Wednesday, June 24, 2015

Tabula Rosa Systems Product Of The Day - Tufin Networks

    
============================================
Tufin provides powerful solutions for managing firewalls. For further information, contact us as mentioned below.
============================================
 Automatic Change Design, Provisioning and Verification

The Tufin Orchestration Suite slashes change handling times by automating change design and implementation across the network. It studies the network topology to identify the relevant devices, and it analyzes their security configuration to determine if a change is needed. If so, it designs the optimal change and automatically pushes it out to the network device or generates the required commands. Finally, after the change is made, the Orchestration Suite verifies that the change fulfills the original request and documents it automatically.

Network Topology Intelligence and Security Configuration Analysis

Effective change automation depends on an in-depth understanding of both the enterprise network as a whole, and of the security policy configuration on each device. Tufin’s Network Topology Intelligence automatically maps the entire network, while Security Policy Analysis simulates the access provided or blocked by each firewall, router and load balancer. Together, they enable the Orchestration Suite to design and simulate network access during the automated change process.

Central Management of Network Security Devices

In today’s complex, multi-device, multi-vendor network environment, a central view of security policy across all devices is essential. The Tufin Orchestration Suite supports all major network security devices and vendors. It gives you the ability to consistently enforce your corporate security policy on all of your devices, along with the documentation and change audit trail that you need to demonstrate compliance.

Proactive Risk Analysis and Impact Simulation

Every change to the network configuration is a potential threat to security and availability. Without Security Policy Orchestration, testing the impact of a change is virtually impossible. As part of the automated change process, the Orchestration Suite proactively checks every access request against your corporate security and compliance policies to spot violations. It also simulates the impact of every change to identify potential risks. It enables you to process changes much more quickly and at the same time, significantly reduce the risk to your organization.

Customizable Workflows

The Tufin Orchestration Suite includes customizable workflows that automate network change design, analysis and implementation according to industry best practices. Using an intuitive visual editor and simple building blocks, you can model your own business processes and meet the specific needs of your organization.

Tufin Orchestration Suite Highlights:

                Orchestration of network security processes
                Automatic change design and implementation
                Network topology intelligence
                Security policy analysis
                Central management of leading network security devices
                Customizable change workflows
                Proactive risk analysis and impact simulation
                Automatic change verification
                Continuous compliance and instant audit reports
                Interoperability with external systems

Continuous Compliance

The Orchestration Suite provides a closed-loop process for enforcing, verifying and documenting compliance with standards such as PCI DSS and SOX. It checks every access request and every change design against compliance policies before approval and after implementation. When an exception is made, the justification is documented as part of the audit trail. The Compliance Dashboard shows the current status and generates customizable reports, cutting audit preparation times by as much as 80%.

Interoperability with External Systems

The Tufin Orchestration Suite integrates with a variety of systems including help desk, ticketing and service provisioning through RESTful APIs. With the Orchestration Suite, you can seamlessly integrate network security changes into your IT operations management processes while benefitting from the deep security and network technologies that increase productivity and accuracy.
===============================================
**Important note** - contact our company for very powerful solutions for IP management (IPv4 and IPv6, security, firewall and APT solutions:

www.tabularosa.net

In addition to this blog, Netiquette IQ has a website with great assets which are being added to on a regular basis. I have authored the premiere book on Netiquette, “Netiquette IQ - A Comprehensive Guide to Improve, Enhance and Add Power to Your Email". My new book, “You’re Hired! Super Charge Your Email Skills in 60 Minutes. . . And Get That Job!” will be published soon follow by a trilogy of books on Netiquette for young people. You can view my profile, reviews of the book and content excerpts at:

 www.amazon.com/author/paulbabicki

 If you would like to listen to experts in all aspects of Netiquette and communication, try my radio show on BlogtalkRadio  Additionally, I provide content for an online newsletter via paper.li. I have also established Netiquette discussion groups with Linkedin and Yahoo.  I am also a member of the International Business Etiquette and Protocol Group and Minding Manners among others. Further, I regularly consult for the Gerson Lehrman Group, a worldwide network of subject matter experts and have been a contributor to numerous blogs and publications. 

Lastly, I am the founder and president of Tabula Rosa Systems, a company that provides “best of breed” products for network, security and system management and services. Tabula Rosa has a new blog and Twitter site which offers great IT product information for virtually anyone.
==============================================

Tuesday, June 23, 2015

Tabula Rosa Systems Product Of The Day - ThousandEyes

    
============================================
One of Tabula Rosa's great new products is ThousandEyes which monitors LAN performance in real-time.

Please contact Tabula Rosa for more information.
============================================


ThousandEyes for Enterprise and IT Operations

Performance Challenges in Enterprise Environments
The performance of a corporate network is highly dependent on different factors. Applications like VDI and VoIP are specially sensitive to the real-time state of the network.

