Search

This section offers steps on how to start with a service-oriented architecture (SOA). It was learned that SOA builds on the stack of protocols that define Web services. It is a broad, standards-based framework in which services are built, deployed, managed, and orchestrated in pursuit of new infrastructures that respond to shifting business demands. SOA starts with a business promise of enabling enterprises to re-engineer themselves. The more dynamic the business, the more it will benefit from a well-implemented SOA. Before implementation, it is recommended to survey surroundings. An SOA involves a sprawling set of technologies. Another step is the connection of first services. Coming next is the selection and deployment of a registry or repository. The issue of convergence should come next. Security plans must be laid and a messaging infrastructure must be built. The last two steps is the deployment of service management and orchestration.

This article focuses on the continuous growth of Secure Sockets Layer virtual private networks (SSL VPN) in the U.S. industry as of February 2005. Traditionally, providing road warriors and business partners with access to back-end servers and resources has meant deploying an Internet protocol security (IPSec) VPN. For site-to-site communication, IPSec remains the only game in town, but for client-to-enterprise links, it is falling out of favor precipitously. The administrative overhead associated with deploying IPSec client software has become overwhelming given the ever increasing number of clients to support. There is also the potential that IPSec tunneling will allow an untrusted device to punch a hole through the firewall--and directly into the heart of the network. These kinds of basic problems with IPSec are why SSL VPNs are showing up on more and more IT radar screens. With an SSL VPN, there is no client software to install, let alone maintain. Not only does this cut down on IT labor, but it also means remote users aren't limited to specified locations. Public Internet kiosks, partner sites, a borrowed laptop--they all work. More importantly, with an SSL VPN there is no open tunnel to the enterprise. SSL VPNs enforce security policies on each connection, allowing access only to specific resources based on user, location, and/or device. INSETS: Locking Down the End Point;Standardizing Trust at the Edge.

This article focuses on the efforts of Asian companies to promote adoption of the next-generation Internet Protocol (IP) called IPv6. The IPv4, limits the Internet to approximately 4 billion unique addresses. Because U.S. companies control the majority of those addresses, there has been no hurry to deploy IPv6 in the U.S. By contrast, however, Asian companies, backed by government investments and mandates, have been aggressively rolling out IPv6. But more than balancing supply and demand, Asian governments and companies also see IPv6 as a business opportunity, an opportunity to innovate and leapfrog the rest of the world. By making it easier to assign Internet addresses to devices and services, IPv6 could accelerate adoption of new applications such as third generation mobile services, gaming, smart consumer appliances, smart sensors, home automation and voice over IP. That potential for innovation may prove to be the biggest driver for IPv6 adoption in the U.S., as Asian IPv6-enabled products make their way westward. The biggest advantage of IPv6 global addressing will be its capability of facilitating applications that require fast, plug-and-play connections among peer devices on the edge of the network. INSETS: Where Are We Now?;VoIp and IPv6: A Perfect Pair.

This article evaluates several Internet protocol (IP) private branch exchanges (PBX). The 3Com, Avaya, Siemens, and Zultys IP PBX were tested at the Advanced Network Computing Laboratory at the University of Hawaii. Each product provides all the familiar telephony functions, from putting people on hold with insipid music, to transferring calls and recording voice mail. But each has capabilities that go far beyond the basics. Even better, these PBX can send phone settings out to the telephone sets attached to the network, providing great control over how the phones work, which features are available to which users, what locations the phones can call and how the phones can be used. The Siemens HiPath 4000 is another mega-PBX that can he configured to support as many as 100,000 users if several of the units arc networked together. The individual HiPath 4000 that we tested can support up to 12,000 users. 3Com VCX V70 provides a Web-based interface for phone users, allowing them to set various parameters for their phones. This means that they can use the Web interface to set up button assignments, forwarding rules, speed dial numbers, and so on. Avaya's S87OO is scalable enough to handle nearly any enterprise. Properly configured, this PBX can support up to 36,000 users per server and up to 1 million by networking multiple servers together. The S8300 is much smaller, limited to 450 users per server or 28,800 per network. The company Zultys says that the MX25O was designed from the ground up as an IP PBX platform, rather than being a telephony platform with IP grafted on, or a computer with telephony grafted on. INSET: Prepping for Networked Telephony.

