WAN optimization security

View: New views
4 Messages — Rating Filter:   Alert me  

WAN optimization security

by W W :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Our organization is looking at WAN optimization products (cisco and
riverbed).  I'm not all that familiar with eithe products, but it
seems they are file caching servers on steroids (maybe I'm over
simplifying).  My biggest concern is what if any security
considerations do I need to look at when deploying these devices?

Thanks
WW

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------


RE: WAN optimization security

by Bretten, Andrew P :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

WW, you should absolutely considor security when deploying these solutions.

Questions should come up such as does the device encrypt the data it "caches" on the device ?
How does it decrypt the data and where are the keys used for encrypt/decrypt stored ?
What are is the performance impact of encryption ?

Andy

-----Original Message-----
From: listbounce@... [mailto:listbounce@...] On Behalf Of W W
Sent: Tuesday, October 27, 2009 11:41 AM
To: security-basics@...
Subject: WAN optimization security

Our organization is looking at WAN optimization products (cisco and
riverbed).  I'm not all that familiar with eithe products, but it
seems they are file caching servers on steroids (maybe I'm over
simplifying).  My biggest concern is what if any security
considerations do I need to look at when deploying these devices?

Thanks
WW

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------


This e-mail message, including any attachments, is for the sole use of the intended recipient(s) and may contain information that is confidential and protected by law from unauthorized disclosure. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message.

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------


Re: WAN optimization security

by Ivan . :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

check this out, more of a general product spiel than specific on
security, but it does show you the maturity of the products stack up.
A good base to start of with

http://www.networkworld.com/newsletters/accel/2008/0107netop2.html

Ivan

On Wed, Oct 28, 2009 at 3:56 AM, Bretten, Andrew P
<andrew.bretten@...> wrote:

>
> WW, you should absolutely considor security when deploying these solutions.
>
> Questions should come up such as does the device encrypt the data it "caches" on the device ?
> How does it decrypt the data and where are the keys used for encrypt/decrypt stored ?
> What are is the performance impact of encryption ?
>
> Andy
>
> -----Original Message-----
> From: listbounce@... [mailto:listbounce@...] On Behalf Of W W
> Sent: Tuesday, October 27, 2009 11:41 AM
> To: security-basics@...
> Subject: WAN optimization security
>
> Our organization is looking at WAN optimization products (cisco and
> riverbed).  I'm not all that familiar with eithe products, but it
> seems they are file caching servers on steroids (maybe I'm over
> simplifying).  My biggest concern is what if any security
> considerations do I need to look at when deploying these devices?
>
> Thanks
> WW
>
> ------------------------------------------------------------------------
> Securing Apache Web Server with thawte Digital Certificate
> In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
> ------------------------------------------------------------------------
>
>
> This e-mail message, including any attachments, is for the sole use of the intended recipient(s) and may contain information that is confidential and protected by law from unauthorized disclosure. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message.
>
> ------------------------------------------------------------------------
> Securing Apache Web Server with thawte Digital Certificate
> In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
> ------------------------------------------------------------------------
>

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------


Re: WAN optimization security

by kaneda san :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

You should also look at the security of the WAN optimisation device  
itself:

* How do you administer the device?
* Can you apply ACLs to the admin interface?
* Can it be isolated on a OOB network
* Are firmware updates uploaded via SSL or can it be intercepted?, etc.


On 28/10/2009, at 3:56 AM, Bretten, Andrew P wrote:

> WW, you should absolutely considor security when deploying these  
> solutions.
>
> Questions should come up such as does the device encrypt the data it  
> "caches" on the device ?
> How does it decrypt the data and where are the keys used for encrypt/
> decrypt stored ?
> What are is the performance impact of encryption ?
>
> Andy
>
> -----Original Message-----
> From: listbounce@...  
> [mailto:listbounce@...] On Behalf Of W W
> Sent: Tuesday, October 27, 2009 11:41 AM
> To: security-basics@...
> Subject: WAN optimization security
>
> Our organization is looking at WAN optimization products (cisco and
> riverbed).  I'm not all that familiar with eithe products, but it
> seems they are file caching servers on steroids (maybe I'm over
> simplifying).  My biggest concern is what if any security
> considerations do I need to look at when deploying these devices?
>
> Thanks
> WW
>
> ------------------------------------------------------------------------
> Securing Apache Web Server with thawte Digital Certificate
> In this guide we examine the importance of Apache-SSL and who needs  
> an SSL certificate.  We look at how SSL works, how it benefits your  
> company and how your customers can tell if a site is secure. You  
> will find out how to test, purchase, install and use a thawte  
> Digital Certificate on your Apache web server. Throughout, best  
> practices for set-up are highlighted to help you ensure efficient  
> ongoing management of your encryption keys and digital certificates.
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
> ------------------------------------------------------------------------
>
>
> This e-mail message, including any attachments, is for the sole use  
> of the intended recipient(s) and may contain information that is  
> confidential and protected by law from unauthorized disclosure. Any  
> unauthorized review, use, disclosure or distribution is prohibited.  
> If you are not the intended recipient, please contact the sender by  
> reply e-mail and destroy all copies of the original message.
>
> ------------------------------------------------------------------------
> Securing Apache Web Server with thawte Digital Certificate
> In this guide we examine the importance of Apache-SSL and who needs  
> an SSL certificate.  We look at how SSL works, how it benefits your  
> company and how your customers can tell if a site is secure. You  
> will find out how to test, purchase, install and use a thawte  
> Digital Certificate on your Apache web server. Throughout, best  
> practices for set-up are highlighted to help you ensure efficient  
> ongoing management of your encryption keys and digital certificates.
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
> ------------------------------------------------------------------------
>


--


------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------