The RazorKnow Organisation

New DefensePro Inline Security Solution Extends Network Protection from the Data Center to Regional and Branch Offices

Extending security best practices beyond corporate headquarters to safeguard regional and branch locations, Radware (NASDAQ: RDWR) the leading provider of Intelligent Application Switching (IAS) solutions today announced the expansion of its DefensePro Product line. Unveiling DefensePro 100, Radware now delivers unprecedented end-to-end security from the network core, through the corporate gateway to the branch and regional offices. With signature matching, regular updates, anomaly detection and DoS/DDoS mitigation, DefensePro protects distributed networks with an unparalleled family of Intrusion Prevention security switches.

“There is an increasing number of application level attacks targeting data centers, network edges, and even LANs. Threats come from all directions - internal, external, or other corporate locations,” said Charles Kolodgy, research director of Security Product at IDC. “As a result, enterprises and carriers must protect applications with proactive Denial of Service and Intrusion Prevention systems that mitigate attacks along the whole network infrastructure.”

Hackers target not only corporate headquarters, but remote locations which often have less security devices deployed. To safeguard against this growing trend, DefensePro 100 leverages all of the Intrusion Prevention capabilities found at headquarters and optimizes them for regional and branch deployments. With the expanded product line, Radware prevents hackers from penetrating the branch and infiltrating through the corporate private network or VPN to headquarters by blocking worms before they hit any point in the network.

“Radware DefensePro protects our critical applications in the network core, and we are excited about the new DefensePro 100 which will extend protection to our network endpoints,” said Ken Myung, IT Manager at Audiovox. “We rely on our network to generate revenue and provide in-house employees and sales people in the field with productivity services, including email and other mission critical applications. DefensePro protection ensures the continuity and performance of both incoming and outgoing traffic, while giving us a unified management tool for attack monitoring and reporting.”

DefensePro features inline security switching and accelerated, stateful, deep-packet inspection - using Radware’s industry leading StringMatch Hardware Engine - to bi-directionally scan and protect all network traffic against application level attacks. DefensePro intercepts over 1,500 malicious signatures, hidden worms and viruses, blocking application attacks at an unmatched speed of 3-Gigabits/Sec. Identifying and mitigating protocol and traffic anomalies in real-time, DefensePro prevents DoS/DDoS attacks and SYN floods, safeguarding against all illicit traffic patterns and hacking. DefensePro isolates attacks by dynamically managing bandwidth to stop propagation across users and resources while ensuring the complete continuity and performance of all secure traffic to proactively control impact and limit damage. Combining high processing power with advanced application security services DefensePro secures mission critical applications across high-speed/high capacity environments.

“The DefensePro Product line now delivers the most flexible and comprehensive IPS offering in the market with protection for all enterprise access points,” said Assaf Ronen, VP R&D, Radware. “As the number and severity of application vulnerabilities continues to grow, Radware DefensePro provides an end-to-end solution security solution that prevents the flow of intrusions, viruses and worms.”

Radware (NASDAQ:RDWR) is the Global Leader in Intelligent Application Switching, enabling the full availability, maximum performance and complete security of all mission critical networked applications while dramatically cutting operating and scaling costs.

Radware’s integrated Application Security , Application Infrastructure and End-to-End Connectivity solutions are deployed by over 2,500 enterprises and carriers worldwide. Radware offers the broadest product line in the industry meeting application needs at every critical point across the network including Web and Application Servers, Firewalls, VPNs, ISP links, Anti-Virus Gateways and Cache.

As Italy gears up for the launch of a mega fast mobile broadband service, it is the latest country to have left UK behind in the race.

Just recently, the Australian telecom firm Telstra announced that it would launch its 21MB mobile broadband service, which would first be available to the company’s business customers, and then to the general public in April. Not to be left behind, Telecom Italia has been working in collaboration with the Swedish company Ericsson, and it plans to launch its 28MB service this year. Milan would be the first city to have access to this service in June, which will be followed by a nation-wide roll out later in the year.