Infrastructure/Network Performance:

                Latency: Defined as the round-trip time (RTT) between the client and server, network latency depends mostly on the physical distance between the endpoints, as well as the congestion state of the network. Higher latencies cause higher application response times, as well as lower TCP (Transport Control Protocol) throughputs. TCP throughput is actually inversely proportional to the round trip time (WindowSize/RTT). Also, because of the slow start mechanism, TCP can be quite inefficient in taking advantage of available bandwidth. The impact of the RTT is exacerbated in the case of chatty protocols, that require N rounds to complete a transaction. A transaction that would take Nx5ms inside a LAN can take Nx100ms over the public Internet, making the application virtually unusable.
                 
                                                                        Packet Loss: Packet loss can trigger TCP retransmissions and bring the throughput of the connection down. The throughput of a TCP connection is roughly proportional to sqrt(p) where p is the packet loss probability. So a connection with 2% loss has about 70% of throughput of a 1% loss connection. In fact it can be shown that in steady state, the window size of TCP with 1% loss is less than 10 packets. If each packet is 1,500 bytes long and the RTT is 100ms, that’s a throughput of 150 Kbytes/s.

                                                                        Capacity and Available Bandwidth: Capacity between two endpoints is the maximum data rate that can be achieved in the absence of any cross-traffic. Cross traffic will use a portion of the capacity, and the remaining is the available bandwidth, which determines how fast TCP connections can go. Available bandwidth in enterprise networks is typically limited by cost, not so much by technology. Currently a WAN MPLS access can cost anywhere from $300/Mbps/month to $1,000/Mbps/month (note: Access to broadband Internet is 30x less expensive in comparison). Most enterprises still route Internet traffic through their data centers (e.g. MPLS access) using Internet traffic backhauling because of security and control. This consumes expensive bandwidth in the corporate backbone.

                                                                        Routing Availability: Routing inside the enterprise is determined by interior routing protocols such as OSPF or IGRP. But for Internet traffic, different networks need to exchange routing information using the Border Gateway Protocol (BGP). BGP allows independent neighboring networks to talk to each other to decide what traffic they will exchange. This process is usually driven by economics rather than network efficiency, therefore routes are not always optimal from a latency/bandwidth point of view. BGP changes (e.g. misconfigurations) can render an entire network unreachable or induce severe performance degradation on applications (note: bgp convergence times are often in the order of 3-digit seconds.)

                                                                        Wireless Access (WLAN): Bad quality 802.11 wireless access in the branch office is a common cause for performance degradation of applications. This can be caused by degradation of the radio signal power (lower RSSI) that can be caused by interference or physical distance between the client and the access point. This is often a hard element to troubleshoot end-to-end since typically there is no access to this information without instrumenting the client or the access point.

As enterprises adopt Software-as-a-Service (SaaS), application performance becomes more dependent on what happens outside of the corporate network.
===============================================
**Important note** - contact our company for very powerful solutions for IP management (IPv4 and IPv6, security, firewall and APT solutions:

www.tabularosa.net

In addition to this blog, Netiquette IQ has a website with great assets which are being added to on a regular basis. I have authored the premiere book on Netiquette, “Netiquette IQ - A Comprehensive Guide to Improve, Enhance and Add Power to Your Email". My new book, “You’re Hired! Super Charge Your Email Skills in 60 Minutes. . . And Get That Job!” will be published soon follow by a trilogy of books on Netiquette for young people. You can view my profile, reviews of the book and content excerpts at:

 www.amazon.com/author/paulbabicki

 If you would like to listen to experts in all aspects of Netiquette and communication, try my radio show on BlogtalkRadio  Additionally, I provide content for an online newsletter via paper.li. I have also established Netiquette discussion groups with Linkedin and Yahoo.  I am also a member of the International Business Etiquette and Protocol Group and Minding Manners among others. Further, I regularly consult for the Gerson Lehrman Group, a worldwide network of subject matter experts and have been a contributor to numerous blogs and publications. 

Lastly, I am the founder and president of Tabula Rosa Systems, a company that provides “best of breed” products for network, security and system management and services. Tabula Rosa has a new blog and Twitter site which offers great IT product information for virtually anyone.
==============================================

Tabula Rosa Systems Security Alert - Google Releases Security Update for Chrome

National Cyber Awareness System:
06/22/2015 04:34 PM EDT

Original release date: June 22, 2015
Google has released Chrome version 43.0.2357.130 for Windows, Mac, and Linux to address multiple vulnerabilities. Exploitation of one of these vulnerabilities may allow an attacker to obtain sensitive information.
Users and administrators are encouraged to review the Chrome Releases Page and apply the necessary updates.

===============================================
**Important note** - contact our company for very powerful solutions for IP management (IPv4 and IPv6, security, firewall and APT solutions:

www.tabularosa.net

In addition to this blog, Netiquette IQ has a website with great assets which are being added to on a regular basis. I have authored the premiere book on Netiquette, “Netiquette IQ - A Comprehensive Guide to Improve, Enhance and Add Power to Your Email". My new book, “You’re Hired! Super Charge Your Email Skills in 60 Minutes. . . And Get That Job!” will be published soon follow by a trilogy of books on Netiquette for young people. You can view my profile, reviews of the book and content excerpts at:

 www.amazon.com/author/paulbabicki

 If you would like to listen to experts in all aspects of Netiquette and communication, try my radio show on BlogtalkRadio  Additionally, I provide content for an online newsletter via paper.li. I have also established Netiquette discussion groups with Linkedin and Yahoo.  I am also a member of the International Business Etiquette and Protocol Group and Minding Manners among others. Further, I regularly consult for the Gerson Lehrman Group, a worldwide network of subject matter experts and have been a contributor to numerous blogs and publications. 

