Cybersecurity
Cisco 350-701: ISE Policy Sets and Authorization
Cisco ISE policy is easiest to operate when engineers separate three questions: which traffic belongs to this policy set, how…
Explore / Technology subjects
Cybersecurity
Cybersecurity architecture, identity, network defense, vulnerabilities, threat detection, risk and incident response.
The reading room
All insights
Latest in Cybersecurity
296 published articles in this category.
Cybersecurity
Cisco 350-701: Secure Endpoint and Threat Response
Cisco Secure Endpoint protects hosts by combining preventive controls with endpoint telemetry that supports investigation and response. The connector can…
Cybersecurity
Cisco 350-701: Secure Firewall Architecture
Cisco Secure Firewall architecture is easier to understand when it is treated as a system of enforcement, management, inspection, identity,…
Cybersecurity
Cisco 350-701: Email & Web Security Architectures
Email and web traffic are two of the most common paths through which users encounter malicious content, credential theft, risky…
Cybersecurity
Cisco 350-701: Network Segmentation for Zero Trust
Network segmentation supports zero-trust architecture by reducing the amount of access that follows automatically from being connected to a network.…
Cybersecurity
Cisco 350-701: Remote Access VPN Design with Cisco Security
Remote access VPN design is not only about choosing an encryption protocol and defining an address pool. A production service…
Cybersecurity
Cisco 350-701: Secure Access Service Edge
Secure Access Service Edge is an architectural model for delivering networking and security controls closer to distributed users, branches, devices,…
Cybersecurity
Cisco 350-601: VXLAN EVPN Fundamentals in Cisco Data Centers
VXLAN EVPN separates a data-center network into an IP underlay and a virtual overlay. The underlay gives loopback and VTEP…
Cybersecurity
Cisco 300-715: ISE TrustSec and Security Group Tags
Cisco TrustSec changes segmentation from an address-centric problem into an identity and group-policy problem. Cisco ISE can classify users, endpoints,…
Cybersecurity
Cisco 300-715: RADIUS Authentication Troubleshooting in ISE
RADIUS authentication problems in Cisco ISE are rarely solved by staring at a single “Access-Reject” message. A complete transaction crosses…
Cybersecurity
Cisco 200-901: Secure API Authentication for Network Tools
Network APIs can expose the same authority that engineers once exercised through privileged command-line sessions, so authentication deserves the same…
Cybersecurity
AWS ANS-C01: Network Firewall and Centralized Inspection
AWS Network Firewall can protect one VPC directly or become part of a centralized inspection architecture that filters traffic across…
Cybersecurity
Microsoft SC-200: Incident Investigation Across Defender XDR
Microsoft Defender XDR is designed to correlate signals from endpoints, identities, email and collaboration, cloud apps, and integrated Microsoft Sentinel…
Cybersecurity
Microsoft SC-200: KQL Queries That Matter for Security Analysts
Kusto Query Language is the working language behind much of Microsoft Sentinel and Defender XDR hunting. Security analysts do not…
Cybersecurity
Microsoft SC-200: MITRE ATT&CK in Microsoft Security
MITRE ATT&CK gives security teams a common vocabulary for adversary tactics and techniques. Microsoft security products use that vocabulary in…