 Wireless Security Manage ment Media / Voice TCP/IP Network Call Control Encryption and enhanced authentication for SpectraLink Telephones using Wi-Fi Protected Access (WPA) and WPA2 WLAN Stand supports WPA, WPA2 IP-DECT sets (EMEA & AP) include native DECT encryption Policy Mitel Confidential 8/24/2009 slide 24
25 Secure traversal of firewalls Manage ment Media / Voice TCP/IP Network Call Control Teleworker Solution allows secure use of remote extension anywhere there is an IP address Works with standard Mitel IP sets no special sets to purchase Policy Teleworker Solution 3300 ICP TO LEGACY SYSTEMS VIA Q.SIG, DPNSS, PRI Your Corporate Network Integrating with existing corporate firewall Internet Home router/ NAT/ firewall HOME/ REMOTE OFFICE Mitel Confidential 8/24/2009 slide 25
26 SIP Security Manage ment Media / Voice TCP/IP Network Call Control Mitel SIP desktops support Secure RTP Today: dual mode 5212, 5215, 5220, 5224, 5235, Navigator IP Phone SIP sets satisfy challenging PROTOS test suite for CERT advisory CA ( Support for traversal of firewalls including STUN SSL/TLS-encrypted SIP planned for calendar Q2, 2006 Also will support HTTPS and SSL-encrypted telnet SIP sets support 802.1x SIP trunking in 3300 Rel 7.0 will support SSL/TLS for signaling Mitel continually monitors evolving SIP security standards Policy Mitel Confidential 8/24/2009 slide 26
27 Protection Beyond Product to Process Manage ment Media / Voice TCP/IP Network Call Control Mitel focus on security Broad based internal security team encompassing R&D, test, product management, product support, product verification Internal process to ensure compliance with vendor security bulletins (such as Microsoft) Escalation process for reported security vulnerabilities sent to security@mitel.com Triage by product security team Escalation to appropriate product groups as necessary As needed security advisories posted to Ongoing vigilance throughout customer / product lifecycle Policy Mitel Confidential 8/24/2009 slide 27
28 Mitel Tools, Contacts, Help
29 Where to Go for More Information Advisories, Security white papers, FAQ Mitel OnLine Security at Work portal Webinar and customer presentations Security Technology Brief 3300 ICP Security White Paper 3300 ICP Security FAQ 3300 Engineering Guidelines More documents coming soon If you have more questions: Engage your SE To report a suspected security vulnerability security@mitel.com Mitel Confidential 8/24/2009 slide 29
30 Security Links VoIP Security Alliance Computer Emergency Response Team (CERT) U.S. Computer Emergency Readiness Team U.K. s National Infrastructure Security Coordination Center (NISCC) AUS-CERT Internet Storm Center Mitel Confidential 8/24/2009 slide 30
31 Mitel Security Solutions Summary
32 Mitel Security Today Secure Voice / Media Secure Call Control / Signalling Secure Management Interfaces Secure against legacy threats Secure against common network threats Manage ment Media / Voice TCP/IP Network Policy Call Control More information at Mitel Confidential 8/24/2009 slide 32
33 Thank you Dan York Chair, Mitel Product Security Team Report security issues to Mitel Confidential 8/24/2009 slide 33
34 Backup Slides
35 Addressing Security Threats 3300 ICP 2 Admin 3, 4 LAN 1 WAN/ Internet 5 3, 4 Attack Points 1) Denial Of Service 2) Password Sniffing 3) Eavesdropping 4) Spoofing, Assuming Identity 5) Spoofing, APIs Apps Server Security Implementations 1) Hardening of Call Control and OS 2) Implement Secure Socket Layer 3) Employ Encryption of Media Streams 4) Implement SSL on Signaling Streams 5) Authentication with Policy Based Access Mitel Confidential 8/24/2009 slide 35
36 Security Threats Confidentiality Confidentiality Integrity Availability Voice Threat Eavesdropping, man-in-the-middle attacks Consequences confidentiality breach between called and calling parties which can be used for personal or company gain Call Control Threat fraudulent use of telephony resources toll fraud, impersonation Consequences increased costs and / or malicious usage Defense Strategies Physical protection (wiring closets, equipment rooms) Use of Ethernet switching instead of shared media Use VLANs, VPNs where applicable (just like your data network!) Encrypt conversations and call control, secure the media stream SRTP Ensure routing tables, instructions, account codes are well maintained and password protected Mitel Confidential 8/24/2009 slide 36