The article explores the benefits of merging phone systems into an enterprise data network by deploying voice over Internet protocol (voIP). Unlike residential voIP, enterprise voIP is not simply about making cheap international calls over the Internet. Instead, it aims to replace the proprietary private branch exchange (PBX) phone systems and dedicated voice networks enterprises have relied on for years with standards-based call processing servers or appliances that run digitized voice and call control over the packet-based IP data network. Also known as IP PBX, these servers provide most or all features of their legacy PBX predecessors and connect over the local area network or wide area network with IP-enabled phone handsets. IP handsets look and function exactly like their legacy predecessors, but voIP vendors have recently added more personal computer (PC) -like features, such as color displays, Web surfing capabilities and limited access to data applications in some models. IP softphones provide the same handset capabilities in software installed on a PC, notebook or sometimes even a personal digital assistant. In addition to phones and IP PBX, an important component of voIP systems is the gateway, which is used to translate between IP and the time-division multiplexing scheme used by legacy PBX and the public switched telephone network. Most IP telephony systems support a collection standards from the International Telecommunications Union called H.323, which defines how the different elements of an IP telephony system interact. H.323 includes a number of voice compression standards. A competing, up-and-coming standard is called Session Initiation Protocol (SIP). SIP can serve as standard for other Internet applications such as instant messaging, chat and multimedia messaging as well and is expected to be major force driving converged applications. INSETS: Locking Down Voice;VoIP Directory Assistance;How To Speak VoIP;Are You Ready for VoIP?

This article reports that managing 50 network devices can be a challenge, managing 5,000 is allegedly nigh impossible, and many modern networks allegedly exceed even such figure. Allegedly, in most large network environments, heterogeneous hardware is the rule, and simple tasks such as changing simple network management protocol strings, implementing and verifying best-practice guidelines, and managing configuration changes across the enterprise allegedly become enormous problems. In addition, many network administrators allegedly rely on custom tools to manage devices en masse. Although such may allegedly be appropriate for some enterprises, others are clamoring for a better mousetrap. Three companies are allegedly looking to provide such service. Allegedly Rendition Networks' TrueControl 3.0 product, AlterPoint's DeviceAuthority Suite 1.1, and Tripwire's Tripwire for Network Devices 3.0 all aim to be the network device management tool of choice. All three allegedly offer centralized management of heterogeneous network devices, supporting network devices from multiple vendors. The management tools for different vendors allegedly vary wildly. From Cisco-style command-line interfaces to Web-based configuration tools, every vendor allegedly has its own view of how a device should be managed.

Presents a comparison between the IPSec and the Security Socket Layer (SSL) virtual private network (VPN) standards. Advantages of SSL VPN over IPSec VPN; Differences between IPSec and SSL when it comes to controlling access back-end servers and other resources; Risks of SSL. INSETS: Should You Outsource Your VPN?;Virtual Network of Peers.

Discusses issues concerning the addition of blockers, spammers and services like Verisign's SiteFinder on the Internet. Problems caused by SiteFinder according to the Internet Corporation for Assigned Names and Numbers; Arguments against adding intelligence on the Internet; Concerns over the deployment of Internet protocols. INSETS: How to Cut Network Interference;Who Runs the Internet Anyway?.

Reports on the emergence of Session Initiation Protocol for Instant Messaging and Presence Leveraging Extensions (SIMPLE) and the open-source eXtensible Messaging and Presence Protocol (XMPP) from the Internet Engineering Task Force. Challenge of stitching availability awareness into a variety of systems; Capabilities of SIMPLE; Advantages of XMPP.

Evaluates the performance of Internet Mail Access Protocol 4 (IMAP4) products available for electronic mail (e-mail) users. History of IMAP4; IMAP4 client/server compatibility. INSETS: IMAP: A partial blessing for some, not... by Dana Gardner;A natural fit with SuiteSpot, but offline features are shaky.;Solid basic client is born to work offline, and its free.;Esy's client has the basics but lacks enterprise features.

Presents a comparison between Eudroa Pro 2.0, Pronto Mail 2.01, SuperTCP Suite 96 and Z-Mail 4.0 e-mail computer software. Corporate information on e-mail software manufacturers Qualcomm Incorporated (Inc.), CommTouch Software Inc., Frontier Technologies Corporation (Corp.) and NCD Software Corp.; Installation and configuration of the e-mail software; Thier ability to create and send messages. INSETS: One-stop shopping: Internet access for PCs..., by Dean Andrews.;Report card..

The article presents a comparison of Aventail EX-2500 and the F5 Networks FirePass 4100 secure socket layer virtual private networks and offers information on its features and cost.

Reviews two voice-over Internet Protocol-capable firewall software. Firewall 1400 from Ingate; SonicWall Pro 2040 from SonicWall.

