Cascadeo Corp. http://www.cascadeo.com Engineering Elegance Sun, 20 Jan 2013 11:24:25 +0000 en-US hourly 1 http://wordpress.org/?v=3.5.1 Integration is key to everything: Zenoss / COSS / Pagerduty http://www.cascadeo.com/blog/zenoss-coss-pagerduty-integration?utm_source=rss&utm_medium=rss&utm_campaign=zenoss-coss-pagerduty-integration http://www.cascadeo.com/blog/zenoss-coss-pagerduty-integration#comments Thu, 08 Nov 2012 06:47:09 +0000 Cascadeo Corporation http://www.cascadeo.com/?p=497 The full document could be accessed in this location.

]]> http://www.cascadeo.com/blog/zenoss-coss-pagerduty-integration/feed 0 The End of IPv4: What Your Company Should Know http://www.cascadeo.com/blog/the-end-of-ipv4-what-your-company-should-know?utm_source=rss&utm_medium=rss&utm_campaign=the-end-of-ipv4-what-your-company-should-know http://www.cascadeo.com/blog/the-end-of-ipv4-what-your-company-should-know#comments Sun, 16 Sep 2012 11:49:58 +0000 Cascadeo Corporation http://www.cascadeo.com/?p=321 On February 3, 2011, the Internet Assigned Numbers Authority (IANA) distributed the last blocks of IPv4 address space in the free pool to the Regional Internet Registries (RIRs), ARIN, RIPE, AFRINIC, APNIC, and LACNIC. This followed a global policy stating that when the IANA had only five /8-sized blocks, it would give one to each RIR. This means that after this year, no more new IPv4 addresses will be given out.

Currently, Internet service providers (ISPs) apply to one of the RIRs for IP address space, based on policies developed for their region. ISPs, in turn, assign IP address space to their customers. Organizations may also go directly to an RIR, to get provider-independent (PI) address space.

Now that the IANA has no more IPv4 address space, the RIRs will no longer receive new IP addresses directly from IANA and will run out of IPv4 addresses this year. How does this affect you? The next time you or your ISP requests additional IPv4 address space, the request will be rejected. Although opportunities to acquire IPv4 addresses from organizations that have spare allocations may exist, this will likely be both difficult and costly.

Fortunately, the IPv4 Internet will continue to function properly even when all IPv4 address space is gone. However, growing businesses will find expansion increasingly difficult, without additional address space to connect more devices and customers.

What is IPv6?

By the 1990s, IPv4 address space was clearly running out. The Internet Engineering Task Force (IETF), the primary standards body for the Internet, designed a protocol called IPv6. Compared with IPv4’s 32-bit (2^32) address space, IPv6’s enormous 128-bit (2^128) address space easily provides enough space for the foreseeable future. However, many businesses have been slow to adopt IPv6 because of the significant effort involved in doing so and the critical need that was not yet apparent.

What does this mean for your business?

IPv6 does not operate alongside IPv4, but as a completely separate protocol. Businesses that want to remain competitive must apply a mechanism to their infrastructure that allows both versions to run. Therefore, it is essential that your network devices be upgraded and configured to run dual-stack, to cope with the coming IPv6 traffic and to let your business continue to grow. Dual-stack refers to running IPv4 and IPv6 simultaneously. This allows your servers to respond simultaneously both to the old IPv4 requests and to the newer IPv6-connected devices.

Cascadeo recommends a complete audit of your network and systems infrastructure, to determine how to upgrade it to dual-stack. Once the audit is done, a comprehensive transition plan can be implemented.

It will be a very long time, if ever, before IPv4 will be completely gone from the Internet. However, any company with a presence on the Internet, but without IPv4 reserves, must migrate to IPv6 in order to grow.

World IPv6 Day

On June 8, 2011, many major Internet-based companies around the world will go IPv6 for the day. Sites like facebook.com and google.com will change their DNS so that you can reach them only via IPv6. This is a test to motivate everyone to start thinking about, and migrating to, IPv6.

Cascadeo encourages you to review the links below and consider taking part in World IPv6 Day.

We look forward to working with you on the exciting transition ahead!

