Search
Pete Silva - Daily Dose of Pete
You are here: DevCentral > Weblogs

posted on Tuesday, April 28, 2009 7:12 AM

Pandemics have come and gone throughout history and the newest variant is quickly spreading it’s ills.  1918 Spanish flu, 1976 swine flu, 1997 Avian Flu, 2003 SARS, 2006 Avian bird flu and others, along with today's new Swine Flu could equate to the human versions of ‘Bloodhound.PDF.11,’ ‘W32.Regsubdat.A!inf,’ or ‘W32.Sality.AM.’  Well, not exactly and it’s somewhat weird comparing it the other way around, huh, but does help explain it.  The problem with this new variant is that you don’t need contact with a swine and it can be transmitted via humans…to the point that they are advising against even kissing in Mexico.  As this CNN article explains, at least 75 cases confirmed worldwide, 40 in the US, 26 in Mexico and at least 149 deaths have been attributed to it with hundreds more suspected.  Travel organizations are cautioning, airports are taking extra measures with incoming passengers and there is a great concern for a much larger situation.

Hope is not lost as there are many experts who feel we do have enough doses of the antibody and while the alert level is raised, panic should not ensue.  Neither should you or your business.  I want to pause here and say this is not a fear-monger, get your duct-tape and stock up on canned goods story – nor is it’s intent to use scare-tactics to buy F5 gear – I’m not like that.  I also assume, to some extent, that your existing solution might be working well, so <insert name here> at the relevant points. 

So, if you decide to or are instructed to work from home (for the time being), a Remote Access solution, like a SSL VPN might be the perfect remedy to get you and your company through this latest outbreak.  We’ve seen with some of the recent bugs, that employees (infected or not) don’t want to venture out to avoid possible transmission - but still want and need to complete their business tasks.  SSL VPNs make this simple.  All the end user needs is a browser and after some Identity & Access Management, they can perform all their duties as if they are in their corporate cube.  This latest health crisis will hopefully pass without more casualties but don’t let your business be one of them.  You can keep you people safe and continue with your business goals with a few simple suggestions:

1. Prepare now.  Make sure you have capacity in case there is a sudden jump in VPN usage.  You can also use an ADC to properly distribute requests across VPN devices.

2. Make sure you have end-point host checks and up-to-date policies in place since many users might be connecting from a home (un-trusted) device.  On that note, also make sure your solution supports various browsers – even mobile devices.

3. Make sure you are covered globally (if you have presence) so your worldwide personnel are covered.  You might be able to add a Global Load Balancer to mange licenses and connections.  If cost is an issue, some companies route requests to less utilized units.  For instance, allow/route overflow EMEA ‘business hours’ users to U.S. based datacenter, since most N. America users are probably asleep.

4. Add additional measures, like SSL & client certificates, strong authentication or two-factor authentication since ‘riff-raff’ loves these sort of events to launch attacks.  Super Bowl, Katrina, Final Four, and other major events or news stories, always attract thieves.

5. Educate your users now on how to gain access, before it suddenly happens and your support desk is swamped.

6. Make smart choices.  Even in this tough economy, it’s not worth someone’s health/well being just to get a deal done.  BUT, you can still get that deal done with an SSL VPN. No need to choose between business and health.

ps



Feedback

5/20/2009 4:11 PM
Gravatar This was just what I was looking for, great resource. Bookmarked.
Norton 360 3.0 Coupon
5/1/2009 2:44 PM
Gravatar Here, here. Pete.

I've been saying that this "episode" is a great chance for info sec people to do education, testing the disaster recovery plan and to promote teleworking.

FWIW, here's a how-to I did on configuring a Firepass to work with two-factor authentication from WiKID: http://www.wikidsystems.com/support/wikid-support-center/how-to/how-to-add-wikid-two-factor-authentication-to-a-f5-firepass-ssl-vpn-1/

Needs to be updated to add mutual https authentication.

nick
Nick Owen
5/13/2009 5:31 PM
Gravatar Thanks Nick & nice work on the FirePass step-by-step. Apologies for the delayed response but read my latest entry (http://devcentral.f5.com/weblogs/psilva/archive/2009/05/13/interopt-out.aspx) and you'll understand why. :-)

ps
psilva
9/25/2009 11:49 AM
Gravatar Our H1N1 Preparedness Plan
Pete Silva

Let Me Know What You Think


Please use the form below if you have any comments, questions, or suggestions.