Lastly, I am the founder and president of Tabula Rosa Systems, a company that provides “best of breed” products for network, security and system management and services. Tabula Rosa has a new blog and Twitter site which offers great IT product information for virtually anyone.
==============================================

Monday, June 22, 2015

Tabula Rosa Systems Technical Term Of The Day - Container-based Virtualization


======================================================
Posted by
Margaret Rouse
WhatIs.com
Container-based virtualization
Container-based virtualization, also called operating system virtualization, is an approach to virtualization in which the virtualization layer runs as an application within the operating system (OS). In this approach, the operating system's kernel runs on the hardware node with several isolated guest virtual machines (VMs) installed on top of it. The isolated guests are called containers. 

With container-based virtualization, there isn't the overhead associated with having each guest run a completely installed operating system. This approach can also improve performance because there is just one operating system taking care of hardware calls. A disadvantage of container-based virtualization, however, is that each guest must use the same operating system the host uses. 

Typically, corporate environments avoid container-based virtualization, preferring hypervisors and the option of having many operating systems. A container-based virtual environment, however, is an ideal choice for hosting providers who need an efficient and secure way to offer operating systems for customers to run services on. 
**Important note** - contact our sister company for very powerful solutions for IP management (IPv4 and IPv6, security, firewall and APT solutions:

www.tabularosa.net

In addition to this blog, Netiquette IQ has a website with great assets which are being added to on a regular basis. I have authored the premiere book on Netiquette, “Netiquette IQ - A Comprehensive Guide to Improve, Enhance and Add Power to Your Email". My new book, “You’re Hired! Super Charge Your Email Skills in 60 Minutes. . . And Get That Job!” will be published soon follow by a trilogy of books on Netiquette for young people. You can view my profile, reviews of the book and content excerpts at:

 www.amazon.com/author/paulbabicki

 If you would like to listen to experts in all aspects of Netiquette and communication, try my radio show on BlogtalkRadio  Additionally, I provide content for an online newsletter via paper.li. I have also established Netiquette discussion groups with Linkedin and Yahoo.  I am also a member of the International Business Etiquette and Protocol Group and Minding Manners among others. Further, I regularly consult for the Gerson Lehrman Group, a worldwide network of subject matter experts and have been a contributor to numerous blogs and publications. 

Lastly, I am the founder and president of Tabula Rosa Systems, a company that provides “best of breed” products for network, security and system management and services. Tabula Rosa has a new blog and Twitter site which offers great IT product information for virtually anyone.
==============================================

Tabula Rosa Security Alert - SB15-173: Vulnerability Summary for the Week of June 15, 2015

National Cyber Awareness System:
06/22/2015 06:44 AM EDT

Original release date: June 22, 2015
The US-CERT Cyber Security Bulletin provides a summary of new vulnerabilities that have been recorded by the National Institute of Standards and Technology (NIST) National Vulnerability Database (NVD) in the past week. The NVD is sponsored by the Department of Homeland Security (DHS) National Cybersecurity and Communications Integration Center (NCCIC) / United States Computer Emergency Readiness Team (US-CERT). For modified or updated entries, please visit the NVD, which contains historical vulnerability information.

===============================================
**Important note** - contact our company for very powerful solutions for IP management (IPv4 and IPv6, security, firewall and APT solutions:

www.tabularosa.net

In addition to this blog, Netiquette IQ has a website with great assets which are being added to on a regular basis. I have authored the premiere book on Netiquette, “Netiquette IQ - A Comprehensive Guide to Improve, Enhance and Add Power to Your Email". My new book, “You’re Hired! Super Charge Your Email Skills in 60 Minutes. . . And Get That Job!” will be published soon follow by a trilogy of books on Netiquette for young people. You can view my profile, reviews of the book and content excerpts at:

 www.amazon.com/author/paulbabicki

 If you would like to listen to experts in all aspects of Netiquette and communication, try my radio show on BlogtalkRadio  Additionally, I provide content for an online newsletter via paper.li. I have also established Netiquette discussion groups with Linkedin and Yahoo.  I am also a member of the International Business Etiquette and Protocol Group and Minding Manners among others. Further, I regularly consult for the Gerson Lehrman Group, a worldwide network of subject matter experts and have been a contributor to numerous blogs and publications. 

Lastly, I am the founder and president of Tabula Rosa Systems, a company that provides “best of breed” products for network, security and system management and services. Tabula Rosa has a new blog and Twitter site which offers great IT product information for virtually anyone.
==============================================