Ericsson, the telecom technology provider is leading the HSPA development, and is putting in a lot of effort for the growth of network technology. The collaboration with Telecom Italia will make use of the MIMO (Multiple Input and Multiple Output) technology, which allows transmission of data through two or more antenna branches, and enables much faster download speeds. The expected speed of the new service in Italy is likely to be up to four times that of the 3g broadband availability in UK. Although, the usual mobile broadband problems like long distance from the base station, cold weather, local conditions, network traffic etc. are expected to lower the connection speed available to the consumer.

The pricing is yet to be finalized, but if the high prices being charged in Australia can be seen as a hint, users may have to pay some premium to avail these fast broadband services.

Are you a dial-up user looking for a faster connection, but don’t like Broadband prices? If so, you should take a look at a new service called OnSpeed, which has received rave reviews in Internet technology publications.

What OnSpeed does is to re-route web pages and email via its own servers, compressing the data on the fly prior to sending it onwards to your PC. A small program then decompresses the data, so that you can view it in the normal way via your browser or email client.

In my own dial-up tests, with a modem running at a nominal 49kb/s I appeared to get speeds close to that of my normal broadband connection of 598 kb/s - very impressive. Image quality is often reduced but the compression for this can be improved, though with an adverse effect on the speed of course.

Also some file types like MP3 cannot yet be compressed. The company is working on these issues however and expects to find solutions soon.

Unfortunately I was unable to use email in my tests, due to a ‘port’ conflict with a spam filter that I was using. The standard advice on the OnSpeed site for such cases is to disable the
offending program. Not a constructive approach - to say the least - so I hope that the relevant instructions will be changed soon.

More significantly, the problem persisted even when I switched off the OnSpeed application on my PC; in the end I had to remove the program to get the spam filter working again. I expect that this fault can be resolved, but clearly there are issues in this area that need to be addressed.

The software is easy to install, and is available for Mac as well as Windows PCs. On the whole the service is surprisingly good, and a lot cheaper than broadband. Unlike other ’speed-up’
techniques that tweak your computer’s settings but result in little noticeable improvement, OnSpeed really works.

I can recommend OnSpeed for dial-up users who can’t justify the expense of broadband, or who are not located close enough to a suitable exchange. OnSpeed is also stated to be great for mobile or PDA users, as GPRS (wireless) speeds can be boosted by as much as 8 times. It even helps with broadband if you can only get a reduced service in your area.

My overall rating is 4/5 - very good, but the email support needs to be improved.

If you want further details of OnSpeed, please visit http://www.On-Speed.net There is a 14 day money-back guarantee, so you can try the service without any risk.

Copyright © Richard Prosser 2004

About the Author

Richard is a software developer and entrepreneur, and may be contacted via the ‘Article Tips’ site given below. This article may be published without permission, but only in its entirety.

Free email course: “Drive ‘Hot’ Prospects To Your Site For Free!”
http://www.ArticleTips.com

Decades ago Albert Einstein told us that space and time are not conditions in which we live; they are modes in which we think.

‘Nonlocality and the Observer’ is a fascinating documentation from a workshop held by Mike Wright. The first 30 minutes are a warm up into the realm of quantum physics. But then fasten your seat belts and be prepared for some big surprises that may change the way you think about yourself and your abilities to communicate with others.

Mike Wright explains how quantum theory and laboratory experiments verify that we have a connection to everyone and everything we have ever interacted with. You will learn the concepts that allow you to not only change your future but change your personal past.

Einstein also told us that what we see depends upon the theories we use to interpret our observations. Mike explains how as the Observer you affect reality. How we experience life depends upon the information we have to interpret our interactions.

The information in this video allows you to update your personal model of reality and thus change how you view the world and your experiences in it.

The Priceton Experiments In 1980 Princeton University made one of the most scientific studies on consciousness. The outcome of these experiments are still not accepted from a majority of scientists today. The implication of these experiments are on such a big scale that our consciousness has difficulties in grasping its potential.

