Cisco CCNA Certification: The Worth Of The CCNA And CCNP

One query I see typically on the ‘Net is “Is it price my time to earn a CCNA / CCNP / CCIE certification?” My personal answer to that could be a resounding yes. The facility of Cisco certifications has allowed me to create an amazing career, they usually can do the identical for you.

There has by no means been a greater time to speed up your IT profession, and incomes a technical certification is a great way to just do that. I don’t care when you’re looking at earning an MCSE, a Cisco certification, Pink Hat, or every other vendor – you are always better off having a technical certification than not having one. Technical certifications are a superb solution to market yourself and stand out from the crowd. Earning certifications reveals a potential employer (and your present one) that you are willing to go the additional mile.

Sadly, while you ask this query on most Web message boards, you’re going to get some very unfavourable individuals providing you with their “unbiased” opinion. Ask yourself this query: Do you need to entrust the route of your profession to someone you do not know, has no accountability for what they say, and has some sort of ax to grind? Would you like someone like that to resolve whether or not you must earn a CCNA or CCNP?

I can communicate from expertise on this point. When I informed just a few people that I used to be going to earn my CCIE, virtually 100% of the responses I obtained have been negative. “It’s too arduous”, “nobody can cross that”, “the CCIE is not worth the work”, etc. Each single one of these statements is fake, and again I speak from firsthand experience. The identical is true for the CCNA, CCNP, and MCSE. All of these certifications can add worth to your career and put more money in your pocket. However it’s important to make the decision to earn them and to “hold your goals away from the trolls”.

Don’t ask nameless strangers whether or not it’s “well worth the time” to get a CCNA, MCSE, or other pc certification. The one particular person you need to ask that question of is yourself. Whether you want to start an IT career or jumpstart your present one, make the choice to move ahead in your profession – after which follow via on that decision.

Whenever you’re studying in your CCNA examination on the way in which to incomes this coveted Cisco certification, the details can seem overwhelming! On this article, I’ll point out 5 Frame Relay details that you should be mindful while you’re on your solution to the CCNA examination!

Inverse ARP starts working as quickly as you open the serial interface. This protocol performs dynamic Frame Relay mapping, however you don’t have to allow it – it’s already enabled as soon as you enter the command “encapsulation frame-relay”.

If you’re configuring Frame Relay map statements manually, do not forget that you’re mapping the native DLCI to the distant IP address.

Once you run “present frame map”, the word “dynamic” signifies mappings created by Inverse ARP, and “static” signifies it was manually created.

To identify potential LMI type mismatches, run “present body lmi”. Numerous Standing Timeouts signifies that there may be an LMI downside between your router and the frame relay switch.

This last one is for the various of you building CCNA house labs. A frame relay switch is a superb addition to your lab! Whilst you’re busy putting the configuration together, do not forget the global command “frame-relay switching” – it’s this command that enables a Cisco router to act as a body relay swap!

To move the CCNA exam, you will have to be able to write and troubleshoot access lists. As you climb the ladder towards the CCNP and CCIE, you may see increasingly more uses for ACLs. Therefore, you had better know the fundamentals!

The usage of “host” and “any” confuses some newcomers to ACLs, so let’s take a look at that first.

It’s acceptable to configure a wildcard mask of all ones or all zeroes. A wildcard masks of 0.0.0.0 means the tackle specified within the ACL line have to be matched exactly a wildcard mask of 255.255.255.255 signifies that all addresses will match the line.

Wildcard masks have the choice of using the phrase host to signify a wildcard mask of 0.0.0.0. Take into account a configuration where only packets from IP supply 10.1.1.1 needs to be allowed and all different packets denied. The following ACLs each do that.

R3conf t

R3(config)access-checklist 6 permit 10.1.1.1 0.0.0.zero

R3(config)conf t

R3(config)entry-list 7 permit host 10.1.1.1

The keyword any can be utilized to characterize a wildcard masks of 255.255.255.255.

R3(config)entry-record 15 permit any Another typically overlooked element is the order of the lines in an ACL. Even in a two- or three-line ACL, the order of the strains in an ACL is vital.

