Cisco 350-501: MPLS and L3VPN Architecture for Service Providers
MPLS L3VPN Customer Isolation and Provider Transport MPLS Layer 3 VPN architecture solves a service-provider problem that ordinary enterprise routing does not: many…
Read article03 / THE LATESTFresh thinking
From the editorial desk.
New technical explainers, certification perspectives and practical ideas.
Cisco 350-701: Secure Access Service Edge in Cisco Environments
Secure Access Service Edge is an architectural model for delivering networking and security controls closer to distributed users, branches, devices, and cloud applications.…
Read articleCisco 350-701: Remote Access VPN Design with Cisco Security
Remote access VPN design is not only about choosing an encryption protocol and defining an address pool. A production service has to authenticate…
Read articleCisco 350-701: Network Segmentation for Zero Trust
Network segmentation supports zero-trust architecture by reducing the amount of access that follows automatically from being connected to a network. Traditional perimeter designs…
Read articleCisco 350-701: Email and Web Security in Cisco Architectures
Email and web traffic are two of the most common paths through which users encounter malicious content, credential theft, risky destinations, and data-loss…
Read articleCisco 350-701: Secure Firewall Architecture
Cisco Secure Firewall architecture is easier to understand when it is treated as a system of enforcement, management, inspection, identity, and telemetry rather…
Read articleCisco 350-701: Secure Endpoint and Threat Response
Cisco Secure Endpoint protects hosts by combining preventive controls with endpoint telemetry that supports investigation and response. The connector can block known malicious…
Read articleCisco 350-701: ISE Policy Sets and Authorization
Cisco ISE Policy-Set Evaluation and Authorization Cisco ISE policy is easiest to operate when engineers separate three questions: which traffic belongs to this…
Read articleCisco 350-701: 802.1X, MAB, and Profiling with Cisco ISE
Enterprise access networks rarely contain one uniform endpoint population. Managed laptops can perform strong 802.1X authentication, while phones, printers, cameras, badge readers, and…
Read articleCisco 300-715: Guest Access and BYOD with Cisco ISE
Cisco ISE handles guest access and bring-your-own-device onboarding as two related but distinct identity problems. Guest access is designed to give temporary or…
Read articleCisco 300-715: Troubleshooting RADIUS Authentication in Cisco ISE
RADIUS authentication problems in Cisco ISE are rarely solved by staring at a single “Access-Reject” message. A complete transaction crosses the endpoint, supplicant…
Read articleCisco 300-715: ISE TrustSec and Security Group Tags
Cisco TrustSec changes segmentation from an address-centric problem into an identity and group-policy problem. Cisco ISE can classify users, endpoints, and network devices…
Read articleCisco 300-715: ISE Posture Assessment
Cisco Identity Services Engine posture assessment adds endpoint compliance to network access control. Authentication can prove who a user or device is, but…
Read articleCisco 350-601: VXLAN EVPN Fundamentals in Cisco Data Centers
VXLAN EVPN separates a data-center network into an IP underlay and a virtual overlay. The underlay gives loopback and VTEP addresses reliable Layer…
Read articleCisco 350-601: Data Center Redundancy with vPC
Virtual Port Channel (vPC) lets a downstream device form one logical port channel to two separate Cisco Nexus switches. The downstream system sees…
Read article