They took two random people that were not related to one other and have never seen each other in this life time. The two participants then were told to just spend 30 minutes together. After that one participant was moved away and placed in a special room, which was completely isolated from the other person. Furthermore, the outside of the room were separated by a Faraday capsule to insure that no physical signals whatsoever could travel between the two of them.

Both participants were then hooked up withEEG (measurement for the electrical activity of the brain) readers. Now, the person in the isolated room was given visual and acoustic stimuli. The stimuli of course showed up in the EEG. But, and here is the stunning surprise of this experiment, the same stimuli showed up an the other participant’s EEG. Taking the EEG from both participants and comparing them on a time scale showed that when the person in the separated room showed a stimuli in the EEG the other person’s EEG showed the same stimuli, at the same time!

The outcome of this experiment was so exciting that they immediately came up with some other ideas. Also they thought that maybe there was a sort of placebo effect involved or maybe the human being had something special, which was causing that outcome. So they went on to widen these experiments to include animals.

The first experiments involved new born chickens. New born chickens relate to anything moving in their environment as their mother. They were building a small robot based on a random event generator, which produces simple right and left turns based on the random event being zero or one. The chickens were placed in a cage and the robot was positioned out of the cage. What happened is that the robot turned significant more times towards the cage than away from it.

The expected 50% left and right movement were no more random!

In another experiment they used new born rabbits, which are very sensitive to light. This time the robot was equipped with a bright flash light on top and was placed near the cage were the young rabbits were in. In turns out this time that the robot moved significantly more times away from the cage than towards the cage. Again, the randomness was no more random!

The Islander Group, through www.booklineshawaii.com, sells everything Hawaiian: books, CD’s, and a wide variety of gifts. The organization recently selected PRONTO North America ERP (Enterprise Resource Planning) system because it is ideally suited to both the manufacturing and distribution aspects of business. According to one of PRONTO’s Senior Manager, Tom Verzi, “The Islander Group has numerous transactions and found the our ERP system was the right fit because we understand the nature of distribution. PRONTO-XI is one of the few systems that is ideally suited to both manufacturers and distributors.”

Pronto North America, Inc. based in Eden Prairie, MN, is widely recognized as the authority in technologically driven business solutions and process management. Utilizing innovative implementation techniques and tools, Pronto North America generates increased performance, service, efficiency, and accountability. Through PEER (Process Evaluation Executive Review), Pronto North America captures the values of Lean Manufacturing throughout the enterprise. This functionality is accomplished utilizing a highly-trained world-class staff and an innovative process modeling and automation toolset unmatched in the industry, ensuring the realization of continuous process improvement and profitability.

Pronto North America is the North American Master Distributor of PRONTO-Xi, a comprehensive software system allowing manufacturers, distributors, and retailers to effectively manage all phases of their business. Far beyond just another Enterprise Resource Planning (ERP) System, PRONTO-Xi’s financial and distribution applications are unique and have provided maximum return on investment for a wide variety of organizations since 1976. From PRONTO Production to PRONTO Advanced Warehousing; from PRONTO Planning to PRONTO Quality Management System (QMS); from PRONTO Distribution Requirements Planning (DRP) to PRONTO Forecasting Management, the cross-section and breadth of integrated elements addressed by PRONTO-Xi is unmatched in the marketplace and justifies its natural leadership role as the best fully integrated business software solution.

Pronto North America
www.prontoerp.com
Tom Verzi
952-942-5858

###

About the Author

Professional Marketing Firm

When you have color printing needs, your first choice is probably a professional printer. Nowadays, the advancements in technology have made it possible for you to create print jobs in color that rival those of professional printers. Depending on the type of color printing you need, there are essentially two paths you can take to create your own color masterpieces.

