OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
SANS NewsBites Vol. 5 Num. 23

From: The SANS Institute (NewsBitessans.org)
Date: Wed Jun 11 2003 - 17:44:06 CDT


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

A bonus for Cisco users at the end of this issue:
"SANS CISCO NEWS UPDATE"
Cisco routers and switches are nearly ubiquitous and are increasingly
being targeted by hackers as entry points for networks. To try to help
network administrators, engineers, and managers and security folks keep
up with important new developments on the Cisco front, SANS began this
week publishing a definitive weekly summary of new alerts and
countermeasures with announcements from industry news sources for
everything useful we can find pertaining to Cisco and its immediate
competition.

You'll find a sample issue at the end of this NewsBites.
Subscribe today (it's free) at: http://www.sans.org/newsletters/

We would love your feedback on ways to help make it more useful.

                                 Alan

P.S. For our readers in the UK, we're scheduling an executive briefing
entitled "Internet Threat Update and Innovative Defenses" at the end of
SANS Hammersmith 2003 in London. To get an invitation to the briefing
(free to everyone who works at companies or agencies that are sending
delegates to SANS Hammersmith 2003, and a small fee to others) email
sansrosans.org with subject Hammersmith Briefing.

For information on the 5 immersion training tracks on basic and advanced
security and audit topics at SANS Hammersmith 2003:
http://www.sans.org/hammersmith03/

***********************************************************************
SANS NewsBites June 11, 2003 Vol. 5, Num. 23
***********************************************************************

TOP OF THE NEWS
  DHS Establishes National Cyber Security Division
  OIS Releases Draft Disclosure Guidelines
  New Laws in Taiwan Make Hacking a Felony
  Addressing Security During Software Development Saves Money

THE REST OF THE WEEK'S NEWS
  Wired Magazine Article Includes Slammer Code
  Microsoft to Improve Patch Management
  Bugbear Variant is Spreading
  Bugbear.B Sent Out Stanford Documents
  Apple OS X Update
  Microsoft Releases Cumulative Patch for IE
  LA Police Officer Suspended for Allegedly Accessing Databases
  Gartner: Security Will Consume Greater Portion of IT Budgets
  Sobig.C Worm
  New Attack Requires Little Bandwidth, Consumes Machines' Resources
  Quarterly CERT/CC Summary
  Business Software Alliance Says Piracy Rate Shows Modest Decline
  GAO Report: IRS Systems Security Still Needs Work
  Cyber Corps Troubles Lead to Reorganization Effort

******************** Sponsored by VeriSign, Inc. ********************

Simplify Security for Web Services and Applications.

Traditional firewalls have minimal application awareness - hindering
consistent enforcement of security standards - as well as your ability
to extend functionality to partners. Our FREE white paper shows you how
to extend application and web services security beyond the firewall.

Click here to get your copy:
http://www.verisign.com/cgi-bin/go.cgi?a=n37440124794002000

***********************************************************************

TOP OF THE NEWS
 --DHS Establishes National Cyber Security Division
(6 June 2003)
The Department of Homeland Security (DHS) will establish the National
Cyber Security Division, which will incorporate the Critical
Infrastructure Assurance Office (CIAO), the National Infrastructure
Protection Center (NIPC), the Federal Computer Incident Response Center
(FedCIRC) and the National Communications System. The new, 60-employee
office will be a part of the DHS Information Analysis and Infrastructure
Protection (IAIP) directorate. The Division will have three units: the
first will focus on identifying cyber security risks and eliminating
vulnerabilities in government and critical infrastructure systems, the
second will focus on detecting and responding to cyber security
incidents, and the third will encourage cyber security awareness. The
office does not yet have a chief.
http://www.washingtonpost.com/ac2/wp-dyn/A24147-2003Jun6?language=printer
http://www.gcn.com/vol1_no1/daily-updates/22360-1.html
http://www.govexec.com/dailyfed/0603/060603td1.htm
http://www.securityfocus.com/news/5544