Title:
 
Name:
 
Email: (so we can show your gravatar)
Website:
Comment: Allowed tags: blockquote, a, strong, em, p, u, strike, super, sub, code
 
Please add 8 and 6 and type the answer here:

Blog Stats

Posts:285
Comments:98
Stories:0
Trackbacks:111
  

Post Categories

  Cloud Computing
  Security
  SSL VPN
  Information security
  pci
  PKI
  application attacks
  malware
  mitigation
  client security
  compliance
  notification laws
  social media
  social networks
  twitter
  facebook
  youtube
  digg
  peter silva
  social media stats
  ipv6
  ipv4
  2012
  context
  contextual aware
  user centric
  decision
  game show
  granular
  control
  identity
  cloud security
  virtualization
  sys-con
  cloud expo
  virtual
  glenn brunette
  sun microsystems
  Bruce Schneier
  Schneier on security
  research
  2009
  blog
  2010
  threat
  pci dss
  regulations
  espionage
  pentagon
  crown jewels
  tower of london
  health care
  banking
  prediction
  cybercrime
  cybercrime kits
  dyi
  dnssec
  dummies
  l0pht
  2600
  breach
  privacy
  breaches
  web security
  spam
  trojan
  gogrid
  blogger
  personal
  business
  H1N1 flu
  emergency preparedness
  disaster recovery
  network security
  oracle
  sso
  single sign on
  big-ip
  oracle access manager
  f5
  personal devices
  mobile devices
  mobile security
  windows
  microsoft
  windows 7
  desktop
  games
  gaming
  online games
  DDoS
  scams
  consolidation
  data center
  tech sector
  single purpose
  dedicated
  management
  access security
  policy enforcement
  utm
  processing power
  video
  audio
  multi-media
  dns
  webinar
  interview
  ioactive
  kaminsky
  dan kaminsky
  partner
  rsa
  xml
  splunk
  instructional
  in 5
  education
  training
  idc
  smart city
  smart grid
  infrastructure
  web 2.0
  standards
  inter-cloud
  interoperability
  application mobility
  peering
  confusion
  cloud confusion
  cloud survey
  edge gateway
  v10.1
  history
  words and meanings
  lists
  fun
  patent
  intellectual property
  trade secrets
  confucius
  cloudfucius
  series
  blog series
  a-z
  law
  constitution
  court
  fourth amendment
  gps
  government
  legal
  vmotion
  vmware
  case study
  interop
  v10.2
  database
  csrf
  asm
  adc
  arx
  data manager
  netapp
  storage
  WAN optimization
  application delivery
  optimization
  compression
  whitepaper
  statistics
  cloud research
  cloud stats
  LTM VE
  travel
  firepass
  encryption
  music
  humor
  uptime
  cloud outage
  SLA
  availability
  customer
  vmworld
  yankee group
  sports
  NFL
  performance
  acceleration
  peoplesoft
  rman
  recovery manager
  oow
  openworld
  replication
  integration
  apm
  wi-fi
  numbers
  firepass
  risk
  open source
  authentication
  smart card
  kerberos
  Business Challenges
  evidence
  SSL
  SSL offload
  NIST
  2048-bit
  certificate
  rss
  blog analytics
  web traffic
  e-cards
  hardware
  support
  diagnostics
  iHealth
  apple
  iPhone
  iPad
  iOS
  itunes
  smartphone
  v10.2.1
  citrix
  vdi
  parody
  satire
  entertainment
  andriod
  virus
  google
  mac
  comscore
  ID theft
  social security
  ssn
  synthetic ID theft
  credit report
  data privacy
  cyber threat
  reports
  50 ways
  2011
  trade show
  silva
  emc
  emc world
  ixia
  viprion
  ssl tps
  vCMP
  outtakes
  acting
  theatre
  tokens
  vpn
  remote access
  intrusion 2.0
  toys
  v11
  ajax
  SANS
  devcentral
  whitehat
  sentinel
  waf
  scanner
  grossman
  iApps
  wan op
  file virtualization
  hawaii
  emea
  ipexpo
  london
  UK
  human behavior
  risk managment
  tech center
  secure vault
  fips
  appliance mode
  copyright
  pearl harbor
  Dec 7
  punchbowl
  honolulu
  staffing
  jobs
  irules
  AppSec
  TradSec
  icsa
  v11.1
  community
  

82,243 Members in 102 Countries and Growing!

Join DevCentral Today!

About DevCentral

DevCentral has been a successful, thriving community for many years. We have always strived to bring you the best technical documentation, discussion forums, blogs, media and much more that we can.

So dive in, get familiar with DevCentral. We hope you like it, we hope it makes your job easier, and lets you get that much more power out of the community. To learn more, make sure to check out the Getting Started section. And if you have any problems, or think something could be easier to use, drop us a line to let us know.

Got It !

We've received your comment and transmitted it directly to DevCentral HQ.

Thanks for taking time to let us know what's on your mind. At DevCentral | Community Matters!

Get In Touch With Us

Have questions, suggestions or just want to get something off your chest?

Use our handy form below to Direct Connect with DevCentral Mission Control.

Send Us Feedback       or