37 Security Threats Integrity Confidentiality Integrity Availability Passwords Threat discovery of a user, system or application password Consequences unlimited, depending on the role and function of the discovered password Defense Strategies: Change default password, minimum length, enforce periodic change Never exchange passwords in clear text Password maintenance, delete ex-employees, security codes Use SSL for secure communications Mitel Confidential 8/24/2009 slide 37
38 Security Threats Availability Confidentiality Integrity Availability Denial of Service: Threat Teardrop, SMURF or Ping of Death Consequences partial or total loss of telephony or related services Defense Strategies: Rigorous virus updates and OS patches Intrusion detection systems Protect access from external sources (firewall) Limit access from internal sources (firewall) Use of p/q (VLAN) to isolate and protect voice domain bandwidth from data domain Denial of Service (DoS) floods Mitel Confidential 8/24/2009 slide 38
39 802.1X handshake Set, PC, endpoint LAN Switch RADIUS Server Exact format unique to each Extensible Autentication Protoal (EAP) method EAP-MD5, EAP-TLS, EAP-TTLS, PEAP, EAP-FAST, others Mitel Confidential 8/24/2009 slide 39
40 How Can VLANs Solve My Security Problems? Switch Switch Green VLAN data VLAN Black VLAN aka Voice VLAN Virus permeates network Mitel Confidential 8/24/2009 slide 40 *
41 A Few Security Terms Denial of Service (DoS) Repetitive attacks that limit normal access to services Spam for Internet Telephony (SPIT) Worm Move through a network quickly from device to device Both intranet and Internet Virus Attached to a program and propagates when that program is executed Replication and activation Trojan horse Viruses and worms hide in other programs hence the name Spoofing Changing your MAC or IP address to impersonate another device Phishing Mitel Confidential 8/24/2009 slide 41
42 Security Considerations of CX vs CXi Platforms CXi provides internal switch and firewall Integrated package VLAN support upon initial release Mitel 3300 CXi Controller (SX-200 ICP VLAN support will follow) Can use either internal firewall or firewall of choice Position for smaller organizations or standalone sites CX Controller package requires external switch Add switch and firewall to suit architecture requirements Position for organizations with strong security focus Mitel Confidential 8/24/2009 slide 42
SIP Trunking & Security. Dan York, CISSP VOIPSA Best Practices Chair
SIP Trunking & Security Dan York, CISSP VOIPSA Best Practices Chair September 2, 2009 Privacy Availability Compliance Confidence Mobility Cost Avoidance Business Continuity TDM security is relatively
Ingate SIParator /Firewall SIP Security for the Enterprise
Ingate SIParator /Firewall SIP Security for the Enterprise Ingate Systems Ingate Systems AB (publ) Tel: +46 8 600 77 50 BACKGROUND... 1 1 NETWORK SECURITY... 2 2 WHY IS VOIP SECURITY IMPORTANT?... 3 3
Security for SIP-based VoIP Communications Solutions
Tomorrow Starts Today Security for SIP-based VoIP Communications Solutions Enterprises and small to medium-sized businesses (SMBs) are exposed to potentially debilitating cyber attacks and exploitation
Security Assessment Checklist
Security Assessment Checklist Westcon Security Checklist - Instructions The first step to protecting your business includes a careful and complete assessment of your security posture. Our Security Assessment
Chapter 11: It s a Network. Introduction to Networking
Chapter 11: It s a Network Introduction to Networking Small Network Topologies Typical Small Network Topology IT Essentials v5.0 2 Device Selection for a Small Network Factors to be considered when selecting
Multi-Layered Security Framework for Metro-Scale Wi-Fi Networks
Multi-Layered Security Framework for Metro-Scale Wi-Fi Networks A Security Whitepaper January, 2004 Photo courtesy of NASA Image exchange. Image use in no way implies endorsement by NASA of any of the
The following chart provides the breakdown of exam as to the weight of each section of the exam.
