Steve Riley on Security

Browse by Tags

Directly connect to your corpnet with IPsec and IPv6: Contrary to popular belief, the rumors of my demise have been greatly exaggerated. Well, ok, no actual rumors, but hey, one can dream, huh? My spring calendar was full of events in Asia and Australia, then TechEd US seemed to suddenly appear out of nowhere! Read More...
Posted 25 June 08 01:55 by Steve Riley | 26 Comments
Filed under Windows Vista, NAP, authentication, TechEd, Active Directory, configuration, VPN, IPsec, networking, BitLocker, encryption, group policy, SSL/HTTPS
NAP case study published: Another new resource for you... I know from my time with customers in meetings and at events that NAP is something you're all very interested in. You're also being a bit cautious, waiting to see how the market matures, and hoping to learn how some customers Read More...
Posted 01 February 08 03:50 by Steve Riley | 1 Comments
Filed under NAP, IPsec
Must be a slow news day: reporter writes 100% crap: Imagine my surprise to read that Microsoft is removing NAP from Windows Vista ! Does this guy actually get paid money to write this drivel? The particular folks quoted in the article all have their own agendas, of course. News flash: we aren't dropping Read More...
Posted 03 October 06 11:12 by Steve Riley | 6 Comments
Filed under Windows Vista, NAP, false claims, the trade press, things that make me angry, things that make me laugh
Remote Access Quarantine (TechNet Magazine article): http://www.microsoft.com/technet/technetmag/issues/2006/03/SecurityWatch/default.aspx In those good old easy-to-manage pre-mobility days, personal computers presented few actual threats to a network. Sure, there was the occasional virus you’d get from Read More...
Posted 28 February 06 03:58 by Steve Riley | 9 Comments
Filed under NAP, access technologies, ISA Server, VPN
August article: 802.1X on wired networks considered harmful: Several months ago I learned from Svyatoslav Pidgorny, Microsoft MVP for security, about a problem in 802.1X that makes it essentially useless for protecting wired networks from rogue machines. Initially I was a bit skeptical, but the attack he described Read More...
Posted 11 August 05 10:55 by Steve Riley | 16 Comments
Filed under NAP, authentication, access technologies, risk mitigation, threats, protection, security science, wireless