Contemplate a state of affairs where packets sourced from 172.18.18.zero /24 shall be denied, however all others can be permitted. The next ACL would do that.

R3conf t

R3(config)entry-checklist 15 deny 172.18.18.zero 0.0.0.255

R3(config)entry-list 15 allow any

The earlier example also illustrates the significance of configuring the ACL with the lines in the appropriate order to get the desired results. What could be the end result if the strains had been reversed?

R3conf t

R3(config)entry-record 15 allow any

R3(config)entry-checklist 15 deny 172.18.18.0 0.0.0.255

If the traces were reversed, traffic from 172.18.18.0 /24 can be matched towards the primary line of the ACL. The first line is “permit any”, which means all visitors is permitted. The visitors from 172.18.18.0/24 matches that line, the visitors is permitted, and the ACL stops running. The assertion denying the traffic from 172.18.18.zero isn’t run.

The key to writing and troubleshoot entry lists is to take simply an additional second to read it over and ensure it may do what you propose it to do. It’s higher to comprehend your mistake on paper as a substitute of as soon as the ACL’s been applied

About the Author

You may read extra in my website , i am completely happy that you just read my article, thnak you , you may go to here

nyc bus map queens

Source URL:-Signed SSL Certificate

Alternatives to Wildcard SSL

When browsing the Internet, you may notice that some websites include a padlock next to the URL. This signifies that that website is secured by an SSL certificate, which is short for "Secure Socket Layer." The certificates are used by website developers to encrypt data transmitted on websites. For example, you should be using a SSL Certificate if you will receive customer's credit card or other sensitive information on your website. There are several alternatives to Wildcard SSL.

1. GoDaddy SSL Certificates

   • GoDaddy offers standard and premium SSL certificates that are used to secure websites. According to the site's description of the two options, the standard certificate validates domain ownership, and secures the site "within minutes." Unlike the premium version, the standard version does not offer a green address bar, which alerts visitors that the site is secure. However, it does offer the padlock icon for covered domains.

   Symantec SSL Certificates

   • Symantec offers more than 70 percent of the SSL certificates on the world's top 1,000 domains. Symentac's offers SSL certificates through its VeriSign service. It also includes daily malware scanning, ensuring that visitors machines will not be infected by visiting your site. Finally, the VeriSign SSL certificates offers the green address bar and the padlock.

   GeoTrust

   • GeoTrust is another option for SSL certificates. The website lists six different SSL certificate options. They are the True BusinessID, True Business ID with EV SSL, True BusinessID Wildcard, UC/SAN and GeoTrust QuickSSL Premium. Each certificate option offers varied features. For example, the True BusinessID certificate offers full authentication and a GeoTrust site seal, while the True BusinessID with Extended Validation offers the same features with an extended warranty.

   Network Solutions

   • Network Solutions also offers five different SSL certificate options: Limited Verification, Basic and Advanced Business/Organization Verification, along with Wildcard SSL Certificate and Extended Verification. The major differences between these are the degree of warranty for each package, along with the difference in organization sizes. For example, large organizations may prefer the "Wildcard" or the "Extended Verification," which both include a larger warranty than the smaller packages. Each also offers the browser padlock and a site seal.

     
     

     Source URL:-http://www.ehow.com/info_10019876_alternatives-wildcard-ssl.html

Facebook and Two Factor Authentication (2FA) - for better or worse?

The recent news around Facebook security and the visibility in the media of identity loss stories have some positive outcomes - end users are slowly being introduced to new terms and security concept by companies such as Google, Facebook and Dropbox in an attempt to educate the Internt population about security.

As technologists, we don't make it easy for users to understand technologies when we have so many acronyms and catchy (for some) code names. Most users wouldn't have any idea what SSL, TLS and HTTPS stand for, let alone care about the differences between them, and many don't understand that websites with a https:// and a gold coloured browser lock may be secure, but may not be a trustworthy place to provide your personal details. https certificates are cheap, and many phishing websites use them to convince users they are trustworthy.

