Security Intelligence Operations - Cisco Systems
Guest

Security Intelligence Operations

Service Provider Security Best Practices

Service Provider Security Best Practices assist service providers as they protect and secure the Internet Infrastructure through the design and deployment of security and operational practices, techniques, and capabilities.

Cisco Guide to Harden Cisco IOS XR Devices

Secure Cisco IOS XR system devices through increased protection of the management, control, and data planes.
Read More

Data Plane Security Features
Interface Access Control Lists
Protecting Your Core: Infrastructure Protection Access Control Lists
Access List Performance Improvements for Cisco 12000 Gigabit Switch Routers
Cisco IOS IPv6 Access Control List
Implementing Access Lists and Prefix Lists on Cisco IOS XR Software

Interface Quality of Service Policies
Cisco IOS Quality of Service Solutions Configuration Guide, Release 12.4
Implementing QoS for IPv6 - Cisco IOS IPv6 Configuration Guide, Release 12.4
Catalyst 6500 Release 12.2SXH and Later Software Configuration Guide - Configuring PFC QoS

Unicast Reverse Path Forwarding
Understanding Unicast Reverse Path Forwarding
Unicast Reverse Path Forwarding in Strict Mode on the Cisco 12000 Series Internet Router
Unicast RPF for IPv6 on the Cisco 12000 Series
Unicast Reverse Path Forwarding Enhancements for the Internet Service Provider-Internet Service Provider Network Edge
URPF MIB
CISCO-IP-URPF-MIB Support

IPv4 Options Handling
Cisco IOS 12.0S - IP Options Selective Drop
IP Options Selective Drop
Creating an IP Access List to Filter IP Options, TCP Flags, Noncontiguous Ports, or TTL Values

IPv6 Extension Headers
IPv6 Extension Headers Review and Considerations
Countermeasures for the Malicious Use of IPv6 Type 0 Routing Headers
ICMPv6 Packet Types and Codes

Flexible Packet Matching
Catalyst 6500 - Cisco IOS Software Security: Flexible Packet Matching
Cisco IOS Flexible Packet Matching Deployment Guide
Flexible Packet Matching XML Configuration

Remote Triggered Black Hole Filtering
Remotely Triggered Black Hole Filtering - Destination Based and Source Based

Control Plane Security Features
Receive Access Control Lists
Cisco IOS Software Releases 12.0 S IP Receive ACL
GSR: Receive Access Control Lists

Control Plane Policing
Understanding Control Plane Protection
Control Plane Policing Implementation Best Practices
Control Plane Policing
Configuring Control Plane Policing
Cisco Nexus 7000 Series NX-OS Security Configuration Guide, Release 4.1 - Configuring Control Plane Policing
Cisco IOS Software Releases 12.2 SB Control Plane Policing

Local Packet Transport Services
Implementing LPTS on Cisco IOS XR Software
LPTS Commands on Cisco IOS XR Software

Selective Packet Discard
Understanding and Using Selective Packet Discard
Troubleshooting Input Drops on the Cisco 12000 Series Internet Router
Understanding Selective Packet Discard (SPD)

Routing Protocol Security - BGP
Neighbor Router Authentication: Overview and Guidelines
BGP Neighbor Router Authentication
BGP Neighbor TTL Security
Cisco IOS Software Releases 12.2 S BGP Support for TTL Security Check
Cisco IOS Software Releases 12.0 S - BGP Enforce the First Autonomous System Path
How to Block One or More Networks From a BGP Peer
BGP Prefix-Based Outbound Route Filtering
Configuring the BGP Maximum-Prefix Feature

Routing Protocol Security - IS-IS
Configuring IS-IS Authentication
Cisco IOS XR Routing Command Reference, Release 3.7 IS-IS Authentication (Hello-Password)
IS-IS HMAC-MD5 Authentication and Enhanced Clear Text Authentication
IPv6 Multi-Topology IS-IS
Cisco IOS Software Releases 12.0 S IS-IS Mechanisms to Exclude Connected IP Prefixes from LSP Advertisements
Overview of IS-IS Fast Convergence
Setting Best Practice Parameters for IS-IS Fast Convergence

Routing Protocol Security - OSPF
Cisco IOS XR Routing Command Reference, Release 3.7 OSPF Authentication
Sample Configuration for Authentication in OSPF
Cisco IOS XR Software - Configuring Generalized TTL Security Mechanism (GTSM) for OSPF

Routing Protocol Security - OSPFv3
Cisco IOS XR Routing Command Reference, Release 3.7 OSPFv3 Authentication

Routing Protocol Security - Keychain Management
Implementing Keychain Management on Cisco IOS XR Software
Keychain Management Commands on Cisco IOS XR Software

Label Distribution Protocol Security
MPLS LDP - Lossless MD5 Session Authentication
MPLS LDP Session Protection
MPLS LDP MD5 Global Configuration
MPLS LDP - Local Label Allocation Filtering

Resource Reservation Protocol Security
Deploying RSVP in Multiple Security Domains Networks: Securing Application Quality of Service
RSVP Message Authentication
Cisco IOS Software Releases 12.0 S RSVP Message Authentication
Cisco IOS XR MPLS Command Reference, Release 3.7 RSVP Authentication