The article evaluates two load balancers for computer networks. NetScaler 9400 Secure Application Switch is really several appliances in one. It includes sophisticated load balancing, web site acceleration technologies such as Hypertext Transfer Protocol compression and Transmission Control Protocol (TCP)-session consolidation, Secure Socket Layer (SSL) acceleration, intrusion detection and prevention, web caching and SSL Virtual Private Network capabilities. More than just a sophisticated load balancer, it increases the performance of web sites by consolidating the dozens or even hundreds of TCP connections used between a client and server to one, reducing TCP/Internet Protocol traffic and load on the server. Further, it buffers TCP connection information from slower clients, reducing TCP overhead. Redline Networks' E/X 3250 Version 3.4 has added features in its new OverDrive, which is essentially a simple programming environment for creating content-delivery applications. It makes the overall device much more flexible, because any feature can be programmed as desired, rather than having only the options that ship with the device. Because the appliance is typically installed in a single-leg typology, there is no need to change the network settings for the servers behind it.

Provides information on the mobile Internet Protocol (IP) standard for wireless communications. Details on the Mobile IP standard; How mobile IP works; Deployment of Mobile IP.

Discusses Internet Protocol (IP) management for information systems managers. Security features against address duplication of TCP/IP; Difficulty of IP management; Class sizes of address blocks; Features of the Dynamic Host Configuration Protocol (DHCP); Disadvantage of Classless Inter-Domain Routing (CIDR). INSET: Internet addresses get outclassed..

Evaluates the Longitude 1.0 systems management solution from Heroix Corp. in the U.S. List of remote management protocols used by Longitude; Advantages and disadvantages of Longitude; Cost of Longitude.

This article looks at two new products unveiled at Demo Fall 2005 designed to enhance sensor technologies. Sensors are small measuring devices that integrate the physical or analog world with the digital world. The Tendril Service Broker is a distributed run-time platform that allows programmers to control sensors by looking at the data they produce rather than having to program changes at a lower level by addressing each sensor's media access control address individually. Echelon introduced its Pyxos platform, which embeds the Pyxos network protocol inside any machine, sensor, motor valve, or actuator. The result of using just a pair of wires within a machine, rather than wiring every component and sensor separately, will reduce cost and maintenance while significantly increasing the amount and quality of information coming out.

This article unveils the plan of VeriSign to integrate on-campus Wi-Fi to any wide-area wireless carrier network for data and voice roaming between networks. Although the Wireless Internet Protocol Connect Service will be used primarily to link mobile and Wi-Fi networks, it can also connect to a wireless carrier any device with an Internet Protocol connection on their networks. According to Lynda Starr, senior analyst for Internet Protocol communications at Frost & Sullivan, the VeriSign capability for seamless roaming between networks puts the carriers squarely back in the game.

Evaluates the Internet Small Computing System Interface appliance system from Rackable Systems. Features; Advantages and disadvantages; Cost.

Evaluates the NetVCR 2005 computer network protocol analyzer from Niksun. Features; Capability; Cost.

This article presents of list of reviews of several security products, including virtual private networks, vulnerability assessment offerings and some backup solutions. Netilla Security Platform Release 4.0 is a reliable security platform with built-in fail-over support, this box offers solid security, straightforward policy definition and a nice portal for end-users. However, policy management is not as easy as it could be, the range of Secure Sockets Layer cipher levels is limited and it lacks Lightweight Directory Access Protocol support. Symantec DeepSight Threat Management System 5.0 is a boon to large enterprises that need a lot of warning to prepare for attacks on vulnerabilities. The service provides detailed intelligence about activities that could be attacks and confirmed vulnerabilities. Information is presented clearly, identifying threat levels and threat trends. Although pricey, the nCircle IP360 Vulnerability Management System is a thorough, well-designed network vulnerability scanning solution that would benefit any large network. Dispersed scanners allow continuous scanning without consuming a lot of bandwidth. Application detection accuracy is solid. Easy to operate and extremely thorough, Sanctum AppScan DE 1.7 is a worthwhile tool for developers interested in shoring up a Web application's security.

This article evaluates the Aventail EX-750 Secure Sockets Layer (SSL) Virtual Private Network (VPN) appliance. If a user needs to provide secure remote access to Web-based applications as well as other network resources, then an SSL VPN is a great choice. SSL VPN do not require any special client software in order to access resources inside the enterprise. Now business partners, road warriors and users at public Internet access terminals can safely and easily get to the information they need without adding to IT staff's workload. The Aventail EX-750 SSL VPN appliance provides granular yet flexible secure remote access without requiring an overly complex graphical user interface (GUI). Users and resources are easy to create and manage through the browser-based GUI and Aventail end point management is first rate. Some advanced end point features, however, require additional licensing. The appliance supports all types of VPN access, including Aventail Connect, a Windows application for seamless network integration. Notably, concurrent connections are limited to 50 users. The EX-750 comes with flexible user authentication tools. Users are grouped into realms, with each realm defined by the user store.

