Blog
Network Insight.

Interactive BGP Learning Environment BGP is often introduced as the protocol used to exchange routing information between Autonomous Systems. While that definition is correct, understanding BGP properly requires looking beyond the protocol itself and understanding the networks, routing domains, policies, and forwarding infrastructure in which it operates. The Internet is …

NETWORK INSIGHT · ENGINEERING GUIDE DMVPN: Designing and Investigating Dynamic VPN Overlays Dynamic Multipoint VPN (DMVPN) combines multipoint GRE, Next Hop Resolution Protocol (NHRP), IPsec and dynamic routing to build scalable VPN connectivity across an underlying IP network. The engineering challenge is not simply creating a secure tunnel. A DMVPN …

Computer Networking Computer networking has revolutionized how we communicate and share information in today’s digital age. Computer networking offers many possibilities and opportunities, from the Internet to local area networks. This blog post will delve into the fascinating world of computer networking and discover its key components, benefits, and prospects. …

In the following ebook, we will address the key points: Challenging Landscape The rise of SASE based on new requirements SASE definition Core SASE capabilities Final recommendations     For pre-information, you may find the following links useful: SD WAN SASE Zero Trust SASE SASE Model SASE Solution Cisco Secure …

Cisco CloudLock Cloud applications have changed the way organizations store, access, and share information. Users can work with SaaS applications from corporate offices, branch locations, home networks, and mobile devices, while sensitive data can move between multiple cloud services without passing through the traditional corporate security perimeter. This creates a …

Network Connectivity Modern applications depend on connectivity. Whether a user is opening a web application, a Kubernetes workload is communicating with another service, a database is replicating across a data centre, or a cloud platform is reaching an on-premises system, the underlying requirement is the same: data must move reliably …

NETWORK INSIGHT · ENGINEERING GUIDE Cisco Firewall + IPS: From Stateful Inspection to Snort 3 Threat Prevention A modern firewall is no longer simply a barrier between an internal network and the Internet. It is an enforcement point that evaluates connection state, security policy, network context, application behaviour and, where …

Data Center Security — Engineering Guide Modern data centers are no longer simple collections of physical servers connected to a small number of network segments. They host business-critical applications, databases, APIs, virtual machines, containers, distributed platforms, cloud-connected services, and increasingly dynamic workloads. As application architectures have become more distributed, the …

Identity Security ENGINEERING GUIDE · IDENTITY SECURITY Identity is no longer simply a login mechanism. It is a continuous security signal used to authenticate users and services, determine what they are allowed to access, evaluate risk, enforce least privilege and trigger a security response when behaviour changes. Modern applications rarely …

Cisco Secure Firewall with SASE Cloud In today’s digital era, network security is of paramount importance. With the rise of cloud-based services and remote work, businesses require a comprehensive security solution that not only protects their network but also ensures scalability and flexibility. Cisco Secure Firewall with SASE (Secure Access …

Network Insight · Engineering Guide SASE & Zero Trust: From Network Perimeter to Identity-Driven Security Enterprise networks have changed. Users work from anywhere, applications increasingly run across multiple clouds, and business traffic no longer follows a predictable path through a central corporate data centre. Security therefore cannot depend on network …

Network Insight · Engineering Guide SASE Visibility with Cisco ThousandEyes: From User Experience to Network Path Secure access does not automatically mean observable access. In a SASE architecture, a user’s traffic can cross the endpoint, local network, Internet, SASE service edge, cloud provider and application before the final transaction completes. …