References:

World IPv6 Day

IANA Free Pool Exhaustion

]]> http://www.cascadeo.com/blog/the-end-of-ipv4-what-your-company-should-know/feed 0 FAIL: IPv6 on Home Routers and DSL/Cable Modems http://www.cascadeo.com/blog/fail-ipv6-on-home-routers-and-dslcable-modems-2?utm_source=rss&utm_medium=rss&utm_campaign=fail-ipv6-on-home-routers-and-dslcable-modems-2 http://www.cascadeo.com/blog/fail-ipv6-on-home-routers-and-dslcable-modems-2#comments Sat, 16 Jun 2012 11:49:18 +0000 Cascadeo Corporation http://www.cascadeo.com/?p=319 Most consumer routers and DSL/cable modems/routers are not ready for IPv6.

Get to work, vendors…tick tock.

]]> http://www.cascadeo.com/blog/fail-ipv6-on-home-routers-and-dslcable-modems-2/feed 0 Thanks, Center for Internet Security (more security docs) http://www.cascadeo.com/blog/thanks-center-for-internet-security-more-security-docs?utm_source=rss&utm_medium=rss&utm_campaign=thanks-center-for-internet-security-more-security-docs http://www.cascadeo.com/blog/thanks-center-for-internet-security-more-security-docs#comments Wed, 16 Nov 2011 11:48:20 +0000 Cascadeo Corporation http://www.cascadeo.com/?p=315 Another cache of documents for your reading pleasure. This time thanks go to the Center for Internet Security (CIS).

Debian Linux Benchmarks

Microsoft Windows 7 Benchmarks

Router Assessment Tool

VMware Benchmarks

Microsoft Windows 2000 Benchmarks

Microsoft Windows 2008 Benchmarks

Cisco Device Benchmarks

Apple iPhone Benchmarks

Wireless Network Devices Benchmarks

Apple OSX Benchmarks

Apache HTTP & Tomcat Benchmarks

Microsoft Windows 2003 Benchmarks

Unix Scoring Tools

Juniper Device Benchmarks

Microsoft Windows XP Benchmarks

CIS Windows XP Professional Benchmark v2.0.1

]]> http://www.cascadeo.com/blog/thanks-center-for-internet-security-more-security-docs/feed 0 Yet Another Cache of Excellent Network Security Documents http://www.cascadeo.com/blog/yet-another-cache-of-excellent-network-security-documents-2?utm_source=rss&utm_medium=rss&utm_campaign=yet-another-cache-of-excellent-network-security-documents-2 http://www.cascadeo.com/blog/yet-another-cache-of-excellent-network-security-documents-2#comments Wed, 16 Nov 2011 11:47:37 +0000 Cascadeo Corporation http://www.cascadeo.com/?p=313 We’ve been uncovering quite the mother lode of excellent docs lately. This one is from FIRST (Forum of Incident Response and Security Teams).

Highlights include:

Enjoy!

]]> http://www.cascadeo.com/blog/yet-another-cache-of-excellent-network-security-documents-2/feed 0 Official Announcement Regarding IPv4 Exhaustion/IPv6 Migration http://www.cascadeo.com/blog/official-announcement-regarding-ipv4-exhaustion-ipv6-migration-2?utm_source=rss&utm_medium=rss&utm_campaign=official-announcement-regarding-ipv4-exhaustion-ipv6-migration-2 http://www.cascadeo.com/blog/official-announcement-regarding-ipv4-exhaustion-ipv6-migration-2#comments Wed, 16 Nov 2011 11:21:36 +0000 Cascadeo Corporation http://www.cascadeo.com/?p=310 From: ARIN
Date: February 1, 2011 7:09:02 AM EST
To: Subject: [arin-announce] Significant Announcement 3 February – Watch it Live!

On Thursday, 3 February 2011, at 9:30 AM Eastern Standard Time (EST), the Number Resource Organization (NRO), along with the Internet Corporation for Assigned Names and Numbers, the Internet Society (ISOC,) and the Internet Architecture Board (IAB) will be holding a ceremony and press conference to make a significant announcement and to discuss the global transition to the next generation of Internet addresses.