Introduction The CWSP-205 exam, covering the 2015 objectives, will certify that the successful candidate understands the security weaknesses inherent in WLANs, the solutions available to address those
Education Network Security
Education Network Security RECOMMENDATIONS CHECKLIST Learn INSTITUTE Education Network Security Recommendations Checklist This checklist is designed to assist in a quick review of your K-12 district or
Children s Health System. Remote User Policy
Children s Health System Remote User Policy July 28, 2008 Reason for this Policy This policy defines standards for connecting to the Children s Health System (CHS) network from any remote host. These standards
Modern IP Communication bears risks
Modern IP Communication bears risks How to protect your business telephony from cyber attacks Voice-over-IP (VoIP) provides many new features over PSTN. However, the interconnection with your IT infrastructure
NETWORK THREATS DEMAN
SELF-DEFENDING NETWORK NETWORK THREATS DEMAN NEW SECURITY: STRATEGIES TECHNOLOGIES Self-Propagating Threats A combination of: self propagating threats Collaborative applications Interconnected environments
Chapter 11: Networks
Chapter 11: Networks Devices in a Small Network Small Network A small network can comprise a few users, one router, one switch. A Typical Small Network Topology looks like this: Device Selection Factors
Wireless LAN Security. Gabriel Clothier
Wireless LAN Security Gabriel Clothier Timeline 1997: 802.11 standard released 1999: 802.11b released, WEP proposed [1] 2003: WiFi alliance certifies for WPA 2004: 802.11i released 2005: 802.11w task group
Vendor: HP. Exam Code: HP2-Z32. Exam Name: Implementing HP MSM Wireless Networks. Version: Demo
Vendor: HP Exam Code: HP2-Z32 Exam Name: Implementing HP MSM Wireless Networks Version: Demo QUESTION 1 A network administrator deploys several HP MSM APs and an HP MSM Controller. The APs discover the
Standard For IIUM Wireless Networking
INTERNATIONAL ISLAMIC UNIVERSITY MALAYSIA (IIUM) Document No : IIUM/ITD/ICTPOL/4.3 Effective Date : 13/11/2008 1.0 OBJECTIVE Standard For IIUM Wireless Networking Chapter : Network Status : APPROVED Version
Chapter 4. Network Security. Part I
Chapter 4 Network Security Part I CCNA4-1 Chapter 4-1 Introducing Network Security Introduction to Network Security CCNA4-2 Chapter 4-1 Introducing Network Security Why is Network Security important? Rapid
Gigabit SSL VPN Security Router
As Internet becomes essential for business, the crucial solution to prevent your Internet connection from failure is to have more than one connection. PLANET is the ideal to help the SMBs increase the
Ingate Firewall & SIParator Product Training. SIP Trunking Focused
Ingate Firewall & SIParator Product Training SIP Trunking Focused Common SIP Applications SIP Trunking Remote Desktop Ingate Product Training Common SIP Applications SIP Trunking A SIP Trunk is a concurrent
Securing Wireless LANs with Certificate Services
1 Securing Wireless LANs with Certificate Services PHILIP HUYNH University of Colorado at Colorado Springs Abstract Wireless Local Access Network (WLAN) is used popularly in almost everywhere from the
Understanding Cisco Unified Communications Security
Cisco Support Community Presents Tech-Talk Series Understanding Cisco Unified Communications Security Akhil Behl Solutions Architect, akbehl@cisco.com Author of Securing Cisco IP Telephony Networks 2010
Designing Polycom SpectraLink VoWLAN Solutions to Comply with Payment Card Industry (PCI) Data Security Standard (DSS)
Designing Polycom SpectraLink VoWLAN Solutions to Comply with Payment Card Industry (PCI) Data Security Standard (DSS) January 2009 1 January 2009 Polycom White Paper: Complying with PCI-DSS Page 2 1.
