<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>exp-Networks&#187; Security</title>
	<atom:link href="http://www.exp-networks.be/blog/category/security/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.exp-networks.be</link>
	<description>Networks and security consulting</description>
	<lastBuildDate>Thu, 27 Oct 2011 07:23:28 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
		<item>
		<title>BGP between ScreenOS and IOS</title>
		<link>http://www.exp-networks.be/blog/bgp-between-screenos-and-ios/</link>
		<comments>http://www.exp-networks.be/blog/bgp-between-screenos-and-ios/#comments</comments>
		<pubDate>Wed, 26 Oct 2011 06:47:48 +0000</pubDate>
		<dc:creator>Christophe Lemaire</dc:creator>
				<category><![CDATA[Networking]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Cisco]]></category>
		<category><![CDATA[Firewall]]></category>
		<category><![CDATA[Juniper]]></category>
		<category><![CDATA[Networks]]></category>

		<guid isPermaLink="false">http://www.exp-networks.be/?p=636</guid>
		<description><![CDATA[There are some times where using static routing on firewalls is simply not scalable&#8230; As long as the routing is inside a trusted network, I do not see any reason to avoid dynamic routing. Juniper devices (Junos and ScreenOS) can even use virtual routers to split the routing domain into several domains. In the example [...]]]></description>
		<wfw:commentRss>http://www.exp-networks.be/blog/bgp-between-screenos-and-ios/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Zone-based IOS firewall</title>
		<link>http://www.exp-networks.be/blog/zfw/</link>
		<comments>http://www.exp-networks.be/blog/zfw/#comments</comments>
		<pubDate>Mon, 21 Feb 2011 14:24:53 +0000</pubDate>
		<dc:creator>Christophe Lemaire</dc:creator>
				<category><![CDATA[Networking]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Cisco]]></category>
		<category><![CDATA[Firewall]]></category>
		<category><![CDATA[Networks]]></category>

		<guid isPermaLink="false">http://www.exp-networks.be/?p=270</guid>
		<description><![CDATA[IOS Zone-Based Policy Firewall model allows the router's administrator to define security zones, assign interfaces to zones, apply security policies between zones as he would have done on a Juniper firewall or on a Cisco ASA.]]></description>
		<wfw:commentRss>http://www.exp-networks.be/blog/zfw/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Dynamic Multipoint VPN &#8211; Dual hub</title>
		<link>http://www.exp-networks.be/blog/dynamic-multipoint-vpn-dual-hub/</link>
		<comments>http://www.exp-networks.be/blog/dynamic-multipoint-vpn-dual-hub/#comments</comments>
		<pubDate>Sat, 06 Mar 2010 12:59:24 +0000</pubDate>
		<dc:creator>Christophe Lemaire</dc:creator>
				<category><![CDATA[Networking]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Cisco]]></category>
		<category><![CDATA[network]]></category>
		<category><![CDATA[Networks]]></category>
		<category><![CDATA[VPN]]></category>

		<guid isPermaLink="false">http://www.exp-networks.be/?p=427</guid>
		<description><![CDATA[In a previous article, I exposed how to setup a basic DMVPN network with one hub router in a central location and several spoke routers negotiating a dynamically built IPSec protected GRE tunnel. I also explained the central site should be secured by deploying two hub routers&#8230; Here is one solution among others using DMVPN [...]]]></description>
		<wfw:commentRss>http://www.exp-networks.be/blog/dynamic-multipoint-vpn-dual-hub/feed/</wfw:commentRss>
		<slash:comments>4</slash:comments>
		</item>
		<item>
		<title>ClamXav differential update</title>
		<link>http://www.exp-networks.be/blog/clamxav-differential-update/</link>
		<comments>http://www.exp-networks.be/blog/clamxav-differential-update/#comments</comments>
		<pubDate>Sun, 29 Nov 2009 05:49:06 +0000</pubDate>
		<dc:creator>Christophe Lemaire</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Systems]]></category>
		<category><![CDATA[antivirus]]></category>
		<category><![CDATA[Mac OS X]]></category>

		<guid isPermaLink="false">http://www.exp-networks.be/?p=275</guid>
		<description><![CDATA[ClamXav is a free virus checker for Mac OS X. It uses the tried, tested and very popular ClamAV open source antivirus engine as a back end. The default install of ClamXav does not enable the automatic virus definition update. When a user enables those automatic updates, a &#8216;good old cron job&#8217; is created for [...]]]></description>
		<wfw:commentRss>http://www.exp-networks.be/blog/clamxav-differential-update/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>Dynamic Multipoint VPN</title>
		<link>http://www.exp-networks.be/blog/dmvpn/</link>
		<comments>http://www.exp-networks.be/blog/dmvpn/#comments</comments>
		<pubDate>Tue, 22 Sep 2009 16:33:27 +0000</pubDate>
		<dc:creator>Christophe Lemaire</dc:creator>
				<category><![CDATA[Networking]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Cisco]]></category>
		<category><![CDATA[Networks]]></category>
		<category><![CDATA[VPN]]></category>

		<guid isPermaLink="false">http://www.exp-networks.be/?p=242</guid>
		<description><![CDATA[Ever wonder how to provision several hundreds of VPNs from remote offices with dynamic IP to a central site with minimal configuration? Cisco offer an elegant  solution called Dynamic Multipoint VPN. With DMVPN the central site does not need to know the remote site IP in advance, it will learn it via NHRP protocol when the [...]]]></description>
		<wfw:commentRss>http://www.exp-networks.be/blog/dmvpn/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>IPv6 Firewall with Linux</title>
		<link>http://www.exp-networks.be/blog/ipv6-firewall/</link>
		<comments>http://www.exp-networks.be/blog/ipv6-firewall/#comments</comments>
		<pubDate>Thu, 17 Sep 2009 15:21:51 +0000</pubDate>
		<dc:creator>Christophe Lemaire</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Systems]]></category>
		<category><![CDATA[Firewall]]></category>
		<category><![CDATA[IPv6]]></category>
		<category><![CDATA[Linux]]></category>

		<guid isPermaLink="false">http://www.exp-networks.be/?p=203</guid>
		<description><![CDATA[More and more server hoster have configured IPv6 on their network. And most of their Linux based servers come with a basic IPv6 configuration. Even if IPv6 is not used, it is there and widely open as the netfilter/iptables default policy is ACCEPT. If you don&#8217;t use IPv6 at all, disable it. On Debian, the [...]]]></description>
		<wfw:commentRss>http://www.exp-networks.be/blog/ipv6-firewall/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
	</channel>
</rss>