 --OIS Releases Draft Disclosure Guidelines
(4/5 June 2003)
The Organization for Internet Safety (OIS), a coalition comprised of
security and software companies, has drafted a set of guidelines that
defines a standardized process for sharing information about security
vulnerabilities. The draft gives software makers seven days to respond
to researchers' notifications of flaws, and asks that the companies
develop a patch for the problem within 30 days. The researchers who
find the flaws are required to keep vulnerability details under their
hats for 30 days after the release of the patch. OIS is accepting
comments on the draft by e-mail until July 4.
http://zdnet.com.com/2102-1105_2-1013423.html?tag=printthis
http://www.securityfocus.com/news/5458
http://www.oisafety.org/process.html
[Editor's Note (Schneier): A patch within 30 days, then publication 30
days after the patch is developed means up to 60 days (assuming the
patch is developed that quickly); that seems a bit excessive to me, but
not irrational.]

 --New Laws in Taiwan Make Hacking a Felony
(4 June 2003)
Two new articles added to Taiwan's criminal code make hacking a felony.
Obtaining unauthorized access to a proprietary computer system is now
punishable by a prison term of up to three years and a fine of up to
NT$100,000. Causing damage by attempting to alter data on someone
else's computer disks is punishable by a prison term of five years and
a fine of up to NT$200,000. Punishment is even more stringent for
attacks against government computer systems.
http://www.chinapost.com.tw/detail.asp?ID=38185&GRP=A
[Editor's Note (Schultz): It sounds as if Taiwan is getting serious
about computer crime. I hope this helps inspire other countries to do
the same.]

 --Addressing Security During Software Development Saves Money
(4 June 2003)
Software flaws are costing the economy $59.5 million annually, according
to the National Institute of Standards and Technology (NIST). An IBM
study has shown that the cost of fixing a software flaw after the
software has gone to market is nearly 15 times more than the cost of
finding and fixing flaws during development. Software developers must
have time to pay attention to security during the development process.
They should receive training and be provided with tools to check for
vulnerabilities in specific environments.
http://computerworld.com/newsletter/0,4902,81785,00.html?nlid=SEC
[Editor's Note (Schneier): I've been saying this for years; it's nice
to have some objective proof.]

************************ SPONSORED LINKS ******************************
Privacy notice: These links redirect to non-SANS web pages.

(1) Stop attacks before damage is done. Download LURHQ's whitepaper
     "The Foundation for Effective Incident Handling"
http://www.sans.org/cgi-bin/sanspromo/NB179

(2) Stop Network Attacks versus just Detecting. Intrusion Prevention
     Essentials White Paper
http://www.sans.org/cgi-bin/sanspromo/NB180

(3) FREE White Paper: "How Web Application Hackers Break In!"
http://www.sans.org/cgi-bin/sanspromo/NB181

(4) Alert! Email attacks & spam are getting worse. Learn to stop them.
http://www.sans.org/cgi-bin/sanspromo/NB182
***********************************************************************

THE REST OF THE WEEK'S NEWS

 --Wired Magazine Article Includes Slammer Code
(6 June 2003)
Wired Magazine plans to publish code for the Slammer worm in its July
issue. The article will omit information on planting Slammer and hiding
one's tracks.
http://zdnet.com.com/2102-1105_2-1013974.html?tag=printthis
http://www.wired.com/wired/archive/11.07/slammer.html
[Editor's Note (Grefer): What's going to be next? Free advice on how to
build a machine gun from regular household components? Give me a break!
(Schneier): The amount of ink being spilled over this is remarkable.
The code is available elsewhere. And good guys can't defend against
something they're not allowed to understand.]

