#xfd14 — Public Fediverse posts

HPE + Juniper = Game changer for enterprise networking 🚀

HPE brings together campus, data center, WAN, & unified SASE under one AI-driven security vision

My analysis: https://securityboulevard.com/2025/11/hpes-post-juniper-vision-ai-driven-security-at-enterprise-scale/

#HPE #AI #NetworkSecurity #XFD14

The enterprise IT perimeter is dead. @1Password knows it. Their Extended Access Management secures the messy reality of modern work.
My new piece explores their strategic pivot: from "the people of no" to enabling productivity.
https://securityboulevard.com/2025/11/beyond-the-vault-1passwords-strategic-pivot-to-extended-access-management/
#Cybersecurity #IdentitySecurity #EAM #XFD14

If 92% of cyberattacks touch DNS, why not make it your first line of defense? "It's always DNS" isn't just a troubleshooting meme anymore — it's a security opportunity.

My latest: turning DNS from problem into protection 🔒
https://securityboulevard.com/2025/10/when-its-always-dns-becomes-your-security-advantage/RetryClaude can make mistakes.

#XFD14

The endpoint moved to the browser. Your security tools didn't.

Legacy SWGs & EDR can't see inside the browser—attackers are exploiting this blind spot with evasive assembly attacks.

Time to adopt Browser Detection & Response 🔒

Read more: https://securityboulevard.com/2025/10/the-endpoint-has-moved-to-the-browser-your-security-tools-havent/

#XFD14 @getsquarex

It's quite nice that @1password allows for a gentler approach to device remediation that enables customizable self-service instructions on how to remediate the issue and explain the why of it. Instructions can include tie-ins to your MDM or documentation webpages. #xfd14

It's quite nice that @1password allows for a gentler approach to device remediation that enables customizable self-service instructions on how to remediate the issue and explain the why of it. Instructions can include tie-ins to your MDM or documentation webpages. #xfd14

The access trust gap... The intersection of managed and trusted devices, users, & applications and those that you do not know or trust. @1password aims to solve that by securing every sign-in to any app on any device. Combining SSO/IdP, IGA, and MDM into one solution. #XFD14

The access trust gap... The intersection of managed and trusted devices, users, & applications and those that you do not know or trust. @1password aims to solve that by securing every sign-in to any app on any device. Combining SSO/IdP, IGA, and MDM into one solution. #XFD14

Going live with @1password 1300PST for the final presentation at #XFD14 to talk about extended access management. Watch along at

https://t.co/Ba57qGvduj
https://techfieldday.com/event/xfd14/

Going live with @1password 1300PST for the final presentation at #XFD14 to talk about extended access management. Watch along at

https://t.co/Ba57qGvduj
https://techfieldday.com/event/xfd14/

Why an extension vs dedicated browser? Ease of deployment, user adoption, and updating. Getting users to change how they operate is often a challenge, so meeting them where they are is key. @squarex #xfd14

Why an extension vs dedicated browser? Ease of deployment, user adoption, and updating. Getting users to change how they operate is often a challenge, so meeting them where they are is key. @squarex #xfd14

The attack graph in the @squarex portal can show both a single user view or multiuser view if multiple individuals fell for the same attack of how the user(s) ended up at downloading the infected file. #xfd14

The attack graph in the @squarex portal can show both a single user view or multiuser view if multiple individuals fell for the same attack of how the user(s) ended up at downloading the infected file. #xfd14

Coming back with @SquareX at #XFD14 as they discuss using the browser as an endpoint. Interested to learn about them and how they secure corporate SaaS apps and data.

https://www.linkedin.com/video/live/urn:li:ugcPost:7377029958143012864/

Coming back with @SquareX at #XFD14 as they discuss using the browser as an endpoint. Interested to learn about them and how they secure corporate SaaS apps and data.

https://www.linkedin.com/video/live/urn:li:ugcPost:7377029958143012864/

.@nilesecure customer @jetzeroaero is looking to bring old school blended wing design into the commercial passenger flight space for increased efficiency. The performance of Nile's infrastructure has enabled their engineers to more effectively collaborate on design. #xfd14

.@nilesecure customer @jetzeroaero is looking to bring old school blended wing design into the commercial passenger flight space for increased efficiency. The performance of Nile's infrastructure has enabled their engineers to more effectively collaborate on design. #xfd14

Having wired .1x access tied into corporate SSO with both pre and post authentication sounds nice. Not having to maintain a separate radius environment for authenticating devices is a large burden removed from organizations. #xfd14

Having wired .1x access tied into corporate SSO with both pre and post authentication sounds nice. Not having to maintain a separate radius environment for authenticating devices is a large burden removed from organizations. #xfd14

Having policy access displayed in a chart like this makes verifying who can talk to who very quick and easy at a glance. #xfd14

Having policy access displayed in a chart like this makes verifying who can talk to who very quick and easy at a glance. #xfd14

Having NAC built into the architecture to provide user based microsegmentation with SSO authentication via SAML with major providers such as Okta, Azure Entra, etc. is quite appealing. NAC planning and deployment can get quite daunting depending on the industry vertical. #xfd14

Having NAC built into the architecture to provide user based microsegmentation with SSO authentication via SAML with major providers such as Okta, Azure Entra, etc. is quite appealing. NAC planning and deployment can get quite daunting depending on the industry vertical. #xfd14

Effectively each client in a @nilesecure environment is in its own /32 based upon user identity.