MIVOICE BORDER GATEWAY PLATFORM
MITEL MIVOICE BORDER GATEWAY PLATFORM MiVoice Border Gateway Remote Phone Configuration Guide JANUARY, 2017 RELEASE 9.4 MBG - Remote IP Phone Configuration Guide NOTICE The information contained in this
CCNA Exploration Network Fundamentals
CCNA Exploration 4.0 1. Network Fundamentals The goal of this course is to introduce you to fundamental networking concepts and technologies. These online course materials will assist you in developing
Cisco Desktop Collaboration Experience DX650 Security Overview
White Paper Cisco Desktop Collaboration Experience DX650 Security Overview Cisco Desktop Collaboration Experience DX650 Security Overview The Cisco Desktop Collaboration Experience DX650 (Cisco DX650)
Wireless Network Security
Wireless Network Security Why wireless? Wifi, which is short for wireless fi something, allows your computer to connect to the Internet using magic. -Motel 6 commercial 2 but it comes at a price Wireless
Authentication and Security: IEEE 802.1x and protocols EAP based
Authentication and Security: IEEE 802.1x and protocols EAP based Pietro Nicoletti Piero[at]studioreti.it 802-1-X-EAP-Eng - 1 P. Nicoletti: see note pag. 2 Copyright note These slides are protected by copyright
n Learn about the Security+ exam n Learn basic terminology and the basic approaches n Implement security configuration parameters on network
Always Remember Chapter #1: Network Device Configuration There is no 100 percent secure system, and there is nothing that is foolproof! 2 Outline Learn about the Security+ exam Learn basic terminology
Voysis Cloud Implementation
Voysis Cloud Implementation Modernizing your Company s Services through VoysisCloud On premise PBX systems, although come with a bevy of different features, are also limited when it comes to integrating
CompTIA Network+ Study Guide Table of Contents
CompTIA Network+ Study Guide Table of Contents Course Introduction Table of Contents Getting Started About This Course About CompTIA Certifications Module 1 / Local Area Networks Module 1 / Unit 1 Topologies
Layer 2 authentication on VoIP phones (802.1x)
White Paper www.siemens.com/open Layer 2 authentication on VoIP phones (802.1x) IP Telephony offers users the ability to log-on anywhere in the world. Although this offers mobile workers great advantages,
Chapter 10: Security. 2. What are the two types of general threats to computer security? Give examples of each.
Name Date Chapter 10: Security After completion of this chapter, students should be able to: Explain why security is important and describe security threats. Explain social engineering, data wiping, hard
A Security Model for Space Based Communication. Thom Stone Computer Sciences Corporation
A Security Model for Space Based Communication Thom Stone Computer Sciences Corporation Prolog Everything that is not forbidden is compulsory -T.H. White They are after you Monsters in the Closet Virus
Klaudia Bakšová System Engineer Cisco Systems. Cisco Clean Access
Klaudia Bakšová System Engineer Cisco Systems Cisco Clean Access Agenda 1. Securing Complexity 2. NAC Appliance Product Overview and In-Depth 3. NAC Appliance Technical Benefits The Challenge of Securing
WHITE PAPER. Session Border Controllers: Helping keep enterprise networks safe TABLE OF CONTENTS. Starting Points
WHITE PAPER Session Border Controllers: Helping keep enterprise networks safe TABLE OF CONTENTS Starting Points...1 The Four Essentials...2 The Business Case for SIP Trunks...3 To benefit from the latest
Exam : PW Title : Certified wireless security professional(cwsp) Version : DEMO
Exam : PW0-200 Title : Certified wireless security professional(cwsp) Version : DEMO 1. Given: John Smith often telecommutes from a coffee shop near his home. The coffee shop has an 802.11g access point
Fundamentals of Information Systems Security Lesson 8 Mitigation of Risk and Threats to Networks from Attacks and Malicious Code
Fundamentals of Information Systems Security Lesson 8 Mitigation of Risk and Threats to Networks from Attacks and Malicious Code Learning Objective Explain the importance of network principles and architecture
Cyber Security Audit & Roadmap Business Process and
Cyber Security Audit & Roadmap Business Process and Organizations planning for a security assessment have to juggle many competing priorities. They are struggling to become compliant, and stay compliant,