 --Microsoft to Improve Patch Management
(6 June 2003)
Microsoft plans to improve patch management for its products. In a
recently released white paper, Microsoft said it plans to address patch
quality, simplify patch application and delivery, and increase the
number of applications that receive automated patching.
http://zdnet.com.com/2102-1104_2-1013833.html?tag=printthis

 --Bugbear Variant is Spreading
(5/6 June 2003)
A new variant of the Bugbear virus, Bugbear.B, is circulating on the
Internet. It arrives as an attachment, uses random e-mail addresses
found on infected computers for the From line, and uses document names
from infected computers as well. It exploits a two-year old MIME
vulnerability in Outlook to send itself out. It copies itself to shared
hard drives. It also places a back door on infected computers and
installs key-logging software, ostensibly to steal personal information
like passwords and credit card information. It also tries to disable
anti-virus products.
http://www.computerworld.com/printthis/2003/0,4814,81834,00.html
http://zdnet.com.com/2102-1105_2-1013494.html?tag=printthis
http://www.fcw.com/fcw/articles/2003/0602/web-virus-06-06-03.asp

 --Bugbear.B Sent Out Stanford Documents
(6 June 2003)
Stanford University's computer system became infected with the Bugbear.B
worm, which sent random files, some of them confidential, to other
system users, who have since been blocked from sending mail to people
outside the system.
http://www.siliconvalley.com/mld/siliconvalley/6027714.htm?template=contentModules/printstory.jsp

 --Apple OS X Update
(5 June 2003)
Apple plans to release an update to OS X which will address a
vulnerability in the operating system's installation of Apache 2.0; the
update upgrades Apache to version 2.0.46. The vulnerability lies in
the mod_dav module and could cause Apache to crash.
http://www.eweek.com/print_article/0,3668,a=42925,00.asp

 --Microsoft Releases Cumulative Patch for IE
(4/6 June 2003)
Microsoft has released a cumulative patch that addresses vulnerabilities
in Internet Explorer (IE) 5.01, 5.5 and 6.0, as well as for Internet
Explorer 6.0 for Windows Server 2003. The patch is critical for all
versions of Windows except Server 2003, for which it is rated moderate,
because it runs in Enhanced Security Configuration. Windows Server 2003
is not vulnerable to the flaws when in default configuration.
http://zdnet.com.com/2102-1105_2-1013066.html?tag=printthis
http://www.eweek.com/print_article/0,3668,a=42906,00.asp
http://www.computerworld.com/printthis/2003/0,4814,81815,00.html
http://www.theregister.co.uk/content/55/31038.html
http://www.microsoft.com/technet/security/bulletin/MS03-020.asp

 --LA Police Officer Suspended for Allegedly Accessing Databases
(4 June 2003)
A Los Angeles (CA) police sergeant has been suspended from the force
for allegedly accessing confidential databases without permission. Sgt.
Mark Arneson had allegedly been obtaining information for a private
investigator.
http://www.usatoday.com/tech/news/2003-06-04-police-tap_x.htm

 --Gartner: Security Will Consume Greater Portion of IT Budgets
(4 June 2003)
Gartner analysis indicates that businesses will spend more than 5% of
their IT budgets on security in 2003, giving security budgets a 28%
compound growth rate since 2001. The increase in spending is largely
due to copyright laws liability concerns and focus on critical
infrastructure protection.
http://www.vnunet.com/News/1141363

 --Sobig.C Worm
(3/4 June 2003)
The Sobig.C worm is spreading. It infects Windows 95, 98, Me, NT, XP
and 2000 systems. It also spreads to shared hard drives in search of
e-mail addresses to use when it sends itself out again using its own
simple mail transfer protocol (SMTP) engine. Analysis of the worm's
distribution pattern has led some to speculation that Sobig.C uses a
spam engine to spread.
http://zdnet.com.com/2102-1105_2-1012720.html?tag=printthis
http://www.computerworld.com/printthis/2003/0,4814,81767,00.html
http://www.infoworld.com/article/03/06/04/HNsobigtwo_1.html