The first option for printing in color from home is to use a color printer that connects to your desktop or laptop computer. You first need a computer or access to one. The computer needs to have printer software. There are numerous applications on the market that provide templates to help you with printing in color. These applications are generally inexpensive. You will also need paper that is designed for printing in color. If you will be doing a variety of printing in color, a good choice is a pack of paper that includes various sizes and styles. For example, paper that works best for color photographs is generally glossy. On the other hand, if you are planning to create a brochure, invitations, or business cards, paper that has a matte finish is probably a better choice.

Finally, you will of course need a printer. The type of printer you need depends on the type of printing in color you will be performing. Color laser printers offer the best quality, but this type of printer is only an absolute necessity when you need the best quality such as when printing full-color catalogs. For basic color needs an inkjet printer will do the trick. Be careful, not all ink jet printers that offer printing in color are the same. Your best bet is an inkjet printer with 4800 x 1200-dpi. This will enable you to print the best quality. Even if you don’t think you will need such high-quality color printing, you may need to do so later in the future.

Your second option for doing your own printing in color is to purchase a commercial printing press. A printing press is the best option when you want to print large quantities of a project in color. You may not have considered buying your own printing press because they are generally very expensive. Brand new printing presses can be very expensive. The inexpensive option is to purchase a used printing press. There are a number of ways that you can find used printing presses. The Internet is a popular choice because you can conveniently and quickly search for what you want. You may want to search Ebay, one of the top shopping resources on the Internet. Other options such as your local newspaper or auctions are great resources, but you will need to do a little legwork.

Like using a home printer, you will need a computer to produce the layout of the document that you want to print in color. When you are ready to print the document you just need to create your plates that will act as your printing template. Once you create your plate you can print as many copies as you need. The only disadvantage of buying a printing press is that if the machine malfunctions it may cost you some money to have it repaired.

Regardless of the option you choose, you can accomplish your personal color printing needs and do so without spending a lot of money.

The textbook definition of “administrative distance” is simple enough: “the measurement of a protocol’s believability”. It’s not enough to know the definition, however you’ve got to know when AD comes into the picture and when it does not.

When a packet needs to be routed, the router looks in its routing table for the next-hop IP address the packet should take to get to the destination. There may be more than one matching path, in which case the router will look for the “longest match”. The route that has the longest match - the route with the most bits in the mask set to “1″ - will be the route that is used.

Consider the following three routes from a fictional Cisco router:

I 172.17.0.0 /24 via 172.1.1.1

O 172.17.0.0 /25 via 173.1.1.1

R 172.17.0.0 /26 via 174.1.1.1

This router has three possible next-hop IP addresses that it can send packets destined for the network 172.17.0.0. The masks are of different lengths, meaning that the route with the longest match (again, the route with the most bits set to “1″) will be used. In this example, the RIP route will be used, since it has the longest match with a mask of /26. The administrative distances do not matter.

AD does matter when the masks are the same length, as shown here:

I 172.17.0.0 /24 via 172.1.1.1

O 172.17.0.0 /24 via 173.1.1.1

R 172.17.0.0 /24 via 174.1.1.1

The longest match rule always precedes the use of AD, but here there is a three-way tie regarding the masks. They’re all /24 (or 255.255.255.0 in dotted decimal). AD will be used to break this tie.

As mentioned, AD is a measurement of a protocol’s believability. It is important to keep in mind that the lowest AD will be preferred. And while the routing table will show you the ADs of the respective protocols, it’s a very good idea to know these ADs before taking the CCNA or CCNP:

Connected route: 0

Static Route: 1

EIGRP Summary: 5

External BGP: 20

EIGRP (Internal): 90

IGRP: 100

OSPF: 110

ISIS : 115

RIP: 120

EIGRP (External) : 170

Unknown: 255 (A router will not believe a source with an AD of 255, and such routes will not be placed into the routing table.)

The three protocols we looked at in the comparison were RIP, IGRP, and OSPF. While your first instinct may be that the OSPF route would be the most believable, IGRP actually has a lower AD than the other two and would be the route installed in the routing table.

