When I work with data center infrastructure I expect the following – clean, remotely manageable, secure devices that runs on the same power and similar cabling, and everything can have a 24x7x4 support contract for hardware replacement. For the most part, you get this when dealing with Cisco, HP, Sun and similar manufacturers.

More often then not (with a few very cool exceptions), when I run into video surveillance infrastructure the video management infrastructure runs on some random third tier manufactured server. It never fails that the video management software is on Windows (normally XP or win2k). I have even seen some systems where the vendor requires you to have a session open to run the software.

And then when you get to the encoders themselves, it never fails. You have two choices.

1. The Uber package that can run a Casino, Identify and track dust mites , and if you point it at space, determine if there is life on mars.
2. Individual dinky encoders that run one or two camera’s each. They have limited encoding choices, limited camera control, no remote management, and normally run on 110 volt system that require different power distribution then the 220 that is common in systems today.

Cisco’s answer to this mess

Cisco has released both a video management solution, as well as a video encoding solution in a network module form factor for the Integrated Services Router (ISR).

The first part of this system, the Video Management and Storage System (VMSS) module fills the following roles -

• Management of multiple video streams from one interface, including IP cameras, 3rd party encoders, and streams from Cisco’s video encoding module
• Streaming of live and archived footage through a web browser interface
• This one is pretty cool – The module can mount external storage via iSCSI. So, in addition to its 160 gig internal drive, you can mount a filer and utilize external storage to scale the system.
• “fast forward” to events, as well as notify security and other personnel through SMS and email

The second part of the system (the module on the left in the picture above) is the Analog Video Gateway Network Module (EV-IPVS-16A). It has a couple functions -

• It can take up to 16 analogue video inputs and encode them with MJPEG or MPEG4 codecs
• You can use the first two ports to output video to a external monitors
• If you are using MPEG4, it can be used as a motion detector (handy for fast forwarding to important events, or triggering alerts)
• It can control pan and tilt cameras. This is good for pointing the camera at the janitor unplugging your servers each night to vacuum
• You can configure analogue contacts as an alarm. This can be bound to a door switch, or even temperature and water level monitors in a remote data center. This one will be very handy.

The third part of this solution is Cisco’s Video Surveillance Operations Manager. It manages, archives, displays and distributes the content that was created and collected on the two previous modules. You would use this if you had many branches to aggregate, or needed to staff a video wall (e.g. casino gaming commission operations). Now, you can run each of these components individually. Buy run together as a whole, Cisco has an enterprise class security solution.

Want to learn more ?

Branch office security page on cisco.com http://www.cisco.com/en/US/products/ps9671/prod_module_series_home.html

Cisco’s product page for the Video Managment Module – http://www.cisco.com/en/US/prod/collateral/modules/ps9671/data_sheet_c78_462225.htmlSimilar Posts:

• Interesting TechWise TV episode on virtualization
• About Colin McNamara
• Measuring and mitigating risk involved with sharing virtual infrastructure between DMZ and Internal environments
• Nexus 5020 – Consolidated 10 Gig Ethernet and 4 Gig Fibre Channel
• Cisco Nexus 5020 and 5010 FCOE video ordering guide
• Cisco NX-OS 4.0 | Next Generation Internet Operating System

--Colin McNamara

Simplifying remote site security with Cisco’s new video surveillance modules on the ISR

Legal implications of a breach

Losing control of personal data means means more then just replacing a tape in your backup rotation. Laws vary from state to state, however generally you are required to contact the identity holders who were breached, as well as fund some sort of remediation. This has huge implications on consumer confidence, and at the end of the day stock price of your company. In some cases, such as ChoicePoint a company can be completely decimated by a breach.

Data protection regulations

There are an ever increasing number of regulations that concern the control of sensitive data. These can vary from laws focused on patient data, to financial data, to personal identification data. The most most well known laws are HIPPA, GLBA, and Sarbanes Oxley (SOX). Past that there are laws that pop up every day at the state and municipality level that further increase the requirements and expense of dealing with a breach. In short, it is becoming an expensive and in some cases criminal offense to lose control of your sensitive.

What you can do to protect your backup tapes

First things first, putting a lock on that Iron Mountain box is just not good enough. You must assume that no matter what, a determined attacker will get physical access to your tapes. So many times companies thing that just because their data format is unique or proprietary that an attacker won’t be able to access it. The cold reality is that any format can be read, and yours is not that special.

The only way to be assured that your data is safe is to encrypt it with a complex cipher. In short, you need to treat your data the same way on tape as you would if it was sitting on a public ftp site (with anonymous access enabled). Luckily Cisco has a technology that allows you to encrypt and decrypt your data coming on and off tape. This technology is storage media encryption.

Cisco Storage Media Encryption (SME)

Cisco’s Storage Media Encryption (SME) technology allows for the seamless encryption of your data flows on and off your backup tapes using AES256 standard encryption. Whether you have VSANS segregating your data, a core / edge architecture, or Virtual Tape Libraries (VTL), you can use SME to protect your data at rest, removing the possibility of an attacker getting access to your critical data.

Storage Media Encryption works by leveraging a multifunction chipset available in the 18/4 module that comes default with the 9222i and is an option for the 9500 series director class SAN switches. Chipset has a couple functions, including line rate encryption of iSCSI and FCIP data streams at gigabit speeds, as well as line rate encryption of data as it streams your tape or virtual tape library’s (VTL).