 --New Attack Requires Little Bandwidth, Consumes Machines' Resources
(3 June 2003)
Researchers Dan Wallach and Scott Crosby of Rice University have
developed an attack method that knock a computer off-line, consuming a
computer's resources without requiring a lot of bandwidth, unlike a
denial-of-service attack. The method involves forcing the targeted
computer to perform unusually laborious hash calculations. Defense
against the attack requires developing new, more efficient hashing
algorithms. The researchers plan to present their findings in a paper
at the Usenix Security 2003 conference in August.
http://www.newscientist.com/news/print.jsp?id=ns99993789

 --Quarterly CERT/CC Summary
(3 June 2003)
The quarterly Computer Emergency Response Team Coordination Center
(CERT/CC) summary lists recent cyber attack activity and incident and
vulnerability information. Recent activity addressed includes an
integer overflow vulnerability in Sun's XDR Library, a buffer overflow
vulnerability in sendmail and multiple vulnerabilities in Snort's
preprocessors as well as in Lotus Notes and Domino Server. The summary
also includes links to recently published advisories, vulnerability
notes and statistics.
http://www.cert.org/summaries/CS-2003-02.html

 --Business Software Alliance Says Piracy Rate Shows Modest Decline
(3 June 2003)
The Business Software Alliance (BSA) says that the software piracy rate
fell last year, from 40% to 39%; the decline follows two straight years
of increases. The rate is 10 percentage points below its 1994 level.
Piracy rates in the US have fallen from 32% to 24% since 1994; Eastern
Europe and the Asia-Pacific region have piracy rates of at least 90%.
http://news.com.com/2102-1028_3-1012480.html?tag=ni_print

 --GAO Report: IRS Systems Security Still Needs Work
(2 June 2003)
A General Accounting Office (GAO) report says that while the Internal
Revenue Service (IRS) has made progress in securing its computer
systems, there are still some significant weaknesses. The IRS has not
adequately implemented its security program, resulting in access and
authorization vulnerabilities.
http://www.fcw.com/fcw/articles/2003/0602/web-irs-06-02-03.asp

 --Cyber Corps Troubles Lead to Reorganization Effort
(June 2003)
The Cyber Corps program, which provides scholarships, stipends and
summer internships to qualified students of information security in
exchange for up to two years of service at a government agency after
graduation, has been experiencing some difficulty placing graduates in
government jobs. Agencies' reluctance to hire the graduates can be
attributed to small budgets, concern that the graduates will leave after
their commitment has been fulfilled, and the expenditure of time and
money involved in obtaining appropriate security clearances. Summer
internships have proven even more difficult to obtain. Students who
are unable to find government employment despite a good faith effort
are released from their obligations. The program is currently being
reorganized.
http://www.infosecuritymag.com/2003/jun/cybercorps.shtml

- ---end---

NewsBites Editorial Board:
Kathy Bradford, Dorothy Denning, Roland Grefer, Stephen Northcutt, Alan
Paller, Marcus Ranum, Eugene Schultz, Gal Shpantzer
Guest Editor: Bruce Schneier

Please feel free to share this with interested parties via email, but
no posting is allowed on web sites. For a free subscription, (and for
free posters) or to update a current subscription, visit
http://portal.sans.org/
===================================================================

The Bonus:

**********************************************************************
SANS Cisco News Update June 9, 2003 Vol. 1, Num. 1
***********************************************************************

TOP OF THE NEWS
  Huawei injunction imposed in Cisco case -report
  Cisco and Huawei say lawsuit will continue
  Munich Airport Uses Cisco Technology To Break New WiFi Ground with
     the World's First Multiple ISP Hotspot
  Cisco in breakthrough deal with BellSouth
  Cisco And SBC Partner On Telephony Services
  