Advanced iscsi Management April, 2008
April, 2008 Gene Nagle, istor Networks SNIA Legal Notice The material contained in this tutorial is copyrighted by the SNIA. Member companies and individuals may use this material in presentations and
TestsDumps. Latest Test Dumps for IT Exam Certification
TestsDumps http://www.testsdumps.com Latest Test Dumps for IT Exam Certification Exam : PW0-200 Title : Certified wireless security professional(cwsp) Vendors : CWNP Version : DEMO Get Latest & Valid PW0-200
Security+ Practice Questions Exam Cram 2 (Exam SYO-101) Copyright 2004 by Que Publishing. International Standard Book Number:
Security+ Practice Questions Exam Cram 2 (Exam SYO-101) Copyright 2004 by Que Publishing International Standard Book Number: 0789731517 Warning and Disclaimer Every effort has been made to make this book
NETWORKING &SECURITY SOLUTIONSPORTFOLIO
NETWORKING &SECURITY SOLUTIONSPORTFOLIO NETWORKING &SECURITY SOLUTIONSPORTFOLIO Acomprehensivesolutionsportfoliotohelpyougetyourbusiness securelyconnected.clickononeofoursolutionstoknowmore NETWORKING
Expected Outcomes Able to design the network security for the entire network Able to develop and suggest the security plan and policy
CHAPTER 9 DEVELOPING NETWORK SECURITY STRATEGIES Expected Outcomes Able to design the network security for the entire network Able to develop and suggest the security plan and policy Network Security Design
CTS2134 Introduction to Networking. Module 08: Network Security
CTS2134 Introduction to Networking Module 08: Network Security Denial of Service (DoS) DoS (Denial of Service) attack impacts system availability by flooding the target system with traffic or by exploiting
Networks and Communications MS216 - Course Outline -
Networks and Communications MS216 - Course Outline - Objective Lecturer Times Overall Learning Outcomes Format Programme(s) The objective of this course is to develop in students an understanding of the
Firewalls for Secure Unified Communications
Firewalls for Secure Unified Communications Positioning Guide 2008 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information. Page 1 of 12 Firewall protection for call control
This course prepares candidates for the CompTIA Network+ examination (2018 Objectives) N
CompTIA Network+ (Exam N10-007) Course Description: CompTIA Network+ is the first certification IT professionals specializing in network administration and support should earn. Network+ is aimed at IT
ClearPath OS 2200 System LAN Security Overview. White paper
ClearPath OS 2200 System LAN Security Overview White paper Table of Contents Introduction 3 Baseline Security 3 LAN Configurations 4 Security Protection Measures 4 Software and Security Updates 4 Security
White Paper. SIP Trunking: Deployment Considerations at the Network Edge
SIP Trunking: Deployment Considerations at the Network Edge at the Network Edge Executive Summary The move to Voice over IP (VoIP) and Fax over IP (FoIP) in the enterprise has, until relatively recently,
Security and Authentication
Security and Authentication Authentication and Security A major problem with computer communication Trust Who is sending you those bits What they allow to do in your system 2 Authentication In distributed
Symantec Client Security. Integrated protection for network and remote clients.
Symantec Client Security Integrated protection for network and remote clients. Complex Internet threats require comprehensive security. Today's complex threats require comprehensive security solutions
Communications Transformations 2: Steps to Integrate SIP Trunk into the Enterprise
Communications Transformations 2: Steps to Integrate SIP Trunk into the Enterprise The Changing Landscape IP-based unified communications is widely deployed in enterprise networks, both for internal calling
Wireless Network Security Fundamentals and Technologies
Wireless Network Security Fundamentals and Technologies Rakesh V S 1, Ganesh D R 2, Rajesh Kumar S 3, Puspanathan G 4 1,2,3,4 Department of Computer Science and Engineering, Cambridge Institute of Technology
Exam : Title : Security Solutions for Systems Engineers. Version : Demo
Exam : 642-566 Title : Security Solutions for Systems Engineers Version : Demo 1. Which one of the following elements is essential to perform events analysis and correlation? A. implementation of a centralized
