Cisco. NetFlow services and applications, 1999. White paper, available from http://www.cisco.com/warp/public/732/ netflow.  Home/Search   Document Not in Database   Summary   Related Articles   Check

....re compilation or re linkage of TCP based client applications to use the appropriate encapsulation routines in the SOCKS library. Often this is not possible. Also it can be used only for communication between known partners, which restrict its usability. The PIX firewall system developed by Cisco [12] is based on a combination of stateful filters and proxies. Their approach is to authenticate a user at a proxy and to build up the initial connection. If this is successful all session flows are directly passedthrough between the two parties while maintaining control of the session state. This ....

Cisco: Cisco's PIX Firewall Series and Stateful Firewall Security, White Paper, 1997

....by the CA and the token considers it as trusted A highly automated scanner token communication protocol is achieved Enrolment procedure for scanner system certificates. The scanner system certificate can be issued by the CA using a standard procedure, as described in the SCEP protocol [1]. The advantage of using this protocol lies in the fact that the entire procedure can take place without involving the end user. Of course, the use of any automatic system, however standard it may be, needs the scanner system to be provided with suitable implementation software. Password ....

: Cisco system's simple certificate enrollment protocol. White paper, (Cisco)

....our CDN brokering system. We are actively participating in this effort, which incorporates many of our ideas. DNS based load balancing has been widely used for load distribution among Web servers or caches; various products in this area include Alteon s GSLB [1] and Cisco s Distributed Director [4]. These companies disclose few details about their load 9 CDN Brokering WCW 01 balancing algorithms. Unlike these DNS based implementations, CDN brokering uses DNS to load balance among entire CDNs. Finally, Shaikh and Tewari [15] consider the problem of measuring the network proximity of client ....

Cisco Systems, Inc. DistributedDirector. White paper. 



....significantly increasing growth in the confidential data traffic over the Internet makes the security issue a fundamental problem. Confidential data has to be protected against security threats including loss of privacy, loss of data integrity, identity spoofing, and denial of service among others [2]. Consequently, applications such as electronic banking, electronic commerce, and Virtual Private Networks (VPNs) require an efficient and cost effective way to address the security threats over public networks. The Internet Protocol Security (IPSec) standard is an ongoing effort of the Internet ....

....of the significance of IPSec in the global electronic business. From US 224 million in the year 1998, the VPN market is forecast to grow to US 13,000 million in the year 2004 [7] The IPSec standard is a framework of open standards for ensuring secure private communication over the Internet [2]. It extends the IP protocol by securing the IP traffic at the IP level using cryptographic methods. Since it provides security at the IP level, there is no need for changing the end systems, the applications, and the intermediate network infrastructure. The only required changes occur at the end ....

[Article contains additional citation context not shown here]

Cisco Systems, Inc., "IPSec", White paper, http://www.cisco.com/warp/public/cc/cisco/ /mkt/security/encryp/tech/ipsec wp.htm

....of the hosting platform can map the domain names of all web sites hosted by the system into the set of IP addresses of distributors. In response to a client query, the DNS server will send the IP address of a distributor that is the closest in the network to the client. See [9] and, commercially, [11] for implementations of DNS name resolution based on the origin of the requester. Note that this usage of the DNS service conforms to the assumption behind the existing DNS infrastructure that the mapping of DNS name into IP addresses changes slowly. Unlike sets of replicas for a given object, ....

....a fixed set of server replicas. Socalled load balancers use a a front end IP multiplexing device (see [14] for a survey of some of these products) to balance load among Web servers on a local area network. Several approaches use DNS servers for the same purpose [21, 12] CISCO Distributed Director [11], IBM Network Dispatcher [20] and WindDance Web Challenger [31] allow request distribution over a wide area network. None of these systems o#er dynamic object replication or migration. ArrowPoint s Content Smart Switch allows multiplexing requests among replicas on a per page basis [3] While ....

Cisco Systems, Inc. DistributedDirector. White paper. http://www.cisco.com/warp/public/734/distdir/dd wp.htm.