THE REST OF THE WEEK'S NEWS
  Huawei vs. Cisco Just Got Nastier
  Huawei denies plan to quit US
  Army awards $2 billion hardware contract
  Former Cisco official must pay back $27 million
  CheckPoint's rating was cut with Credit Suisse First Boston from
     neutral to underperform.
  Cisco Systems to Help Build Wi-Fi Network Across Paris
  Q&A: Cisco VP Mark de Simone Discusses How Long-Reach Ethernet Helps
     Deliver Metro Ethernet Services to EMEA
  Face-To-Face: John Chambers Answers Your Questions
  IBM, Cisco Target Digital Media
  Cisco builds WLAN security framework
  Cisco Announces Broadband Edge Platform for Cable Data Services
  **********************************************************************

TOP OF THE NEWS

 --Huawei injunction imposed in Cisco case -report
(9 June 03)
US District Court Judge John Ward barred Huawei's use of Cisco manuals,
help files, and some code that is used in Cisco's routers. The
injunction is temporary and the judge did decline a broader injunction
against Huawei.
http://cbs.marketwatch.com/tools/quotes/newsarticle.asp?siteid=mktw&sid=6458&guid=%7BC92BA169%2D71EF%2D4B32%2D9DA1%2D24C5ECBAF179%7D

 --Cisco and Huawei say lawsuit will continue
(9 June 03)
After US District Court Judge John Ward ordered Huawei to stop using
some of Cisco's technology, Cisco stated it would contine with its
intellectual property lawsuit. The intellectual property lawsuit stems
from a claim by Cisco that Huawei infringed on copyrights relating to
user manuals, online help files and software, and misappropriation of
trade secrets relating to source code. Cisco's general counsel, Mark
Chandler, called Firday's ruling "a significant win." He also stated,
"As we move into the next phase of the case, we look forward to the
opportunity, for the first time, to have Huawei's source code reviewed
to determine the full extent of the copying and seek appropriate
relief." A company statement by Huawei stated that the company was
pleased with the ruling, noting that it voluntarily acted to remove from
the US maret old products outlined in the injunction. "Because the
court has recognized Huawei's good faith, voluntary actions to resolve
this situation, today's ruling will have no materi
http://cbs.marketwatch.com/tools/quotes/newsarticle.asp?siteid=mktw&sid=6458&guid=%7B67F4539D%2D9931%2D4C6E%2DAD88%2DC421A56ED81F%7D

 --Munich Airport Uses Cisco Technology To Break New WiFi Ground with
    the World's First Multiple ISP Hotspot
(5 June 03)
Internet users that travel through Munich International Airport may soon
enjoy being able to utilize the most advanced and user-friendly hotspot.
This is the goal of Flughafen Munchen GmbH (FMG), the German airport
operator, which wants to make it possible for users to connect
wirelessly to the internet. The company is opening a second terminal
to bring total passanger capacity per year from 23.2 million to 50
million by June 2003. In October 2001, the terminal building and main
concourse allowed wireless connectivity to the internet. Now, they are
looking to expand the role and become a wireless local area network
(WLAN) provider so users can choose their ISP. This would make life
simpler for travelers since they could connect to their home or work
ISP, making access to the internet and billing easier. Service
providers are also looking at FMG's idea. This could allow travelers
to use their own ISP wherever, whenever they wanted. Vice President of
Information Systems at Munich Airport, Michael Zadda
http://biz.yahoo.com/bw/030605/55123_1.html

 --Cisco in breakthrough deal with BellSouth
(4 June 03)
The major US regional phone company chose Cisco for optical networking
gear. One BellSouth official stated, "We pounded it pretty hard.",
regarding testing that occurred for nearly two years prior to a contract
being signed. The contract brings to closure the question of whether
Cisco's equipment is reliable enough for the public telephone network's
core. The carrier market's telecommunications spending, which is worth
over $27 billion, means a huge growth potential for Cisco.
http://biz.yahoo.com/ft/030604/1054416322263_2.html