Much has been written in the international media over the last few weeks about the dwindling pool of Internet addresses using the original Internet protocol, called IPv4 (Internet Protocol version 4), and this topic will be addressed at the event.

We invite all interested community members to view the webcast of this event at: http://www.nro.net/news/icann-nro-live-stream.

In the event you happen to be at the Intercontinental Hotel in Miami on Thursday, there will be limited public seating available to attend (with press receiving seating priority) in Room “Concourse II” at 9:30 AM EST for the ceremony and 10:00 AM for the press conference that follows.

Regards,

Communications and Member Services
American Registry for Internet Numbers (ARIN)

]]> http://www.cascadeo.com/blog/official-announcement-regarding-ipv4-exhaustion-ipv6-migration-2/feed 0 Egypt Travels Back to the Stone Age http://www.cascadeo.com/blog/egypt-travels-back-to-the-stone-age?utm_source=rss&utm_medium=rss&utm_campaign=egypt-travels-back-to-the-stone-age http://www.cascadeo.com/blog/egypt-travels-back-to-the-stone-age#comments Wed, 16 Nov 2011 11:17:25 +0000 Cascadeo Corporation http://www.cascadeo.com/?p=306 It’s happened…Egypt’s last functioning ISP was forced to pull the plug. We are fortunate here in the U.S. because we have a huge number of possible routes to the rest of the Internet and the world. In Egypt, the situation is much more dire and susceptible to control.

]]> http://www.cascadeo.com/blog/egypt-travels-back-to-the-stone-age/feed 0 Another Cache of Excellent Network Security Documents http://www.cascadeo.com/blog/another-cache-of-excellent-network-security-documents?utm_source=rss&utm_medium=rss&utm_campaign=another-cache-of-excellent-network-security-documents http://www.cascadeo.com/blog/another-cache-of-excellent-network-security-documents#comments Wed, 16 Nov 2011 11:16:53 +0000 Cascadeo Corporation http://www.cascadeo.com/?p=304 Today’s cache of excellent documents is thanks to the National Institute of Standards and Technology, Computer Security Division. Your tax dollars at work…in a good way.

Enjoy!

Guide to IPsec VPNs
sp800-77.pdf

Border Gateway Protocol Security
SP800-54.pdf

Establishing Wireless Robust Security Networks: A Guide to IEEE 802.11i
SP800-97.pdf

Guidelines on Firewalls and Firewall Policy
sp800-41-rev1.pdf

Guide to Securing Legacy IEEE 802.11 Wireless Networks
SP800-48r1.pdf

Guide to General Server Security
SP800-123.pdf

DRAFT A NIST Definition of Cloud Computing
Draft-SP-800-145_cloud-definition.pdf

DRAFT Guidelines on Security and Privacy in Public Cloud Computing
Draft-SP-800-144_cloud-computing.pdf

Guide to Security for Full Virtualization Technologies
SP800-125-final.pdf

DRAFT Information Security Continuous Monitoring for Federal Information Systems and Organizations
draft-SP-800-137-IPD.pdf

DRAFT Guide for Security Configuration Management of Information Systems
draft_sp800-128-ipd.pdf

Guide to Securing WiMAX Wireless Communications
sp800-127.pdf

Guidelines on Cell Phone and PDA Security
SP800-124.pdf

Guidelines for the Secure Deployment of IPv6
sp800-119.pdf

DRAFT Guide to Enterprise Password Management
draft-sp800-118.pdf

Technical Guide to Information Security Testing and Assessment
SP800-115.pdf

User’s Guide to Securing External Devices for Telework and Remote Access
SP800-114.pdf

Guide to SSL VPNs
SP800-113.pdf

Guide to Storage Encryption Technologies for End User Devices
SP800-111.pdf

Information Security Handbook: A Guide for Managers
SP800-100-Mar07-2007.pdf

Guide to Secure Web Services
SP800-95.pdf

Guide to Intrusion Detection and Prevention Systems (IDPS)
SP800-94.pdf

Guide to Computer Security Log Management
SP800-92.pdf

Guidelines for Media Sanitization
NISTSP800-88_rev1.pdf

Guide to Integrating Forensic Techniques into Incident Response
SP800-86.pdf

Guide to Test, Training, and Exercise Programs for IT Plans and Capabilities
SP800-84.pdf