TestOut Network Pro - English 5.0.x COURSE OUTLINE. Modified
TestOut Network Pro - English 5.0.x COURSE OUTLINE Modified 2018-03-06 TestOut Network Pro Outline - English 5.0.x Videos: 130 (17:10:31) Demonstrations: 78 (8:46:15) Simulations: 88 Fact Sheets: 136 Exams:
802.1x. ACSAC 2002 Las Vegas
802.1x ACSAC 2002 Las Vegas Jeff.Hayes@alcatel.com 802.1 Projects The IEEE 802.1 Working Group is chartered to concern itself with and develop standards and recommended practices in the following areas:
Cisco 5921 Embedded Services Router
Data Sheet Cisco 5921 Embedded Services Router The Cisco 5921 Embedded Services Router (ESR) is a Cisco IOS software router application. It is designed to operate on small, low-power, Linux-based platforms
Secure Communications on VoIP Networks
Mediatrix Multi-service Gateways v. 2.0.41.762 2017-12-21 Table of Contents Table of Contents Internet Telephony Network Security 4 Authentication 4 X-509 Certificates 4 Transport Layer Security (TLS)
TestOut Network Pro - English 4.1.x COURSE OUTLINE. Modified
TestOut Network Pro - English 4.1.x COURSE OUTLINE Modified 2017-07-06 TestOut Network Pro Outline - English 4.1.x Videos: 141 (18:42:14) Demonstrations: 81 (10:38:59) Simulations: 92 Fact Sheets: 145
CISCO SHIELDED OPTICAL NETWORKING
CISCO SHIELDED OPTICAL NETWORKING Dr. Gaurav Kumar Jain Regional College For Education, Research and Technology Email: gaurav.rinkujain.jain@gmail.com Tarun Kumawat JECRC,UDML,College of Engineering Purabi
Network Security. Thierry Sans
Network Security Thierry Sans HTTP SMTP DNS BGP The Protocol Stack Application TCP UDP Transport IPv4 IPv6 ICMP Network ARP Link Ethernet WiFi The attacker is capable of confidentiality integrity availability
BYOD: BRING YOUR OWN DEVICE.
white paper BYOD: BRING YOUR OWN DEVICE. On-BOaRDING and Securing DEVICES IN YOUR Corporate NetWORk PrepaRING YOUR NetWORk to MEEt DEVICE DEMaND The proliferation of smartphones and tablets brings increased
Cyber Security Guidelines for Public Wi-Fi Networks
Cyber Security Guidelines for Public Wi-Fi Networks Version: 1.0 Author: Cyber Security Policy and Standards Document Classification: PUBLIC Published Date: April 2018 Document History: Version Description
Security and Lawful Intercept In VoIP Networks. Manohar Mahavadi Centillium Communications Inc. Fremont, California
Security and Lawful Intercept In VoIP Networks Manohar Mahavadi Centillium Communications Inc. Fremont, California Agenda VoIP: Packet switched network VoIP devices VoIP protocols Security and issues in
Real-time Communications Security and SDN
Real-time Communications Security and SDN 2016 [Type here] Securing the new generation of communications applications, those delivering real-time services including voice, video and Instant Messaging,
Selling the Total Converged Solution Module #1: Nortel Enterprise Networking Overview of the 4 Pillars and Why Nortel Tom Price Nortel HQ Sales
Selling the Total Converged Solution Module #1: Nortel Enterprise Networking Overview of the 4 Pillars and Why Nortel Tom Price Nortel HQ Sales Engineer 1 Nortel Value Proposition >Nortel has an End-to-End
Security+ SY0-501 Study Guide Table of Contents
Security+ SY0-501 Study Guide Table of Contents Course Introduction Table of Contents About This Course About CompTIA Certifications Module 1 / Threats, Attacks, and Vulnerabilities Module 1 / Unit 1 Indicators
Designing Workspace of the Future for the Mobile Worker
Designing Workspace of the Future for the Mobile Worker Paulo Jorge Correia Technical Solutions Architect Building Business Value Enable mobile workers and BYOD Locate and access remote experts Collaborate
Hacker Academy Ltd COURSES CATALOGUE. Hacker Academy Ltd. LONDON UK
Hacker Academy Ltd COURSES CATALOGUE Hacker Academy Ltd. LONDON UK TABLE OF CONTENTS Basic Level Courses... 3 1. Information Security Awareness for End Users... 3 2. Information Security Awareness for
Voice over IP. What You Don t Know Can Hurt You. by Darren Bilby
Voice over IP What You Don t Know Can Hurt You by Darren Bilby What is VoIP? Voice over Internet Protocol A method for taking analog audio signals, like the kind you hear when you talk on the phone, and
Unified Communications Networks Security and Platforms
Unified Communications Networks Security and Platforms About Program Who May Apply? Learning Environment Program Overview Program Architecture Partnership with Industry Index Who is Who? 2 Index Introduction