The challenge of educating users so they make a fewer number of security impacting errors needs continued effort by providers of Internet content services from Amazon to Google to Microsoft to Yahoo, as well as support from Governments and action groups like the Australian Safer Internet Group.

On Wednesday 26th of January 2011 Facebook announced the release of several new tools to help users stay safe while using the site. Most interestingly, users are now able to enable two factor authentication (via an SMS token) to add an additional layer of security to logins, as well as browse the Facebook site via https. These changes are in addition to the Account Settings released late 2010 which enabled registration and tracking of Facebook logins and the ability to remotely 'end' a Facebook login (the ability to end sessions via SMS is not currently available to Australian users).

The two factor authentication process works as expected. If enabled from the Account Settings section within Facebook, users enter their email and password and are prompted to enter an additional code that will verify them as the account owner. An SMS code is sent to the users registered phone number and the user session is allowed access to Facebook. The site uses the mobile phone number from the Facebook user's profile.

Once the session is established, the time and date details of that session along with rudimentary geolocation information is also collected by Facebook. This allows users to check where logins to Facebook have been originated and gives users a clearer understanding of whether their account has been compromised through the loss of their password.

Paul Ducklin, from security vendor Sophos, approves. "The new feature means that you'll get warnings about unauthorised access attempts pushed to you. Furthermore, the crooks won't be able to login because they won't have the magic code in the SMS which is needed to proceed."

However, during the recent AusCERT2011 conference on the Gold Coast Amit Klein of Trusteer added another two acronyms as he warned that the criminals were targeting smartphone devices to specifically intercept SMS token security technologies; MITMO for 'man in the mobile' and ZITMO for 'zeus in the mobile' may not have caught on widely in daily banter but as concepts present a challenging threat.

Malware which takes over the device used for what would otherwise be considered 'out of band' (a mobile phone) and works hand in hand with malware which is installed on the PC is a truly scary idea.

A number of security vendors are working on anti-malware and anti-virus solutions for smartphones. This includes Kaspersky Lab who provide protection for Android, Nokia Symbian OS and Windows Mobile devices. Kaspersky Mobile 9 also offers the ability to locate a lost phone via GPS, local encryption of contacts, the ability to block outgoing SMSs with whitelists and blacklists, and a remote wipe function.

Kaspersky Mobile 9 was clearly a response to user requests. Sergev Nevstruev, Director of Mobile Services at Kaspersky Lab stated "We always listen to our clients' preferences and desires, whether in connection with the capabilities of our solutions, or our distribution channels".

Facebook’s two factor authentication (2FA) implementation does have potential limitations, once you log in from one computer and provide the 2FA authentication authorising that machine and browser combination you never need to re-authenticate with an SMS token for that machine/browser again.

Sessions from an iPhone using the Facebook app didn't register against the devices Facebook had recorded, although Facebook forced the Facebook app to login using the account username with an SMS token instead of a password once Account Security was enabled.

Ducklin continues. "It's a pity Facebook isn't offering an option to let you enable 2FA every time you login. It would be even nicer if they added a token-based option (and they'd be welcome to charge a reasonable amount for the token) for the more security-conscious user." Some banks, such as the Commononwealth Bank, provide security hardware tokens which require the user to enter a 6 digit number which the device produces at the push of a button.

So are users catching on? Only time will tell but compared to a couple of years ago your users are more likely to understand Internet security concepts because of the non-work applications they use from their home computers and that makes the job of an enterprise security architect just a little easier. 

TheSSLstore.com provide the EV SSL Certificate at discounts through its Platinum Partnership with VeriSign, GeoTrust, Thawte, and RapidSSL, offering SSL certificates at steeply discounted rates, 24/7 support, and a 30-day money back guarantee. TheSSLstore is one of the largest and most trusted SSL certificate providers globally, with clients ranging from NASA and IBM to thousands of small businesses.

Source URL:-http://searchsecurity.techtarget.com.au/news/2240036132/Facebook-and-Two-Factor-Authentication-2FA-for-better-or-worse