....geographical scalability, especially from the bandwidth consumption perspective. The latency gain is limited by the need for client acknowledgements to travel via the multiplexor. 3. 3 DNS Indirection Several domain name server implementations (e.g. the one used in CISCO Distributed Director [6]) allow the Web site s DNS server to map a host domain name to a set of IP addresses and choose one of them for every client query, based on such factors as the query origin and the load of server replicas. The difference with DNSbased client multiplexing is that choosing a replica occurs at the ....

....client request with a special message that tells the client to resubmit its request to another server. This mechanism can be used to build a special Web server which accepts client requests, chooses replicas for them and redirects clients to these replicas. Commercially, CISCO Distributed Director [6] and WindDance Web Challenger [19] implement this functionality. An advantage of HTTP level redirection is that replication can be managed at fine granularity, down to individual Web pages, whereas other mechanisms postulate the entire Web site as the granule. A disadvantage is that this mechanism ....

Cisco Systems, Inc. DistributedDirector. White paper. http://www.cisco.com/warp/public/734/distdir/dd wp.htm.

....of the hosting platform can map the domain names of all web sites hosted by the system into the set of IP addresses of distributors. In response to a client query, the DNS server will send the IP address of a distributor that is the closest in the network to the client. See [9] and, commercially, [11] for implementations of DNS name resolution based on the origin of the requester. Note that this usage of the DNS service conforms to the assumption behind the existing DNS infrastructure that the mapping of DNS name into IP addresses changes slowly. Unlike sets of replicas for a given object, ....

....a fixed set of server replicas. Socalled load balancers use a a front end IP multiplexing device (see [14] for a survey of some of these products) to balance load among Web servers on a local area network. Several approaches use DNS servers for the same purpose [21, 12] CISCO Distributed Director [11], IBM Network Dispatcher [20] and WindDance Web Challenger [31] allow request distribution over a wide area network. None of these systems offer dynamic object replication or migration. ArrowPoint s Content Smart Switch allows multiplexing requests among replicas on a per page basis [3] While ....

Cisco Systems, Inc. DistributedDirector. White paper. http://www.cisco.com/warp/public/734/distdir/dd wp.htm.

....it is consistent with the unicast paradigm, i.e. meter and charge at the network entry point, and (ii) it avoids the ambiguities involved in equitably splitting the charges among multiple receivers. Out of band settlements are always available if needed. 6 One example is Cisco s NetFlow software [6], which can be configured to support various charging schemes such as QoS based charging and distance sensitive charging. 7 We do not consider the case where proxy caches are installed at the edges of the network, in which case subsequent requests from the same subnet may be satisfied from the ....

Cisco. NetFlow. White paper, August 1997. <URL:http://www.cisco.com /warp/public/732/netflow/nflow_wp.htm>

....files into a graphical representation of the current policy on the actual topology. Such a visualization allows a quick first evaluation of the viability of a chosen policy. 1. 3 Related Work There are many firewall products on the market, from vendors such as Check Point [Che97] Cisco [Cis97] Sun Microsystems [WC98] Lucent Technologies [LMF98] AltaVista, and Network Associates, just to mention a few (see [Ful98] for an updated list of vendors) Additionally, there are many books on firewall technology and on how to build your own firewall (e.g. CB94, CZ95] A recent treatment ....

Cisco's PIX firewall series and stateful firewall security. White paper, 1997. http: //www.cisco.com/warp/public/751/pix/nat wp.pdf.

....configuration files into a graphical representation of the current policy on the actual topology. Such a visualization allows a quick first evaluation of the viability of a chosen policy. 1.3. Related Work There are many firewall products on the market, from vendors such as Check Point [4] Cisco [6], Sun Microsystems [19] Lucent Technologies [14] AltaVista, and Network Associates, just to mention a few. See [9] for an updated list of vendors) Additionally, there are many books on firewall technology and on how to build your own firewall (e.g. 5, 3] A recent treatment can be found in ....

Cisco's PIX firewall series and stateful firewall security. White paper, 1997. http://www.cisco.com /warp/public/751/pix/nat wp.pdf.

No context found.

Cisco. NetFlow services and applications, 1999. White paper, available from http://www.cisco.com/warp/public/732/ netflow.

Online articles have much greater impact   More about CiteSeer.IST   Add search form to your site   Submit documents   Feedback  

CiteSeer.IST - Copyright Penn State and NEC