The Fat Pipe - All Packet Pushers Pods

Somewhere in your network, there’s at least one exploitable vulnerability. Maybe it’s a really bad one. Maybe it’s not that bad.

Do you know what the vulnerability is? Do you have a way to explain to the business the risk it represents? Do you have a strategy to fix it or otherwise mitigate the risk?

Climb aboard with the Datanauts as we fly the good ship Vulnerability Management to Planet Security on today’s episode.

Our guest is Zoë Rose, an ethical hacker and cyber security consultant.

Zoë, Chris, and Ethan discuss:

* Setting a baseline on what we mean by vulnerabilities

* The value of the CVSS

* Different kinds of tools for finding vulnerabilities

* Assigning risk levels in your organization

* How risk levels should influence patching

* The use of compensating controls

* Whether it’s worth patching ephemeral containers

* More

Sponsor: Netrounds

Netrounds software performs active testing and monitoring to ensure your business-critical applications and services are running as expected. Get real-time insights for testing, troubleshooting, and SLA monitoring. Find out more at netrounds.com/packetpushers.

Show Links:

Zoë Rose on Twitter

Rose Security And Intelligence

Common Vulnerability Scoring System – Wikipedia

Cloud Genix SDWAN launches a series of third party integrations aka “CloudBlades”

* SDN federation – cloudgenix will integrate with a range of third party SDN product like zscaler , PANW panorama, 

* SDN Federation – Equinux, connects to AWS, GCP, O365, Azure – find the best entry to your public cloud provider, create a VM of Cloudgenix as needed to then terminate so that you no longer to use hardware in an equinux or have a separate VPC in AWS. 

* Breakout directly to O365 over internet or send it over equinux in a single click

* the underlying idea here is the cloudgenix has worked a number of integrations with third part include Clarity, Splunk, Servicenow, pager duty

* this is  sign of mature product – they have moved beyond the SDWAN connectivity and into lateral integration of the software. this is the promise of SDN generally, that the network becomes a part of many other systems, its not silo’d and only operated by network people. For example you can run a slack command, which would initiate an action on the cloudgenix cloud controller, and then configure the network. 

* you can expand this into ServiceNow or other IT operations software 

* Moving from  a integrated branch device doing SDWAN to cloud delivered branch, or more like supported. 

Cloud Genix SDWAN launches a series of third party integrations aka "CloudBlades"

Drew Conry-Murray and Ethan Banks had a briefing with a startup called Edgeworx on June 24th, 2019. You can read their highlights of the Kubernetes-related news Edgeworx shared below, or listen to the audio version in the player above.

What Does Edgeworx Do?

As you might guess from the name, Edgeworx focuses on the network edge; that is, on security cameras, or local compute at a cell tower base station or on an offshore oil rig, for example.

The startup’s big idea is to make it easy for organizations to re-use applications they’ve written for other platforms and run those applications on edge devices. If you want to do local processing on edge devices, Edgeworx wants to provide the platform to run applications on those devices.

Edgeworx says it can run on almost anything: security cameras and other IoT devices, IoT gateways, Wif-Fi routers, cars, etc.

The company does have minimum hardware & software specs. Edgeworx needs some distro of Linux, a minimum of a 32-bit ARM processor, and 128MB of RAM. If the device meets those minimums, Edgeworx can run.

The startup also makes an agent that runs on IoT and edge devices to manage and control devices, provision devices, monitor health, set policies and get alerts.

Mesh Networking And AMQP

Edgeworx enables devices to connect to one another using AMQP 1.0, or the Advanced Message Queing Protocol. This is the basis for edge-to-edge, edge-to-cloud, and cloud-to-edge networks–whatever is required for a given edge computing environment.

Kubernetes Customized For Edge Computing

The big news from this briefing is that Edgeworx now gives Kubernetes specific intelligence about the edge computing environment: the device capabilities, GPS geolocation, etc. This means that edge computing environments can enjoy the scheduling benefits of Kubernetes, while at the same time getting workload placements in a way that works well with edge computing environments’ unique needs.

For More Information

For more information, go to edgeworx.io.

For more IT podcasts, blogs and news created for engineers, visit packetpushers.net where you can subscribe for free. And for even more great information, become a member at ignition.packetpushers.net.

Edgeworx has made Kubernetes smarter for edge computing. How? By allowing the K8s scheduler to make application placement decisions based on endpoint attributes important to edge computing environments. Like what? GPS coordinates and hardware capabilities, to name a couple.

Today's Heavy Networking explores how to select a higher-ed program for your computer science education, including the key elements of a CS degree, community college vs. 4-year institutions, measuring educational costs and returns, and more. Our guest is Aaron Francis, a systems engineer and instructor.

Today’s Heavy Networking explores how to select a higher-ed program for your computer science education, including what to look for and what to run away from.

How much is worth spending on education? Where do professional certifications fit into a degree program? How can you tell if the program you’re considering is outdated?

If your university has a job placement program, is that a big deal? What if you want to study networking specifically? Is that even a thing?

My guest is Aaron Francis, a Systems Engineer at Cisco and IT instructor.

We discuss:

* The essential elements of a computer science degree

* How a CS degree differs from degrees in Information Science or IT Administration

* Specializations within CS degrees, such as networking

* How to measure educational costs and returns, community college vs. 4-year instutions, and so on

* Getting a job after graduation

* Whether to get certifications concurrently with your degree

Sponsor: ExtraHop

ExtraHop is the enterprise cyber analytics company delivering performance and security from the inside out. ExtraHop offers complete visibility with machine learning to help you make quick, confident decisions about your IT environment. Explore the ExtraHop Performance Platform at extrahop.com/packetpushers.

Show Links:

Aaron Francis on LinkedIn

Aaron’s Blog on LinkedIn

Your v6s are here--where do you want 'em? On today's IPv6 Buzz podcast, guest Tim Rooney dives into IPv6 address planning and management for IT teams that are just getting started.

For those of us not steeped in the world of Business Intelligence and Data Management, the idea of a Data Warehouse with its cubes, dimensions, and other esoteric errata can seem daunting.

Now imagine compounding those errata with the notion of Data Warehouse as a Service and you’ve got yourself a layer cake of complexity.

What is a data warehouse? Why would you want to use the cloud for such a thing? How do you migrate a premises data warehouse into a cloud service? Who else kinda wants cake now?

Let’s grab a slice of data warehousing with my guest Deepak Kaushik, a cloud architect who’s overseen many a migration of on-prem data warehouses to the cloud.

Deepak and I discuss:

* Just what a data warehouse is and what it’s used for

* Storage and security requirements

* Capacity planning and DR/HA issues to consider

* The pros and cons of a data warehouse as a service

* How to prep an on-premises warehouse for migration

* Tips for saving costs

* More

Show Links:

Deepak Kaushik’s blog

Deepak Kaushik on Twitter

Data warehouses are complex beasts. If you want to migrate a warehouse to the cloud, there's a lot of layers to consider including encryption and security, automation, data sovereignty, right-sizing, which migration tools to use, and more. Today's Day Two Cloud podcast slices through the layers of complexity of data warehouse migration with guest Deepak Kaushik.