Want to learn more ?

SAN and NAS, Oreilly Press – In the classic Oreilly style by W. Curtis Preston, this book is a great starting place to understanding the fundamentals of San and Nas architectures that many people are likely to face.

Storage Media Encryption for Cisco MDS SAN Switches – http://www.cisco.com/en/US/products/ps8502/index.html . Cisco has lumped together a couple good data sheets here, though I may have to write a future article taking a deap dive on what really drives SME.Similar Posts:

• Identity aware networking using Cisco TrustSec
• Cisco Nexus 7000 DataCenter switch released – Welcome to DataCenter 3.0
• My CCIE Storage Shopping List
• Cisco is using Linux virtualization and 40 core CPU’s for its next generation routers
• Why was Storage Networking my first CCIE? And What did I do to prepare?
• How to succede in 2007 – By Tim O’Reilly

--Colin McNamara

Encrypting your backup tapes with Cisco Storage Media Encryption (SME)

1. The first and foremost goal is to only use “white hat” or legal ways of increasing her visibility
2. Get Ashley on page 1 for four target keywords
3. Get An indented listing

Well, it looks like I met my initial goals. Now to move to some more generic keywords and see what goes from there.
Copyright ©2008 | Colin McNamara | CCIE 18233 | All Rights Reserved”

Colin McNamara
CCIE #18233

http://www.2cups.com

“The difficult we do immediately, the impossible just takes a little longer.”Similar Posts:

• Study on Perspective – Set 1
• Taking a closer look
• Why can’t I post from docs.google.com to blogger beta?
• Gall stones update – Kaiser sucks
• Great TCL and EEM preso found on IOS hints and tricks -
• Sun Project Backbox

--Colin McNamara

What being married to a geek who does search engine optimization gets you

A traditional Christmas dinner in early England was the head of a pig prepared with mustard.

“White Christmas,” released in 1954, starring Bing Crosby and Danny Kaye, was the first movie to be made in Vista Vision.

The holiday classic, “It’s A Wonderful Life,” was originally a box office flop.

The real Santa Claus was born in 280 A.D. as Nicholas. He commonly wore a red and white Bishop’s robe.

“Xmas” is considered by some to be a disrespectful abbreviation. But the Old English word for Christmas begins with X. The Greek word for “Christ,” from which the English is derived, begins with the Greek letter chi, or X. So, X is an appropriate abbreviation for Christ.

The first electric Christmas tree lights were telephone switchboard lights.

About 400,000 people get sick each year from consuming tainted Christmas leftovers.

In 1907, Oklahoma became the last U.S. state to make Christmas a legal holiday.

America’s official national Christmas tree grows in California’s King’s Canyon National Park. The tree is a giant sequoia standing more than 300 feet high, and it’s called the “General Grant Tree.”

Christmas trees are edible. Many parts of pines, spruces and firs can be eaten.

According to the laws of the time, Joseph could have had Mary stoned to death for becoming pregnant.

“Hot Cockles” was a popular game at Christmas in medieval times. In the game, players took turns striking a blindfolded player, who had to guess the name of the person delivering each blow.

Toys for Tots held its first toy drive in 1947.

Boris Karloff was the voice of the Grinch in the animated classic, “How the Grinch Stole Christmas.”

During the Christmas shopping season, Visa cards alone are used an average of 5,340 times every minute in the US

According to a recent survey, seven out of 10 dogs in Great Britain get Christmas gifts from their owners.

“Wassail” comes from the Old Norse term, “ves heill,” meaning “to be of good health.” This evolved into the popular holiday tradition of visiting neighbors on Christmas Eve and drinking to their health.

The average American household will send out 28 Christmas cards each year, and will receive the same number in return.

Boxing Day, celebrated in Canada, has nothing to do with fighting. It refers to the custom of giving gift boxes to employees the day after Christmas. Originally, it was the day Christmas presents were given in England.

Jesus Christ was born in a cave, not in a stable.

The first Christmas card was made in England on December 9, 1842.

The ancient Druids believed the sparks from a burning log carried wishes for a prosperous New Year to the gods, hence the tradition of yule logs.

According to the National Christmas Tree Association, Americans buy 37.1 million real Christmas trees each year.

Charles Dickens wrote several Christmas stories after “A Christmas Carol,” one each year, in fact, but none could match the success of the original.

The Julbock is a common Christmas decoration in Sweden. It’s a small figurine of a goat made from straw.

In Sweden, the “tomte” is a Christmas gnome.

According to “How the Grinch Stole Christmas,” the Grinch was so mean because his heart was two sizes too small.

There are about 5,000 “choose and cut” Christmas tree farms in the US

St. Nicholas is the patron saint of children, scholars, merchants, sailors and women without dowries.
Copyright ©2008 | Colin McNamara | CCIE 18233 | All Rights Reserved”

Colin McNamara
CCIE #18233

http://www.2cups.com

“The difficult we do immediately, the impossible just takes a little longer.”Similar Posts:

• 3 minute management course
• CCIE Party 2008 Recap – Cisco Live Networkers 2008
• A little trivia to start the week
• Kylie Launching in Yosemite while sledding
• What does it take to pass the CCIE exam?
• Why GoDaddy Linux Virtual Dedicated Hosting Sucks & How to Fix It

--Colin McNamara

Christmas Trivia