Since IGRP does not support variable-length subnet masking and OSPF does, you may never see this scenario outside of an exam question. But if you do see it in the exam room or in a production network, you’ll understand how an IGRP route could be preferred over an OSPF route.

Chris Bryant, CCIE #12933, is the owner of The Bryant Advantage (http://www.thebryantadvantage.com), home of free CCNA and CCNP tutorials, The Ultimate CCNA Study Package, and Ultimate CCNP Study Packages. Video courses and training, binary and subnetting help, and corporate training are also available. Pass the CCNA exam with Chris Bryant, CCIE #12933!

Stop Getting Lost

One of the greatest uses for a pocket pc is for gps navigation. Now all those people who continually get lost can find their way anywhere with the various types of gps navigation software available. No longer will they have the excuse of not wanting to ask for directions. The directions are easily accessible from their palm pilot.

The best pocket pc gps software has a gps receiver with it. This allows you to receive constant updates. Many of the best software products for your ipaq have some other great features, too. Some of these features include detailed maps for roads and streets in the U.S., Canada and Europe. These maps can be downloaded to and from your computer and often allow you to enter personalized information.

Other gps navigation software offers topographical maps, aviation maps and marine maps. For whatever kind of travel you do, there is a gps system for your pocket pc that will work splendidly. You no longer have to worry about being lost hiking in the mountains, flying a small personal aircraft or piloting your own boat.

The best gps software packages have extremely detailed voice guidance to keep your eyes on the road instead of on your pda. This safety feature should impress even the most careful driver.

Having gps navigation software on your pocket pc makes the world a much smaller, safer place to be and a heck of a lot easier to navigate. So, find the best pc pocket gps for you and never get lost again.

About the Author

Dan Ayala is webmaster and publisher of PDA-Review-Online.com, offering reviews on PDAs, Palm Pilots, Pocket PC’s, software and accessories. PDA Review Online provides free information and recommendations for your online resources that you can download anytime or anywhere.

Passing the CCNA is tough, and one of the toughest parts is keeping all the acronyms straight! Frame Relay has plenty of those, and today we’re going to examine what DLCIs do and how they’re mapped on a Cisco router.

Frame Relay VCs use Data-Link Connection Identifiers (DLCI - pronounced “del-see”) as their addresses. Unlike other Cisco technologies, VCs have only a single DLCI in their header. They do not have a source and destination.

DLCIs have local significance only. DLCI numbers are not advertised to other routers, and other routers can use the same DLCI numbers without causing connectivity issues.

Cisco uses the term global addressing to describe a technique by which a router in a frame relay network is reached via the same DLCI number from each router in the network. For example, in a 25-router network, the same DLCI number would be used to reach “Router A” by each router.

Global Addressing is an organizational tool that does not affect the fact that DLCIs have local significance only.

The locally significant DLCI must be mapped to the destination router’s IP address. There are two options for this, Inverse ARP and static mapping.

In both of the following examples, the single physical Serial interface on Router 1 is configured with two logical connections through the frame relay cloud, one to Router 2 and one to Router 3.

Inverse ARP runs by default once Frame Relay is enabled, and starts working as soon as you open the interface. By running show frame-relay map after enabling Frame Relay, two dynamic mappings are shown on this router. If a dynamic mapping is shown, Inverse ARP performed it.

R1#show frame map

Serial0 (up): ip 200.1.1.2 dlci 122(0×7A,0×1CA0), dynamic,

broadcast,, status defined, active

Serial0 (up): ip 200.1.1.3 dlci 123(0×7B,0×1CB0), dynamic,

broadcast,, status defined, active

Static mappings require the use of a frame map statement. To use static mappings, turn Inverse ARP off with the no frame-relay inverse-arp statement, and configure a frame map statement for each remote destination that maps the local DLCI to the remote IP address. Frame Relay requires the broadcast keyword to send broadcasts to the remote device.

