|
|
||||||
|
|
||||||
![]() |
|
The security demonstration centres on modelling a real-world architecture of
a central office/branch office organisation. We use Cisco Integrated Network
Security Solutions in this mock organization to effectively show how to protect
productivity gains and reduce network operating costs. The comprehensive security
offering from Cisco combines a management framework, hardware devices, identity
services, software functionalities, and applications into a single, secure infrastructure.
We also demonstrate the Cisco Self-Defending Network, an initiative to increase
network intelligence in order to enable the network to automatically identify,
prevent, and adapt to security threats. Cisco Integrated Security Cisco PIX® security appliances, the Cisco IOS® Advanced Security Feature Set, and the security services modules for Cisco Catalyst® 6500 Series switches are integrated security solutions that best represent the Cisco security philosophy. Each of these products integrates comprehensive firewall, intrusion protection, and VPN technologies in a cost-effective, single-box format. Cisco PIX security appliances, Cisco IOS Firewall, and the Firewall Services Module (FWSM) for Cisco Catalyst 6500 Series switches are Cisco's flexible integrated firewall solutions. Based on modular, scalable platforms, each offering is designed with a particular feature set, to better secure different network environments. These solutions can be independently deployed to secure specific areas of the network infrastructure, or can be combined for a layered, defense-in-depth approach following the design best practices described in the SAFE Blueprint from Cisco Intrusion Detection The Cisco IDS includes essential elements that when combined provide a secure, efficient, and comprehensive intrusion protection solution:
Network Admission Control Network Admission Control (NAC) is a Cisco Systems sponsored industry initiative that uses the network infrastructure to enforce security policy compliance on all devices seeking to access network computing resources, thereby limiting damage from viruses and worms. Using NAC, organizations can provide network access to endpoint devices such as PCs, PDAs, and servers that are verified to be fully compliant with established security policy. NAC can also identify noncompliant devices and deny them access, place them in a quarantined area, or give them restricted access to computing resources. Cisco Security Agent Cisco Security Agent provides threat protection for server and desktop computing systems, also known as endpoints. It identifies and prevents malicious behavior, thereby eliminating known and unknown ("Day Zero") security risks and helping to reduce operational costs. The Cisco Security Agent aggregates and extends multiple endpoint security functions by providing host intrusion prevention, distributed firewall capabilities, malicious mobile code protection, operating system integrity assurance, and audit log consolidation, all within a single product Cisco Identity Based Networking Services Cisco Identity Based Networking Services such as 802.1X is an integrated solution combining several Cisco products that offer authentication, access control, and user policies to secure network connectivity and resources. Cisco IBNS solution enables greater security while simultaneously offering cost-effective management of changes throughout the organization. [ Back to Top ]
|
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Important NoticesPrivacy Statement | |||