This article evaluates the EtherneTV Media Distribution System from VBrick Systems. Use of streaming video in the enterprise has been limited to transmitting tiny talking heads. Trying to include useful features such as whiteboard shots and product demonstrations has proven too difficult for all, but the most advanced and costly video distribution systems. VBrick's EtherneTV Media Distribution System changes that. However, it is not cheap, ranging from $10,000 to more than $100,000 for a complete system. Yet VBrick has succeeded in creating a single system that combines near-broadcast quality, appliance-like ease of setup, and flexible support for live broadcasts, on-demand streaming, and videoconferencing. A typical setup would have the bricks getting their initial configuration through Dynamic Host Configuration Protocol, with the MCS handling connection or multicast channel setup. VBricks decision to offer MPEG-4 as an encoding alternative to MPEG-1 and MPEG-2 was a good one. The format meets low bandwidth requirements and can stream reasonably good video to even mobile telephones and handheld devices. Each brick can be controlled in a variety of ways: via serial- or Telnet-based command line; with a Web browser through an encrypted login; with Simple Network Management Protocol; and via the MCS scheduler.

The article features computer storage network management tools. The i3000 Storage Concentrator routers from Stonefly Networks offer a safe and easy path from a hard-to-manage storage configuration with server-attached arrays to networked storage. The Stonefly solution compensates for somewhat complex management with the freedom to choose storage devices and excellent Replicator mirroring software. The Xgig Analyzer 1.5 storage management tool from Finisar adds support for Internet protocol-based storage area networks. Xgig evens out a slightly complicated setup with flexible configuration options, comprehensive protocol support, and first-class storage-protocol analysis software. The SANavigator 3.5.1 storage management tool from McData provides good reporting and monitoring tools, full management functionality, and support for a wide range of hardware. The Access Point 8200 wireless hardware from 3Com provides reliable 802.11a and 802.11b performance, though 802.11a speed drops rapidly with distance. The simple management console is easy to use, but lacks some enterprise-ready features. The Wireless-G router, access-point and notebook adapter from Linksys comprise a solid proprietary 11g implementation. Configuration is easy, and native performance is excellent, but mixed-mode operation generally defaults to slow 802.11b performance.

The article describes a software developed by Lumeta chief scientist Bill Cheswick which checks for network leaks. Cheswick says he knows how to find leaks and he is inspired the software that will help you find them. What he does seems simple on the face of it. He uses the familiar traceroute function to explore the ends of the network, but his innovation goes beyond just using the traceroute command. working from an inventory of network nodes, he uses spoofed addresses from both inside and outside the network to see where those queries show up. The key is that if a query from one side of the network ends up on the wrong side, there is a network leak. To accomplish this, Lumeta uses a new collection of appliances, called IP Sonar, which are placed in spots both inside and outside the network. The appliances communicate with a server that reports on what they find. To check for leaks, the appliances send traceroute requests to each Internet protocol address on the network and then look for responses. Network leaks show up in one of two ways. Either a test from inside the network would report passing through nodes outside the network, or tests from outside would appear inside the network. The appeal of IP Sonar is that it produces what Cheswick calls a cleaner network.

Evaluates the NetSwift iGate Pro Secure Sockets Layer Virtual Private Network appliance from Rainbow Technologies. Key features; Capabilities; Sites and connectors used in the iGate.

Focuses on the significance of WS-Security Web services standard. Conditions where security standards and protocols are important; Background of WS-Security; Function.

Reports on a U.S. Federal Communications Commission (FCC) proposal double the available bandwidth of 802.11 and its implications for Wi-Fi channels as of May 2003. Benefits from the additional bandwidth; Guidelines issued by the FCC; Reaction of Cisco Systems to the proposed spectrum; Criticisms on the proposal.

Focuses on two instant messaging protocols, Session Initiation Protocol-based Instant Messaging and Presence Leveraging Extensions (SIMPLE) and eXtensible Markup Language-based Extensible Messaging and Presence Protocol (XMPP). Progress of the protocols under the Internet Engineering Task Force standard body; Problems with SIMPLE; Views of Microsoft on SIMPLE technology.

