Skip to main content

Security

Learn about Forward Networks security features and discuss solutions to your security concerns

  • 6 Topics
  • 2 Replies
6 Topics
D
DannyRRamping Up
asked in Security
DELIVERED_TO_INCORRECT_LOCATION API Status Clarification

Hello,I have a question when using the Search Path API.Could we get an elaboration on the meaning of that “DELIVERED_TO_INCORRECT_LOCATION” forward outcome status, such as why it appears and if there’s anything we can do to address the “INCORRECT_LOCATION” part, if it’s necessary?I presume the status means that somewhere along the routing, it somehow ended up at a destination Forward Networks didn’t expect. But I just wanted to know if there was any more to it.Thanks!

2
C
Employee
1 month ago
GTurner
Employee
GTurnerEmployee
posted in Security
Implementing PCI-DSS Compliance

 Recently, I've been on a journey exploring PCI-DSS compliance alongside our valued customers, seeking to understand their unique challenges. During this experience, I've gained valuable insights that I'm eager to share with the hope that it will assist you in gracefully navigating the complexities of PCI-DSS compliance.I look forward to hearing about your experiences and challenges with PCI-DSS compliance so please don’t hesitate to share. Here are the key topics:Network Segmentation Enforcement Flow Analysis Flow Integrity PCI-DSS Element Analysis Configuration Compliance Network Asset Integrity Insight Visibility Network Segmentation EnforcementEnsure compliance with PCI-DSS guidelines by continually  monitoring enforcement point policy behavior  between different network zones and ensuring parity with corporate governance. Control the applications and protocols allowed across firewall zones. Evaluate flows for firewall zones, VRFs, and subnets. Automate provisioning workflows when

0
GTurner
Employee
7 months ago
AricaFN
Employee
AricaFNEmployee
published in Security
Achieving Stress Free STIG Compliance

   What is a STIG?The Security Technical Implementation Guidelines (STIG) are device security guidelines set by the US government's Defense Information Security Agency (DISA). DISA is responsible for maintaining the security requirements necessary to access the Department of Defense Information Systems Information Networks (DODIN). Updates are released quarterly.Our focus is on visibility into your network. In our demonstration, we’re going to zero in on the STIGs applicable to your switches, routers, firewalls, and load balancers. STIGs are broken down by vendor, device type, and operating system and generally come from the best practices set by vendors to secure the OS. This is where we see some overlap with CVEs. How STIGs are typically handledWhen it comes to keeping up with STIG compliance, especially around audits, defining best practices can be painfully time-consuming.DISA provides their STIG viewer for viewing STIGs and creating checklists. For each device, you have to:Find it

960
AricaFN
Employee
9 months ago
davetee
Community Manager
daveteeCommunity Manager
posted in Security
Securing Your Network with Forward Networks (Security Field Day 10)

 Forward’s own Matt Honea (@matthonea), Head of Security and Compliance, and Mike Lossmann (@Mike), Technical Product Marketing Manager recently presented at Security Field Day 10 (XFD10).Matt and Mike bring diverse experience in cybersecurity and networking infrastructure to these presentations from XFD10. Learn as Matt dissects today’s threats, how they’re delivered, and how to protect your organization from similar attacks. Mike provides a demonstration of the Forward Networks Enterprise application, specifically highlighting how it can safeguard your organization’s network and, in turn, your organization’s valuable intellectual property.   Do you have questions or want to learn more? Ask below!  The Game Changer - Network Digital Twin for Network Security with Forward Networks Matt and Mike discuss reasons why are so many network security breaches are hitting hitting the headlines lately Matt Honea guides you through the latest news-worthy exploitations of network vulnerabilities a

0
davetee
Community Manager
9 months ago
M
Employee
matthoneaEmployee
posted in Security
Cisco IOS XE CVE-2023-20198 Check

 Hello, Cisco rececently annouced CVE-2023-20198 with a CVSS critical rated vulnerability for IOS XE systems with a hardcoded default password in the web gui. There is no fix available.https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-webui-privesc-j22SaA4z Companies need to ensure this feature is set to OFF. Even with the rapid advisory, it takes security companies and aggregators a little bit of time to input new external data into the database, ourselves included. But maybe you need to know right now. The good news is that we already have the data, we just need to do a quick check. Check out the following NQE that you can search right now /* CVE-2023-20198 NQE check    16OCT2023    ForwardNetworks Community Portal*/http = `ip http server`;http_active_none = `ip http active-session-modules none`;https = `ip http secure-server`;https_active_none = `ip http secure-active-session-modules none`;foreach d in network.deviceswhere d.platform.os ==

0
M
Employee
10 months ago
Fabrizio
Employee
FabrizioEmployee
published in Security
Forward Exposure: vulnerability management with Tenable and Rapid7

Security teams rely on vulnerability scanners to proactively locate vulnerabilities in networkdevices, hosts, and applications. These tools help improve the overall security posture of thenetwork by remediating exposure before bad actors have an opportunity to exploit it.Although incredibly helpful, the data delivered by these tools is often overwhelming and notpresented in an actionable manner.Forward Exposure Analysis helps security teams prioritize vulnerability remediation by combining the host vulnerability data provided by vulnerability scanners like Rapid7 InsightVM or Tenable Security Center with Forward Networks' modeling capabilities. By integrating with these popular tools, Forward Networks empowers security teams to identify in seconds any impacted hosts with critical vulnerabilities that can be accessed from the Internet or any other critical exposure point.The Forward Enterprise platform helps make sense of the extensive data provided by vulnerability scanners by categori

600
Fabrizio
Employee
11 months ago
  • NQE Contributor
    dakotagloryhas earned the badge NQE Contributor
  • Community Champ Award
    GaryBhas earned the badge Community Champ Award
  • Community Champ Award
    AndyLhas earned the badge Community Champ Award
  • NQE Contributor
    Christopherhas earned the badge NQE Contributor
  • NQE Contributor
    Tyson Henriehas earned the badge NQE Contributor
Show all badges
Terms of UseCookie settings