General
Multi-layered security plan
You already understand the importance of having a multi-layered security plan if you read anything about cybersecurity. We often talk about
Read More
Security Operations
Data Exfiltration over DNS
How many companies out there are monitoring DNS traffic? Are you concerned about data exfiltration over DNS? How many
Read More
Network Operations
Arista sFlow Configuration
Lately I’ve spoken to a few people in the field that are using Arista switches to get visibility into
Read More
Network Operations
Identifying Compromised Hosts
Identifying a compromised host in your environment is a common task for administrators in most network environments. What about
Read More
Configuration
Flexible NetFlow: NBAR NetFlow configuration
Did you ever consider that using Flexible NetFlow, specifically an NBAR NetFlow configuration, could provide another aspect of network
Read More
General
Network Security: Detecting Malicious Traffic with NetFlow
Today, I want to discuss how you can use NetFlow for detecting malicious traffic on your network. With all
Read More
NetFlow Reporting
Detecting Network Scans using NetFlow
As a continuation of our Network Security series, I wanted to write a blog on detecting network scans using
Read More
General
NetFlow Security: Detecting IP Fragmentation Exploits with Scrutinizer
Continuing with our series on network security monitoring with NetFlow, I’d like to discuss a strategy for detecting IP
Read More
Network Operations
Monitoring failed login attempts with IPFIX
Does your network team routinely have issues with monitoring failed login attempts? If you answered “Yes” to the previous
Read More
Network Operations
NetFlow Security: Tips and Tricks
Let’s talk about some network security tips and tricks for NetFlow. I have the privilege of interacting with network
Read More