Reports on the interests of vendors to the Session Initiation Protocol (SIP) as a way to unify disparate communication systems in the U.S. Plans of Siemens Enterprise Networks division to take the wraps off OpenScape, an SIP-based software application; Decision of International Business Machine to release SIP-based communication platform; Advantage of SIP; Information on interactive media.

Provides information on the Wi-Fi Protected Access security standard of the Wi-Fi Alliance in the U.S. Protocol used by the standard as a replacement for the Wired Equivalent Privacy; Features; Security methods on which vendors are focusing.

Discusses the effort of chief technology officers in the construction industry to push wireless and collaboration features despite cultural and business constraints. Increase in deployment of intelligent devices by Black & Veatch (BV) company to track and monitor building processes; Significance of 802.11 computer network protocol; Development of PowerTrak project management system by BV.

Deals with the growing popularity of Session Initiation Protocol (SIP) as a signaling technology for packet-based voice communications. Examples of companies that offered products based on SIP; Applications for SIP; Discussion on the concept of SIP.

Reports on the issue of Internet Protocol (IP) reliability. Initiative of Cisco Systems and Alcatel to improve its IP reliability; Reliability of voice networks; Applications of the Globally Resilient IP.

Reports on the emerging technologies for network-shared storage for business enterprises. Limitations of the existing storage solutions; Application of Internet small computer system interface; Introduction of the Network Data Management Protocol.

Reports on the debate over the Simple Object Access Protocol (SOAP) 1.2 of the World Wide Web Consortium. Concerns on the interoperability of SOAP 1.2; Enhancements of the SOAP 1.2; Views of industry experts on SOAP 1.2.

Focuses on the weaknesses in the Wi-Fi, or 802.1x, a security protocol for wireless networks. Three parts of 802.1x authentication; Vendors that have already begun adding 802.1x support to their products; Options to ensure a secure wireless network. INSET: THE BOTTOM LINE.

Focuses on the emerging IPv6, the next generation Internet Protocol (IP). Status of the IPv6 implementation; IPv6 adoption of the Information Service International-Dentsu; Prerequisite for the widespread adoption of the IP technology; IPv6 capability offering of Cisco; Steps taken by other companies toward IPv6.

Focuses on Network Address Translation (NAT), a solution which allows organizations to minimize the number of Internet Protocol addresses they need. Ways in which NAT works; Key requirements of NAT traversal; Test results of NAT Traversal.

Discusses challenges faced in the implementation of the Bluetooth and 802.11b wireless networking standards. Advantages and limitations of 802.11b and Bluetooth technologies; Comparison between the two technologies; Availability of Bluetooth-enabled wireless devices.

Emphasizes the importance of quality of service (QoS) in Internet-based businesses. Difficulty in taking charge of QoS; Advantages of the Internet Protocol IPv6 to QoS; How to maximize the effectiveness of QoS.

Reports that Cisco Systems is launching a number of fiber channel-to-Internet Protocol conversion switches in the United States as of February 2001. Benefits of the switches; Features of the switches.

Discusses the pros and cons of the two mobile technologies, wireless application protocol (WAP) and Java 2 Micro Edition (J2ME). Purpose of the release of WAP; Wireless networks where WAP can be applied to; Reason for the development of J2ME; Shortcomings of WAP; Insights on what to expect from the two technologies in 2000 and beyond.

Reports on the Internet Protocol (IP)-based and wireless services offered by Concert. Offering of the Concert IP service of the company; Portfolio of services.

Focuses on the computer network protocol Wireless Application Protocol (WAP). Examples of large companies that are considering WAP; Strengths of WAP; Other protocols being considered by company executives.

Focuses on the plans of AT&T Corp. to build Internet Protocol (IP) networks for General Motors Corp. and Delphi Automotive Systems. Estimated value of the contracts; Implications of the networks; Transmission technology to be used in General Motors' network.

Focuses on the support for the Wireless Application Protocol (WAP) technology which will enable wireless communication devices to access the Internet. Plans of introducing Version 1.2 of the WAP technology in early 2000; Partnership between Microsoft and Ericsson to evolve WAP more in the Extensible Markup Language direction.

Reports on panel discussions at the November 1999 Comdex computer show on voice over Internet protocol (VOIP) services. Questions on interoperability and security; Replication of the quality and features of conventional voice networks; Use of packet-based telephone switches; Delays that might be introduced if calls are encrypted on a virtual private network (VPN).

Focuses on a reworking of the set of Resource Reservation Protocol designed to provide guaranteed quality of service on Internet Protocol networks that is raising hopes for better application performance. Purpose of proposing the protocol; Protocols that are under development for setting up specific levels of service across local area networks and wide area network; Key to delivering the right levels of service.