Learn Ccna and Microsoft Server 2012

07/01/2021

'Network Security"
Topic: VAPT Introduction

Vulnerability Assessment and Pe*******on Testing (VAPT) describes a broad range
of security testing services designed to identify and help address cyber security
exposures.

In order to ensure that you choose the right type of assessment for your organisation’s
needs, it’s important to understand VAPT services and the differences between them.
The diverse nature of VAPT assessments means that they can vary significantly in
depth, breadth, scope and price.

What is VAPT?

VAPT is a term used to describe security testing that is designed to identify and help
address cyber security vulnerabilities. VAPT could include anything from automated
vulnerability assessments to human-led pe*******on testing and red team operations.

Why do you need VAPT?
The evolving tools, tactics and procedures used by cybercriminals to breach networks
means that it’s important to regularly test your organisation’s cyber security.
VAPT helps to protect your organisation by providing visibility of security weaknesses
and guidance to address them. VAPT is increasingly important for organisations wanting to achieve compliance with standards including the GDPR , ISO 27001 and PCI DSS .

VAPT Services
The broad definition of VAPT means the various services it describes are often
confused and used interchangeably. Before commissioning any form of VAPT security
testing, organisations should be aware of the services an assessment could include:

"Vulnerability Assessment "
A vulnerability assessment , often encompassing vulnerability scanning, is designed to help identify, classify and address security risks. Vulnerability assessment services also provide the ongoing support and advice needed to best mitigate any risks identified.

"Pe*******on Testing"
Pe*******on testing, or pen testing for short, is a multi-layered security assessment that
uses a combination of machine and human-led techniques to identify and exploit
vulnerabilities in infrastructure, systems and applications.

A pen test conducted by a professional ethical hacker will include a post-assessment
report detailing any vulnerabilities discovered and remediation guidance to help address
them.

Types of pe*******on testing:
● Internal/external infrastructure testing
● Web application testing
● Wireless network testing
● Mobile application testing
● Build and configuration review testing
● Social engineering testing

06/01/2021

SD-WAN: Is It Right for Your Network?

Summary: Software-Defined Wide-Area Networking (SD-WAN) can offer a number of advantages over traditional networking techniques for enterprises moving to virtualized IT environments.

Current Analysis research has identified some key determinants that early adopters of SD-WANs have used to
justify – or not justify – the use of SD-WAN within their network:
1) Are your IaaS/SaaS/PaaS solutions performing according to spec? If so, then there’s not necessarily aneed to deploy new networking technology such as a software-defined WAN. If not, then a new
solution might give better cloud app performance and flexibility.

2) Do considerable changes in the network need to be made on a continuous or ongoing basis? Thesechanges may include technical changes as well as commercial ones. This point also relates to theoverall evolution of IT towards pay-as-you-go. If the pay-as-you-go model is attractive in theorganization, then SD-WAN solutions will help to achieve this compared to more static and traditionalIP/MPLS VPNs.

3) Do we have mission-critical applications that are bandwidth-hungry or particularly jitter-sensitiveand which need to be secure and free of congestion or quality of service issues? Organizations thathave adopted SD-WAN have reported an enhanced ability to segment off portions of the network toaddress quality of service issues resulting from congestion on ‘peaky’ traffic from apps using voice orvideo.

4) Do we have a large number of remote sites with multiple WAN links, or are we planning to? Forlarger networks with multiple sites and WAN links, SD-WAN functional and economic advantages canbe compelling. However, with a smaller number of sites or if a majority of sites are singly connected,the advantages are harder to identify.

Architecture Choices: Three Options
If SD-WAN seems to answer one or more of these key questions, then it’s worth taking a closer look at the options to deploy SD-WAN in your network.

Three approaches can be considered, making more or less use of existing routing equipment and virtual CPE (vCPE) or universal CPE (uCPE):

 Deploy an overlay SD-WAN solution leveraging the existing IP router footprint
o If the enterprise has a major existing IP router estate then it may wish to preserve the existing
equipment and leverage an overlay solution for implementing SD-WAN. The overlay solution
offers the ability to failover to the traditional WAN setup in case there are issues with the SD-WAN infrastructure.
o Overlay solutions may lack capabilities in aligning existing OSS/BSS platforms in place with theservice provider, meaning a loss of some flexibility for billing and flexible payment for utilitySD-WANs.
o This approach will also require efforts for the existing WAN – be that IP VPN or Ethernet VPN,as well as implementing policy routing and on-going service chaining.
o Some routers available in the market today can support per-flow path forwarding based on
link performance and application policy, and network and application monitoring.

 Deploy a mixture of existing IP routers and vCPE/uCPE
o The vCPE or ‘thin CPE’ involves the virtualization of CPE, and this runs in the cloud.
o uCPE – or ‘Universal CPE’ is a site-based Intel server module that can support physical
networking such as being a branch router for multiple WAN interfaces including 3g/LTE, and beremotely manageable for running for example VNFs and hosted business communications likemedia gateways for SIP interoperability, etc .
o Most enterprise customers will want to explore a blend of existing IP VPN architecture withsome aspects of the WAN, featuring core SD-WAN based on core SDN/NFV and vCPE/uCPE.
Such deployments might begin with the SD-WAN architecture initially focusing on automatingIT between HQ sites and the data centres where cloud apps are being served from.
o Some of the technical issues mentioned in the overlay architecture are likely to apply to this
mixed set-up scenario, such as lack of support for fully integrated orchestration of the OSS/BSSfunctions.