Security SSID Selection: Broadcast SSID:
69 Security SSID Selection: Broadcast SSID: WMM: Encryption: Select the SSID that the security settings will apply to. If Disabled, then the device will not be broadcasting the SSID. Therefore it will
Chapter 24 Wireless Network Security
Chapter 24 Wireless Network Security Wireless Security Key factors contributing to higher security risk of wireless networks compared to wired networks include: o Channel Wireless networking typically
Threat Modeling. Bart De Win Secure Application Development Course, Credits to
Threat Modeling Bart De Win bart.dewin@ascure.com Secure Application Development Course, 2009 Credits to Frank Piessens (KUL) for the slides 2 1 Overview Introduction Key Concepts Threats, Vulnerabilities,
Grandstream Networks, Inc. UCM6100 Security Manual
Grandstream Networks, Inc. UCM6100 Security Manual Index Table of Contents OVERVIEW... 3 WEB UI ACCESS... 4 UCM6100 HTTP SERVER ACCESS... 4 PROTOCOL TYPE... 4 USER LOGIN... 4 LOGIN TIMEOUT... 5 TWO-LEVEL
Your wireless network
Your wireless network How to ensure you are meeting Government security standards Cabinet Office best practice Wi-Fi guidelines Overview Cyber Security is a hot topic but where do you start? The Cabinet
Grandstream Networks, Inc. UCM series IP PBX Security Manual
Grandstream Networks, Inc. UCM series IP PBX Security Manual Table of Contents OVERVIEW... 4 WEB UI ACCESS... 5 UCM HTTP Server Access... 5 Protocol Type... 5 User Login... 6 Login Settings... 8 User Management
Add a Wireless Network to an Existing Wired Network using a Wireless Access Point (WAP)
Add a Wireless Network to an Existing Wired Network using a Wireless Access Point (WAP) Objective A Wireless Access Point (WAP) is a networking device that allows wireless-capable devices to connect to
Ready Theatre Systems RTS POS
Ready Theatre Systems RTS POS PCI PA-DSS Implementation Guide Revision: 2.0 September, 2010 Ready Theatre Systems, LLC - www.rts-solutions.com Table of Contents: Introduction to PCI PA DSS Compliance 2
COPYRIGHTED MATERIAL. Contents
Contents Foreword Introduction xxv xxvii Assessment Test xxxviii Chapter 1 WLAN Security Overview 1 Standards Organizations 3 International Organization for Standardization (ISO) 3 Institute of Electrical
Digital Advisory Services Professional Service Description SIP SBC with Field Trial Endpoint Deployment Model
Digital Advisory Services Professional Service Description SIP SBC with Field Trial Endpoint Deployment Model 1. Description of Services. 1.1 SIP SBC with Field Trial Endpoint Deployment Verizon will assist
PROTECTED EXTENSIBLE AUTHENTICATION PROTOCOL
Q&A PROTECTED EXTENSIBLE AUTHENTICATION PROTOCOL This document answers questions about Protected Extensible Authentication Protocol. OVERVIEW Q. What is Protected Extensible Authentication Protocol? A.
SteelGate Overview. Manage perimeter security and network traffic to ensure operational efficiency, and optimal Quality of Service (QoS)
Internet Communications Made Safe SteelGate Overview SteelGate Overview SteelGate is a high-performance VPN firewall appliance that Prevent Eliminate threats & attacks at the perimeter Stop unauthorized
2. Firewall Management Tools used to monitor and control the Firewall Environment.
Firewall Review Section 1 FIREWALL MANAGEMENT & ADMINISTRATION Common management practices with regard to administering the (company) network should be in accordance with company policies and standards.
NGN: Carriers and Vendors Must Take Security Seriously
Research Brief NGN: Carriers and Vendors Must Take Security Seriously Abstract: The next-generation network will need to provide security on many levels. A comprehensive set of standards should be in place
Enterprise Cybersecurity Best Practices Part Number MAN Revision 006
Enterprise Cybersecurity Best Practices Part Number MAN-00363 Revision 006 April 2013 Hologic and the Hologic Logo are trademarks or registered trademarks of Hologic, Inc. Microsoft, Active Directory,
Vendor: Cisco. Exam Code: Exam Name: Cisco Sales Expert. Version: Demo
Vendor: Cisco Exam Code: 646-206 Exam Name: Cisco Sales Expert Version: Demo QUESTION 1 What are three current business factors that are influencing customer decisions in making technology investments?
