[OCCAID] FW: US-CERT Technical Cyber Security Alert TA05-026A -- Multiple Denial-of-Service Vulnerabilities in Cisco IOS

James james at towardex.com
Thu Jan 27 21:40:19 EST 2005


On Thu, Jan 27, 2005 at 09:33:51PM -0500, Scott J. Clifford wrote:
> Cisco isn't challenging. You haven't tried Force10?
> 
> Scott.

hahahah... As far as I am concerned, F10 is The Failure of Layer3.

o No receive ACL / cp-policer / "loopback filtering"
o No MPLS
o Broken transit ACLs
o No IPv6
o Control plane management establishes connection then returns access-denied
  when 'attacker' is filtered. (What happened to receive ACL?)
o Price is very similar to fully loaded Cat6509 when its featureset
  doesn't even come close to half of Cisco's offering.
o ROUTE-MAP CHALLENGED
o etc etc

Sorry but SUP720-3BXL buries it :)

-J


More information about the Occaid mailing list