 --Cisco And SBC Partner On Telephony Services
(2 June 03)
The four-year deal will allow SBC to offer customers managed services,
including IP telephony and VPNs utilizing Cisco's hardware. This allows
Cisco to gain entry into a growing and attractive market. In areas
where wireless Internet will be deployed, Cisco will also provide
networking equipment. SBC wants to increase the amount of traffic its
network can handle and will install some Cisco optical gear internally
on their existing network.
http://www.informationweek.com/story/showArticle.jhtml?articleID=10100761

***********************************************************************

THE REST OF THE WEEK'S NEWS

 --Huawei vs. Cisco Just Got Nastier
(3 June 03)
3Com CEO Bruce Claflin defends his joint venture partner, Huawei
Technologies, by stating that the intellectual property claims by Cisco
Systems are "interesting theatrics" and that the lawsuit is
"irrelevant". The 3Com CEO had created an uproar in March with the
announcement of a joint venture with Huawei, after the lawsuit against
Huawei regarding intellectual-property violations had been filed. Mr.
Chaflin is also annoyed in the manner press within the US is portraying
Huawei's CEO Ren Zhengfei.
http://www.businessweek.com/technology/content/jun2003/tc2003063_4954_tc057.htm

 --Huawei denies plan to quit US
(4 June 03)
A report published by an unknown source declared that Huawei
Technologies would leave the US market by year's end to help resolve
the intellectual property lawsuit stated by Cisco last January. Huawei
Technologies states that this is incorrect. Also, a source close to
the talks stated that a settlement is 'unlikely' in the near term. A
court ruling in Texas is expected within two weeks.
http://biz.yahoo.com/ft/030604/1054416432007_1.html

 --Army awards $2 billion hardware contract
(6 June 03)
General Dynamics C4 Systems won the Army's $2 billion Common
Hardware/Software III contract. The contract is used for the purchase
of software and commercial and rugged information systems, netowrk
hardwaqre, power subsystems, and peripheral devices. The contract has
a life cycle of 19 years. Cisco is a core team member for General
Dynamics under this contract.
http://www.fcw.com/fcw/articles/2003/0602/web-armychs-06-06-03.asp

 --Former Cisco official must pay back $27 million
(6 June 03)
US District Judge Jeremy Fogel ordered Robert Gordon, former Cisco
Systems vice president, to pay the company $27,397206 in restitution
and another $5.58 million to the United States. This stems from Mr.
Gordon's guilty plea on a charge of embezzlement stating that he
transferred $35 million to an offshore shell account in the Bahamas.
Gordon will being a 66-month prison term next month on two counts of
wire fraud and one count of insider trading.

http://biz.yahoo.com/rc/030606/crime_cisco_1.html

 --CheckPoint's rating was cut with Credit Suisse First Boston from
    neutral to underperform.
(9 June 03)
Analyst stated his fundamental thesis on the company remains unchanged,
but believes the company will continue to lose market share to rivals
Cisco Systems and NetScreen.
http://cbs.marketwatch.com/news/newsfinder/pulseone.asp?siteid=yhoo&dateid=37781.3530324074-804979232&

 --Cisco Systems to Help Build Wi-Fi Network Across Paris
(9 June 03)
Paris' metro area is looking into building a 802.11 Wi-Fi network that
would allow Parisians to utilize the Internet above and below ground.
Eventually, this could be expanded into a metropolitan area network that
would not reduce the visual impact of the French capital and have little
environmental impact as well. Initially, a pilot launch, lasting a
year, called WIXOS (Wi-Fi eXtensible aux Operateurs de Services) will
occur as a deployment throughout dozens of locations above ground in
metro stations along Bus 38 route. This route connects the rail
stations Gare du Nord to Port d'Orleans. The switching architecture,
Cisco Metro Ethernet, runs over optic fiber cabling controlled by
Telcite. The pilot network will contain 24 Cisco Aironet 1200 series
access points, with two at each station hidden behind metro signs, and
linked to a data management platform supplied by Cap Gemini Ernst &
Young France. Furthermore, the access points are connected to a Gigabit
Ethernet loop via a Catalyst 2950 Series swit
http://newsroom.cisco.com/dlls/ts_060903.html

