Colin McNamara - CCIE 18233 , VCP, RHCE, GCIH, GEEK

Ivan Pepelnjak over at IOS Hints and Tricks wrote a post about DMZ VLAN leaking that got me thinking.
He writes about “the VLAN leaking myth” and how it encourages clients to utilize physically separate network infrastructure in the DMZ’s. Now first things first, I wouldn’t call VLAN leaking a myth. At one time it was [...]

[Read more →]

One giant pain I have always faced when working with high security environments is dealing with surveillance systems. They are a necessary and required part of your security infrastructure. However they just never seem to integrate as well as your network, storage, or server devices.
When I work with data center infrastructure I expect the following [...]

[Read more →]

Zone based IOS firewalls
Cisco has finally included zone based firewalling in the IOS firewall feature set. The configuration guide can be found here -
Zone Based Firewall Design and Configuration Guide
The things that really got me interested are -
1. It is VRF aware (works well with network virtualization strategies)
2. No more CBAC’s
3. Policing built into firewalling [...]

[Read more →]