Guide to Malware Incident Prevention and Handling
SP800-83.pdf

Secure Domain Name System (DNS) Deployment Guide
sp-800-81r1.pdf

Guidance for Securing Microsoft Windows XP Home Edition: A NIST Security Configuration Checklist
guidance_WinXP_Home.html

Guide to Securing Microsoft Windows XP Systems for IT Professionals
download_WinXP.html

Security Considerations for Voice Over IP Systems
SP800-58-final.pdf

Recommendation for Key Management
sp800-57-Part1-revised2_Mar08-2007.pdf

Building an Information Technology Security Awareness and Training Program
NIST-SP800-50.pdf

Security Guide for Interconnecting Information Technology Systems
sp800-47.pdf

Guide to Enterprise Telework and Remote Access Security
sp800-46r1.pdf

Guidelines on Electronic Mail Security
SP800-45v2.pdf

Guidelines on Securing Public Web Servers
SP800-44v2.pdf

Nov 2002Systems Administration Guidance for Windows 2000 Professional System
guidance_W2Kpro.html

Creating a Patch and Vulnerability Management Program
SP800-40v2.pdf

Guide to Selecting Information Technology Security Products
NIST-SP800-36.pdf

Guide to Information Technology Security Services
NIST-SP800-35.pdf

Aug 2000PBX Vulnerability Analysis: Finding Holes in Your PBX Before Someone Else Does
sp800-24pbx.pdf

Generally Accepted Principles and Practices for Securing Information Technology Systems
800-14.pdf

Telecommunications Security Guidelines for Telecommunications Management Network
sp800-13.pdf

An Introduction to Computer Security: The NIST Handbook
handbook.pdf

Guide to Protecting the Confidentiality of Personally Identifiable Information (PII)
sp800-122.pdf

]]> http://www.cascadeo.com/blog/another-cache-of-excellent-network-security-documents/feed 0 Excellent guide relating to Cisco Security BCP (h/t NSA) http://www.cascadeo.com/blog/excellent-guide-relating-to-cisco-security-bcp-ht-nsa?utm_source=rss&utm_medium=rss&utm_campaign=excellent-guide-relating-to-cisco-security-bcp-ht-nsa http://www.cascadeo.com/blog/excellent-guide-relating-to-cisco-security-bcp-ht-nsa#comments Thu, 22 Sep 2011 19:44:20 +0000 Cascadeo Corporation http://www.cascadeo.com/?p=154 Found a great document by our friends at the NSA regarding Router Security Practices. No references to installing backdoors… grin.

]]> http://www.cascadeo.com/blog/excellent-guide-relating-to-cisco-security-bcp-ht-nsa/feed 0 IPv4 Is Toast…IPv6 Is NOW http://www.cascadeo.com/blog/ipv4-is-toast-ipv6-is-now?utm_source=rss&utm_medium=rss&utm_campaign=ipv4-is-toast-ipv6-is-now http://www.cascadeo.com/blog/ipv4-is-toast-ipv6-is-now#comments Wed, 09 Mar 2011 19:42:56 +0000 Cascadeo Corporation http://www.cascadeo.com/?p=151 As announced at the last American Registry for Internet Numbers (ARIN) meeting, the IPv4 address space will be exhausted as early as February of next year. The process of upgrading from IPv4 to IPv6 is non-trivial and depends on appropriate planning, coordination and, in some cases, hardware and software upgrades. If you have not started down this path, we highly recommend that you begin focusing on it immediately.

For the past 20+ years we have used the Internet Protocol version 4 (IPv4) numbers. These number are what allow all computers, servers, and routers to communicate with each other. The IPv4 set of numbers has 32 bits, or about 4 billion possible addresses. After the extreme growth of the Internet over the years, we are now on the verge of running out of IPv4 addresses. The Regional Internet Registries (RIRs) are responsible for allocating addresses to organizations around the globe, and the American Registry for Internet Number (ARIN) is responsible for allocating address space for the North American region.