 --Q&A: Cisco VP Mark de Simone Discusses How Long-Reach Ethernet Helps
    Deliver Metro Ethernet Services to EMEA
(4 June 03)
The Cisco Catalyst 2950 LRE 997 and the Cisco 576 LRE Customer Premise
Equipment (CPE) are a part of the new LRE technology. This allows
broadband content to be delivered to small and medium businesses,
municipalities, and residential users via the existing copper
infrastructure. Mr. De Simone provides context for the announcement
with insight into LRE, Metro Ethernet/Broadband, and how Cisco is
helping its customers.
http://newsroom.cisco.com/dlls/hd_060403.html

 --Face-To-Face: John Chambers Answers Your Questions
(2 June 03)
John Chambers wants feedback on how Cisco is working to help its allies.
He travels to conferences to meet with these allies and discuss their
situations. He receives feedback on the issue of big service providers
duming product in the market. He discusses the growth prospects of
Cisco, Cisco's position in the marketplace, opportunities in storage,
security, and wireless, how Cisco is involved in the government market,
the consolidation of the high tech industry, efficiencies of supply
chains, the acquisition of Linksys, gaining more interest by small
business owners, the customer's view of Cisco, and the midmarket
opportunities.
http://www.varbusiness.com/sections/News/breakingnews.asp?ArticleID=42259

 --IBM, Cisco Target Digital Media
(2 June 03)
The Digital Media Delivery Solution utilizes IBM's content-management,
video-streaming, and storage software combined with Cisco's networking
hardware. The system is geared towards firms looking for a medium to
perform streaming video for business communications, E-learning, or
collaboration. A five-office customer with a few administrators and
needs all of the components will pay roughly $150,000 and a company with
50 or more offices could pay over $700,000.
http://www.informationweek.com/story/showArticle.jhtml?articleID=10100730

 --Cisco builds WLAN security framework
(9 June 03)
Cisco introduces Structured Wireless-Aware Network frankwork, a new
architecture for wireless LANs, which allows them to be easier to manage
and more secure. The new architecture includes hardware portfolio
additions and enhancements and new software capabilities for CiscoWorks
Wireless LAN Solution Engine, such as site-survey tools, radio-frequency
management, and support for large numbers of access points. This new
architecture also will help guard Cisco's core enterprise networking
market from a threat of competition involved in the wireless LAN
marketplace. The basis of the framework is that it encompasses
security, scalability, and reliability for enterprises to utilize
business application over a wireless LAN. This means that a companies
will need to migrate to a Cisco-only network. And that follows along
the standard Cisco strategy that has made them so successful: "There's
one way, it's our way and it's the only way."
http://www.securityfocus.com/news/5480
http://www.informationweek.com/story/showArticle.jhtml?articleID=10300418

 --Cisco Announces Broadband Edge Platform for Cable Data Services
(June 03)
Cisco Systems has enhanced its Cable Modem Termination System (CMTS)
for multiple system operators (MSOs). The new product will deliver
increased performance and advance Radio Frequency (RF) management and
will include the Broadband Processing Engine (BPE) as well as tools for
content, traffic, and network management. The product will allow
operators to use tiered services while effectively managing peer-to-peer
traffic which evolves CMTS into the Intelligent Broadband Edge. The
new 2x8 Universal BPE supports the more than 17,000 CMTS chassis
currently in service by distributing and accerating Data Over Cable
Service Interface Specification (DOCSIS). The resulting 10x performance
improvement allowes delivery of advanced data service such as voice over
IP.
http://www.enterprisenetworksandservers.com/monthly/art.php/107

== End of Bonus ==
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (Darwin)

iD8DBQE+5z1j+LUG5KFpTkYRAnnVAJ4+20lrlPxiVOhiEQlQXsyF/hlD5gCggxoE
v52o64exBt13YjUQvO3K5N8=
=NGtf
-----END PGP SIGNATURE-----