Re: Network Segregation to prevent spread of malware

["Dave, Manish, R. - ESIL \(MUM\)" <Manish.Dave () essar com>]

My 2 cents :
I would suggest that you look at NBAD(network based anomaly detection) devices like Arbor networks  in combination with 
something like Fireeye. Combined, they can help in identifying and blocking bots & malware. Placement of these devices 
properly, can help you control your network.

Regards,

This message sent from BlackBerry




Manish Dave|Chief Information Security Officer|Essar Services India Limited|
Essar House , 11 , K .K.Marg,Mahalaxmi,Mumbai|400034|Maharashtra|India|
T +91 9930134942|+91 22 66601100 VoIP: 7 21 1357|Blackberry PIN 2365D8AE|
E Manish.Dave () essar com|www.essar.com|


----- Original Message -----
From: Jerry Bell [mailto:jerry () riskologist com]
Sent: Wednesday, January 23, 2013 05:37 PM
To: tomright006 () gmail com <tomright006 () gmail com>
Cc: security-basics () securityfocus com <security-basics () securityfocus com>
Subject: Re: Network Segregation to prevent spread of malware

Hi Tom,

The answer is 'it depends', but probably no. If you are talking about a classic company network and dividing 
workstations into separate networks to prevent cross contamination, you have to consider the pivot points for most 
malware - email, file shares, etc, which can still allow malware to propagate between networks even if no traffic is 
allowed directly between them. Some kinds of malware, notably worms who propagate directly from one system to another 
via some kind of remotely exploitable vulnerability, would be contained by network segmentation, however those sorts of 
events are becoming increasingly rare (however when they do happen, they tend to be big events).

Jerry

Sent from my iPhone

On Jan 22, 2013, at 5:33 PM, tomright006 () gmail com wrote:

> Hello All,
>
> I need few tips on Network Segregation to prevent spread of Malware. Can I avoid Malware spreading from one network 
> segment to another just by segregating network with access list or firewalls?
>
>
> Thanks,
>
> Tom
>
> ------------------------------------------------------------------------
> Securing Apache Web Server with thawte Digital Certificate
> In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, 
> how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, 
> purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for 
> set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital 
> certificates.
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
> ------------------------------------------------------------------------

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------



Please don't print this e-mail unless you really need to.

Disclaimer:
The information contained in this electronic message and in any attachments to this message is confidential, legally 
privileged and intended only for the person or entity to which this electronic message is addressed. If you are not the 
intended recipient, please notify the system manager and you are hereby notified that any distribution, copying, 
review, retransmission, dissemination or other use of this electronic transmission or the information contained in it 
is strictly prohibited. Please accordingly also note that any views or opinions presented in this email are solely 
those of the author and may not represent those of the Company or bind the Company. This message has been scanned for 
viruses and dangerous content by Mail Scanner, and is believed to be clean. The Company accepts no liability for any 
damage caused by any virus transmitted by this email. www.essar.com <http://www.essar.com/> .

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------