SIP security and the great fun with Firewall / NAT Bernie Höneisen SURA / ViDe, , Atlanta, GA (USA)
security and the great fun with Firewall / NAT Bernie Höneisen SURA / ViDe, 29.03.2006, Atlanta, GA (USA) 2006 SWITCH Content and Firewall and NAT Privacy / Encryption SpIT / Authentication Identity General
HikCentral V.1.1.x for Windows Hardening Guide
HikCentral V.1.1.x for Windows Hardening Guide Contents Introduction... 1 1. The Operating System - Microsoft Windows Security Configuration... 2 1.1 Strict Password Policy... 2 1.2 Turn Off Windows Remote
Unified Communications Threat Management (UCTM) Secure Communications and Collaborations
Secure Cloud Communication and Collaboration. Overview The emergence of IP Voice, Video, Unified Communication and Collaborations (UC&C) technology and applications are causing a fundamental shift in the
Net-Net enterprise session border controller playbook
Net-Net enterprise session border controller playbook The leader in session delivery network solutions Why did we make this guide? To help you solidify your position as a trusted technology advisor to
Wireless Attacks and Countermeasures
Wireless Attacks and Countermeasures Wireless Network Technology Wireless network refers to any type of computer network which is wireless, and is commonly associated with a network whose interconnections
Chapter 5. Security Components and Considerations.
Chapter 5. Security Components and Considerations. Technology Brief Virtualization and Cloud Security Virtualization concept is taking major portion in current Data Center environments in order to reduce
PSTN Security. Sougat Ghosh Security Services Leader Asia, Nortel Delhi / September 29, 2008 BUSINESS MADE SIMPLE
PSTN Security Sougat Ghosh Security Services Leader Asia, Nortel Delhi / September 29, 2008 BUSINESS MADE SIMPLE 1 Disclaimer The slides and presentation templates are property of Nortel and must not be
Frequently Asked Questions (Dialogic BorderNet 500 Gateways)
Frequently Asked Questions (Dialogic BorderNet 500 Gateways) Q: What is a Dialogic BorderNet 500 Gateway, and what are its main functions? A: A Dialogic BorderNet 500 Gateway consists of a full featured
Agile Controller-Campus V100R002C10. Permission Control Technical White Paper. Issue 01. Date HUAWEI TECHNOLOGIES CO., LTD.
V100R002C10 Permission Control Technical White Paper Issue 01 Date 2016-04-15 HUAWEI TECHNOLOGIES CO., LTD. 2016. All rights reserved. No part of this document may be reproduced or transmitted in any form
Abstract. Avaya Solution & Interoperability Test Lab
Avaya Solution & Interoperability Test Lab Application Notes for Configuring Sipera Systems UC-Sec Secure Access Proxy with Avaya Aura Session Manager and Avaya Aura Communication Manager to Support Core
CISCO EXAM QUESTIONS & ANSWERS
CISCO 300-206 EXAM QUESTIONS & ANSWERS Number: 300-206 Passing Score: 800 Time Limit: 120 min File Version: 35.2 http://www.gratisexam.com/ Exam Code: 300-206 Exam Name: Implementing Cisco Edge Network
Firewall-Friendly VoIP Secure Gateway and VoIP Security Issues
Firewall-Friendly VoIP Secure Gateway and VoIP Security Issues v Noriyuki Fukuyama v Shingo Fujimoto v Masahiko Takenaka (Manuscript received September 26, 2003) IP telephony services using VoIP (Voice
VPN Routers DSR-150/250/500/1000AC. Product Highlights. Features. Overview. Comprehensive Management Capabilities. Web Authentication Capabilities
Product Highlights Comprehensive Management Solution Advanced features such as WAN failover, load balancing, and integrated firewall help make this a reliable, secure, and flexible way to manage your network.
Wireless and Network Security Integration Solution Overview
Wireless and Network Security Integration Solution Overview Solution Overview Introduction Enterprise businesses are being transformed to meet the evolving challenges of today's global business economy.