Over the past couple of years, the Internet community has closely followed the accelerated draining of the free pool of IPv4 addresses due to the proliferation of mobile devices and tremendous growth of Internet usage in developing countries like China and India. A number of statistical models are being used to predict when exhaustion will occur but, unlike Y2K, it is impossible to know the exact date of exhaustion due to the large number of organizations involved in the allocation process. Based upon the best data available today, the RIRs will run out of freely available IPv4 addresses in 2011.

For the past 10 years we have been working toward the deployment of IPv6, a new numbering scheme that has plenty of numbers available (2^128) to accommodate the growth of the Internet for the foreseeable future. The implementation of IPv6 requires careful planning and engineering to ensure a smooth deployment across various networks. A number of transition methods and technologies must be considered when planning the move to IPv6. Devices only on the IPv6 network cannot directly communicate with the existing IPv4 network, so a transition technology is necessary for all devices to be able to communicate with the entire Internet.

Different types of companies must prepare in different ways for the IPv6 transition. Content providers must ensure that their hosting services are accessible to IPv6 users by adding IPv6 services to their servers or by using a transition technology. Broadband access providers are often in constant need of more IPv4 addresses as they install new customers. After IPv4 addresses run out, additional IPv4 addresses for new customers will likely be scarce and thus new subscribers must be installed by using IPv6. These new subscribers also need a transition technology to bridge the gap between the IPv6 network and the existing IPv4 Internet. Enterprises must ensure that they can reach IPv6 sites as well.

Preparation for IPv6 deployment starts with understanding how the Internet will evolve as we run out of IPv4 addresses. The next steps include auditing your equipment and software to validate that it supports IPv6, training your IT staff to understand IPv6, creating a plan to deploy IPv6 and, lastly,  executing on a plan to fully enable your network to support IPv6.

Cascadeo is well versed in IPv6, including having two members of our team serving on various ARIN advisory councils. For additional information regarding IPv6 or assistance in planning and deploying IPv6, contact us!

ipv6@cascadeo.com
206-577-1155

Additional IPv6 Resources:

IPv6 Info Wiki
ARIN’s IPv6 Education Site
IPv4 Depletion and IPv6 Adoption Presentation
IPv4 Address Report

———————-

From: ARIN
Date: Mon, Oct 18, 2010 at 6:58 AM
Subject: [arin-announce] Remaining IPv4 Address Space Drops Below 5%
To: arin-announce@arin.net

The Number Resource Organization (NRO) announced today that less than 5% of the world’s IPv4 addresses remain unallocated following IANA’s distribution of two IPv4 /8s to APNIC. The IANA IPv4 free pool has now dropped to 12 /8s, or 4.69%. The IPv4 free pool dipped below 10% in January, just nine months ago. Since then, over 200 million IPv4 addresses have been allocated from IANA to the five Regional Internet Registries (RIRs).

The number of IPv4 allocations is expected to grow by only 8% this year. In contrast, the five RIRs are expected to allocate over 2,000 IPv6 address blocks, representing an increase of over 70% on the number of IPv6 allocations in 2009. These statistics indicate an absence of any last minute “rush” on IPv4 addresses and a strong momentum behind the adoption of IPv6.

When the IANA IPv4 free pool has only five /8 blocks remaining, they will be simultaneously distributed to the five RIRs in accordance with global Internet number resource distribution policy. This means that only seven blocks remain to be handed out under the normal distribution method. At current depletion rates, the last five IPv4 address blocks will be allocated to the RIRs in early 2011.

The pressure to adopt IPv6 is mounting. Many worry that without adequate preparation and action, there will be a chaotic scramble for IPv6, which could increase Internet costs and threaten the stability and security of the global network. ARIN encourages you to deploy IPv6 now. Visit https://www.arin.net/knowledge/v4-v6.html for more information on IPv6 adoption, or contact us at info@arin.net with any questions.

Regards,

Communications and Member Services
American Registry for Internet Numbers

_______________________________________________
ARIN-Announce
You are receiving this message because you are subscribed to
the ARIN Announce Mailing List (ARIN-announce@arin.net).
Unsubscribe or manage your mailing list subscription at:
http://lists.arin.net/mailman/listinfo/arin-announce

]]> http://www.cascadeo.com/blog/ipv4-is-toast-ipv6-is-now/feed 0