R1#conf t

R1(config)#interface serial0

R1(config-if)#no frame-relay inverse-arp

R1(config-if)#frame map ip 200.1.1.2 122 broadcast

R1(config-if)#frame map ip 200.1.1.3 123 broadcast

The syntax of the frame map statement maps the remote IP address to the local DLCI.
Broadcasts will not be transmitted by default; the broadcast option must be configured.

R1#show frame map

Serial0 (up): ip 200.1.1.2 dlci 122(0×7A,0×1CA0), static,

broadcast,

CISCO, status defined, active

Serial0 (up): ip 200.1.1.3 dlci 123(0×7B,0×1CB0), static,

broadcast,

CISCO, status defined, active

Hands-on practice is the best way to prepare for CCNA exam success. Working with Frame Relay in a lab environment practically guarantees that you’ll truly master the concepts shown here - and then you’re on your way to the CCNA and becoming a master network engineer.

Chris Bryant, CCIE #12933, is the owner of The Bryant Advantage, home of free CCNA and CCNP tutorials, The Ultimate CCNA Study Package, and Ultimate CCNP Study Packages.

For a FREE copy of his latest e-books, “How To Pass The CCNA” and “How To Pass The CCNP”, visit the website and download your free copies. You can also get FREE CCNA and CCNP exam questions every day! Get your CCNA study guide from The Bryant Advantage!

Radware DefensePro Nets NSS Approved Status for its IPS Solution

Helping organizations secure, optimize and ensure performance for mission critical applications, Radware (NASDAQ: RDWR) the leading provider of Intelligent Application Switching solutions, announced that recent independent tests by the NSS Group, an independent security testing facility, confirm that DefensePro offers comprehensive and reliable Intrusion Prevention System (IPS) capabilities.

Realizing that application security involves more than strictly blocking malicious content, Radware submitted its DefensePro 3000 to the NSS Group’s IPS testing program, during which they conducted a series of real-world tests that examined DefensePro’s ability to thwart attacks while ensuring the availability and performance of mission critical applications. The NSS Group’s rigorous, independent tests proved that Radware’s DefensePro 3000 secured mission critical applications across high-speed and high capacity environments. Moreover, NSS Group found DefensePro’s throughput and latency are excellent under almost all network loads and across all packet sizes, underscoring Radware’s assertion that DefensePro offers industry leading defense and application availability.

“Beyond blocking or preventing attacks, an IPS solution must also guarantee network security and application performance and reliability,” said Assaf Ronen, vice president of research and development, Radware. “The NSS Group’s tests confirmed that only DefensePro’s advanced security features can block all manner of attacks while leaving these mission-critical applications unaffected.”

The NSS Group tests underscored the unique capabilities of DefensePro and concluded that:

Under eight hours of extended attack (comprising millions of exploits mixed with genuine traffic), DefensePro blocked 100 percent of attack traffic, while passing all legitimate traffic.

DefensePro’s switching architecture helped it post excellent latency figures under all traffic loads.

DefensePro demonstrated impressive SYN protection, processing 100Mbps of SYN flood traffic with negligible latency while safeguarding against illicit traffic patterns and hacking.

DefensePro blocked application attacks at a speed of 1-Gigabit per second by identifying and mitigating protocol and traffic anomalies in real-time.

“Radware’s overall performance is quite impressive,” said Bob Walder, Director, NSS Group. “Our tests found that DefensePro detected and, more importantly, blocked all attacks -even when subjected to extreme conditions.”

About Radware Radware (NASDAQ:RDWR) is the Global Leader in Intelligent Application Switching, enabling the full availability, maximum performance and complete security of all mission critical networked applications while dramatically cutting operating and scaling costs.

Radware’s integrated Application Security , Application Infrastructure and End-to-End Connectivity solutions are deployed by over 2,500 enterprises and carriers worldwide. Radware offers the broadest product line in the industry meeting application needs at every critical point across the network including Web and Application Servers, Firewalls, VPNs, ISP links, Anti-Virus Gateways and Cache.