Jean-Marc LE PAPE

Bring software closer to the storage and automating the data movement is a win win in my book.

11

1 Comment

Watch Aviz #ONES Demo Series Part 10: Fabric Manager Orchestration! Simplify multi-vendor #SONiC configurations with pre-validated templates for BGP, MC-LAG, EVPN, and more. Streamline updates and ensure smooth validation. Learn more: https://hubs.li/Q02QG2Jk0

20

📝 HTTP/2 NRF Manipulation Quick Recap During the webinar earlier this week, we discussed recent 5G security research on an SBA core attack that allows adversaries to manipulate network configurations by altering records in the Network Repository Function (NRF). This can lead to attacks such as Denial of Service (DoS) and Man-in-the-Middle (MiTM). As usual, the audience raised excellent questions. 🎥  For the full version, please check out the recording on YouTube. https://lnkd.in/dSZHvjqy Below is a recap of a few key questions: 🔓 Does the specification confirm that the NRF won’t respond to discovery requests without verifying local policy? Answer: Yes, 5G specs mandate policy verification, but in practice, many implementations don't strictly follow this. The use of a service communication proxy (SCP) is an option but is rarely adopted in current networks. 🦹‍♂️ How can we prevent rogue network functions? Answer: Deploy strong authentication and authorization (e.g., OAuth 2.0 and TLS for SBI). Many operators haven’t fully implemented these due to vendor limitations and cost concerns. 👀 Why do 5G attacks go undetected despite extensive monitoring? Answer: 5G's complexity and open gateways introduce new attack vectors that traditional monitoring tools may miss, unlike in previous generations where infrastructure was simpler. 📉 Is secure roaming in 5G delayed due to IPX providers’ business interests? Answer: Yes, full encryption, as recommended by 3GPP, can block IPX providers from offering certain services, creating tension between security and business needs. Partial encryption between trusted providers is being explored. 📱 Are attacks from handsets or apps on 5G networks a concern? Answer: Yes, malformed NG-application protocol messages can disrupt 5G networks. Attacks from handsets or apps are a significant emerging risk. ☁️ Are there vulnerabilities in cloud infrastructure (e.g., Docker, Kubernetes) used for 5G network functions? Answer: Yes, 5G's use of cloud-native platforms like Docker and Kubernetes exposes it to IT-style attacks, such as privilege escalation and denial of service. Securing the full cloud stack is essential. Thank you all once again for attending the webinar and raising these questions. See you soon! 🙏 #5G #Cybersecurity #TelecomSecurity #CloudSecurity #DoS #MiTM #NRF #MobileSecurity #SBA #NetworkSecurity #SecurityGen

33

2 Comments

Fiber optic networks of several French telecommunication service providers have been “sabotaged” overnight, disrupting some fixed and mobile services.

1

It's simple. Call it Automation, CI/CD or Network as Code.... the way that we deploy, manage and operate Datacenter, WAN, Campus, and Wireless infrastructure is changing. AI workloads, cloud infrastructure and remote hybrid workforce have changed the requirements. These skills are critical for network engineers of tomorrow. Arista CloudVision and AVD makes it not only possible to quickly move ahead with these capabilities, but they also provide network engineers with a platform to learn and operationalize these critical skills. Learn all about these tools and skills in this virtual workshop on October 24.

6

2 Comments

Hey erveryone, please take a look at our new guide on configuring IP access restriction in ISE. 🤓📖 This guide covers: ✅Available options for IP access restriction in 3.1, 3.2 and 3.3 ✅Step-by-step configuration process ✅Best practices and cautions to avoid accidental lockouts ✅Troubleshooting tips IP access restriction feature allows administrators to control which IP addresses or ranges can access the ISE admin portal and services. This feature applies to various ISE interfaces and services, including: - Admin portal access adn CLI - ERS API access - Guest and sponsor portal access - My Devices portal access...and more. https://lnkd.in/grmtaQjs #ciscosecurity #ISE #ciscoISE #configuration #troubleshooting

65

4 Comments

Are you ready for the next big leap in online communication? AV1 and Lyra codecs are here to redefine real-time interactions via WebRTC, but they won’t be available on every device or in all scenarios. Don't miss out on embracing this transformative technology! Find out more with a FREE guide to WebRTC for business people bit.ly/FreeWebRTCguide #WebRTC #Innovation #TechUpdate #FutureTech

8

12 Comments

Advanced Network Security for Educational Institutions Educational institutions need robust network security like enterprises, but often face tighter budgets. Our Halo Managed Firewall & SD-WAN Service bridges this gap, offering advanced, cost-effective network security tailored specifically for educational environments. https://lnkd.in/dfFwsWpJ

3

Not sure what CI/CD pipeline means with regard to network changes? …. Nor was I. This demo blew me away and re-shaped my understanding of what is possible when approaching network as code… it’s not as far away as you may have thought. Imagine running through proposed changes and essentially doing repeated “dry runs” against a prestaged “digital twin” and taking the guess work out of what might happen when it’s “go time” in a production change. This is what CI/CD pipeline means, and it is the everyday operational norm when deploying changes in an Arista DC or campus network. You really should check out this demo. It’s a game changer.

15

1 Comment

the huge amount of money needed is a distraction. But this re emphases the need for reporting any lost item to IT and implement #Shared #Signal #Framework / #CAEP to notify trusted partners of your ecosystem. https://caep.dev poke Atul Tulshibagwale Tim Cappalli This is normal for a Gen1 of a side channel attack, we will get code for generic FPGA then dedicated board at 10$. Remember what happened for #Bitlocker https://lnkd.in/gExhbURm #Security #Auhentication #FIDO #Passkey

9

Cisco Packet Optical Networking Conference 2024 – Another Step Forward A year ago, we concluded that Cisco’s Routed Optical Networks (#RON) vision, where routers and pluggable coherent modules operate together to reduce the number of devices and operating costs of networks, has arrived. This year’s #PONC2024 conference was one step forward past 2023’s vision in that not a single participant at the conference questioned the value of collapsing routing and coherent equipment; instead, the focus was on faster speeds (800 Gbps, 1.6 Tbps), multi-vendor operations, and network automation. Most importantly, RON networks save money – numerous customer testimonials established that using #400ZR on routers enabled significant capital and operational savings compared to traditional two-layer architectures. For instance, Colt's spokesperson advised that he spends 90% less on power consumption using ZR architectures than older architectures. Read the full blog here! https://lnkd.in/g2-TpeFw

15

Integrated security. Simplified operations. Product consolidation. Learn how #Fortinet Secure #SDWAN enables organizations to deploy advanced connectivity and world-class #cybersecurity in a single, simple-to-deploy and manage solution. http://ftnt.me/26016C

2

Eight years ago I said firewalls are dead and identity is new firewall. Now you don’t need legacy VPN gateways. It’s time to control identity and connections with one solution. Once again it’s time to change. #microsoftsecurity #sse #vpn #firewall #sase #security

20

🔗 https://bit.ly/48cKMPX Register for this webinar from Forescout Technologies Inc. and Keysight to learn how they are revolutionizing cybersecurity for critical infrastructure and manufacturing. Learn about the seamless integration of Forescout for OT with Keysight’s Vision Series, providing unparalleled network visibility and security. #cybersecurity #networkvisibility #criticalinfrastructure #manufacturing

12