 Deploy full SD-WAN based entirely on a new appliance, x86 server, or gateway on site, or on
vCPE/uCPE
o Virtualized software runs on x86 as a VM or containerized solution.
o The SD-WAN benefits from central orchestration and policy-based routing control.
o Enterprises adopting the full SD-WAN approach may employ the full range of SD-WANfeatures, including intelligent path selection, policy management, full automation, integrationwith OSS/BSS, zero touch deployment and security functions like IPsec VPN and firewalling.

Enterprises also need to consider whether to use a virtual SD-WAN controller in the cloud, or premises-based SD-WAN controller software. This choice tends to be sector-specific. For example, banking and financial firms
today tend to prefer premises-based controllers since financial firms more often run private MPLSenvironments; whereas retail chains, which favor public Internet and broadband links, may opt for cloud-hosted SD-WAN controller solutions.

"Key Use Cases for SD-WAN: Technical, Functional, and Economic"

Technical-
Traditional WANs are not Architected Specifically for Running Cloud Apps – Most SD-WAN solutions in the market focus on solving business connectivity that demands among other things major use of services
from within the cloud. Traditional IP/MPLS VPNs have adapted and evolved to feature connectivity to cloud estates, including both private and public clouds but there remain certain limitations on performance (i.e.,
scaling bandwidth) and app priority parameters over public Internet. Hybrid WAN solutions do offer APM and WAN optimization features, but for more comprehensive applications control, it is important to be able to understand how apps are behaving in the network and to be in a position to tailor or tweak SD-WAN parameters to maintain the apps running in the cloud in an efficient working fashion. Enterprises are
right to expect a self-serve interface within an online portal that allows them to make changes – and behind the self-serve feature lies automation so that changes do not demand intensive manual actions.

Functional-
Adding or removing sites – There are too many manual procedures for implementing such changes at the branch. Often a large enterprise will need to scale or shrink operations and this requires new office locations and end-users to be integrated with the existing WAN. The new SD-WAN environment should support the addition of new sites rapidly over multiple access types, such as leased line, Internet access, MPLS, 3G/4G LTE, and broadband. Provisioned circuits and interconnections need to meet the corporate security policy and be documented as per governance rules. SD-WAN services demonstrated that moves,
adds, and changes can be performed more conveniently and with fewer complications that might arise from say re-writing CLI scripts from scratch for every site. Policy driven SD-WAN configurations combined with automated policy selection and configuration enable zero-touch provisioning for drop-shipped CPE
devices on existing IP routers or via universal CPE (uCPE).
SD-WAN techniques such as these reduce human errors that creep into networks configured with manual configuration steps.
Try before you buy and Rapid Provisioning – MPLS does not offer the flexibility or agility for quickly deploying changes and for example trying out features for a short duration before committing to buy.
SD-WAN solutions increasingly support more choice of virtual network functions (VNFs) and both solution architecture and VNFs running over the test network design give engineers far greater flexibility for testing the network and the performance of cloud apps on the network before scaling to a full deployment.

Economic-
Scaling MPLS Can Take Time and Drive Up Costs – how can a new network solution help bypass the current inflexible nature of MPLS circuits? The central orchestration software for an SD-WAN should provide the systems administrator or network engineer with an interface that supports quick changes to
circuit design and performance parameters.

23/04/2020

https://youtu.be/n2D1o-aM-2s

13/11/2018

https://www.excitingip.net/146/enterprise-inter-branch-connectivity-wide-area-network/

Credits: excitingip

Most of the companies have multiple branches and more often than not, they would want a good network connectivity (Wide Area Network) across these branches. So, let us look at some of the popular o…

27/05/2017

Applicable for job seekers ! And fresher's .

Nokia CEO ended his speech saying this “we didn’t do anything wrong, but somehow, we lost”.

During the press conference to announce NOKIA being acquired by Microsoft, Nokia CEO ended his speech saying this “we didn’t do anything wrong, but somehow, we lost”. Upon saying that, all his management team, himself included, teared sadly.

Nokia has been a respectable company. They didn’t do anything wrong in their business, however, the world changed too fast. Their opponents were too powerful.

They missed out on learning, they missed out on changing, and thus they lost the opportunity at hand to make it big. Not only did they miss the opportunity to earn big money, they lost their chance of survival.

The message of this story is, if you don’t change, you shall be removed from the competition.

It’s not wrong if you don’t want to learn new things. However, if your thoughts and mindset cannot catch up with time, you will be eliminated.

Conclusion:
1. The advantage you have yesterday, will be replaced by the trends of tomorrow. You don’t have to do anything wrong, as long as your competitors catch the wave and do it RIGHT, you can lose out and fail.

To change and improve yourself is giving yourself a second chance. To be forced by others to change, is like being discarded.
Those who refuse to learn & improve, will definitely one day become redundant & not relevant to the industry. They will learn the lesson in a hard & expensive way!

23/05/2017

Some improvement and cool technologies by Google.

https://www.wired.com/2017/05/slickest-things-google-debuted-today-big-event/

From a new chip processor to Google Assistant on iOS.

08/05/2017

https://drive.google.com/drive/mobile/folders/0ByWO0aO1eI_MN1BEd3VNRUZENkU?sort=13&direction=a

Important self study content.

27/03/2017

STP is protocol that builds a loop free topology in meshed structure .Have you know this emerged with VLAN PVSTP (Per VLAN Spanning Tree Protocol .