As well the management plane is secured via TPMs, MACsec, and mutual auth between all elements. #xfd14

Effectively each client in a @nilesecure environment is in its own /32 based upon user identity.

As well the management plane is secured via TPMs, MACsec, and mutual auth between all elements. #xfd14

Effective and functional microsegmentation with a blast radius of 1 is quite the claim, especially in a world where many don't know what systems should be talking to each other. Interested in learning how they get there without breaking environments. #xfd14

Effective and functional microsegmentation with a blast radius of 1 is quite the claim, especially in a world where many don't know what systems should be talking to each other. Interested in learning how they get there without breaking environments. #xfd14

Customers having full control of their environment via the @nilesecure customer portal is a definite area of comfort for someone looking to migrate to NaaS. Important distinction from a MSP managed environment. #xfd14

Customers having full control of their environment via the @nilesecure customer portal is a definite area of comfort for someone looking to migrate to NaaS. Important distinction from a MSP managed environment. #xfd14

@nilesecure Network as a Service architecture at a high level #xfd14

@nilesecure Network as a Service architecture at a high level #xfd14

How do you solve the complexities of Zero Trust? You don't just bring in another box, you have to rethink things using a new model. @nilesecure #xfd14

How do you solve the complexities of Zero Trust? You don't just bring in another box, you have to rethink things using a new model. @nilesecure #xfd14

Oh, but what about corp. devices not on the corp. network? There's an agent which can detect the device is off the corp. network, and intercept and forward DNS queries to @infoblox Threat Defense invisible to the end-user. #xfd14

Oh, but what about corp. devices not on the corp. network? There's an agent which can detect the device is off the corp. network, and intercept and forward DNS queries to @infoblox Threat Defense invisible to the end-user. #xfd14

One thing not touched on during the @infoblox presentation is how easy Threat Defense is to deploy if you're already using their NIOS platform for DDI. Not counting internal change control processes, it takes 30-60 minutes to deploy forwarding proxies and policy. #xfd14

One thing not touched on during the @infoblox presentation is how easy Threat Defense is to deploy if you're already using their NIOS platform for DDI. Not counting internal change control processes, it takes 30-60 minutes to deploy forwarding proxies and policy. #xfd14

With most cloud providers pushing you to utilize their DNS infrastructure it can be a challenge to protect your cloud assets. In a partnership with Google @infoblox has integrated Threat Defense into DNS Armor for seamless protection. #xfd14

With most cloud providers pushing you to utilize their DNS infrastructure it can be a challenge to protect your cloud assets. In a partnership with Google @infoblox has integrated Threat Defense into DNS Armor for seamless protection. #xfd14

Zero Trust isn't a single product, it is a journey - kzettel @ @InfobloxThreatIntel

I wish that was a more common sentiment. Regularly see people in positions of influence/purchasing power that think Zero Trust is a SKU to purchase. #XFD14

Zero Trust isn't a single product, it is a journey - kzettel @ @InfobloxThreatIntel

I wish that was a more common sentiment. Regularly see people in positions of influence/purchasing power that think Zero Trust is a SKU to purchase. #XFD14

"Our analysis highlighted that using secure DNS would reduce the ability of malware attacks by 92%" - Anne Neuberger, former director of cybersecurity directorate NSA

If you can break the communication chain, you break the malware. #xfd14

"Our analysis highlighted that using secure DNS would reduce the ability of malware attacks by 92%" - Anne Neuberger, former director of cybersecurity directorate NSA

If you can break the communication chain, you break the malware. #xfd14

Want to use your @infoblox Threat Defense data outside of your DNS environment? Easy enough to utilize their APIs to export a feed into your firewall or other tool of choice. #xfd14

Want to use your @infoblox Threat Defense data outside of your DNS environment? Easy enough to utilize their APIs to export a feed into your firewall or other tool of choice. #xfd14

DNS seems like an odd area to talk security till you realize that DNS is often the first step in communications in any threat vector from phishing to C&C botnet traffic. @Infoblox Threat Defense offers you protection at that layer w/0 added load on your endpoint devices. #XFD14

DNS seems like an odd area to talk security till you realize that DNS is often the first step in communications in any threat vector from phishing to C&C botnet traffic. @Infoblox Threat Defense offers you protection at that layer w/0 added load on your endpoint devices. #XFD14

To me it's less about protection via DNS or FW but integrating the two together. @Infoblox's threat intelligence data is a great addition to your NGFW via EDLs. #xfd14

To me it's less about protection via DNS or FW but integrating the two together. @Infoblox's threat intelligence data is a great addition to your NGFW via EDLs. #xfd14

Coming at you in about 10 minutes at 1330 PST @infoblox will be talking about how they provide security via DNS. #XFD14

https://t.co/Ba57qGvduj
techfieldday.com/events/xfd14

Coming at you in about 10 minutes at 1330 PST @infoblox will be talking about how they provide security via DNS. #XFD14

https://t.co/Ba57qGvduj
techfieldday.com/events/xfd14

Coming at you in about 10 minutes at 1330 PST @infoblox will be talking about how they provide security via DNS. #XFD14

https://t.co/Ba57qGvduj
techfieldday.com/events/xfd14

Coming at you in about 10 minutes at 1330 PST @infoblox will be talking about how they provide security via DNS. #XFD14

https://t.co/Ba57qGvduj
techfieldday.com/events/xfd14

So why would you want to do security enforcement at the network layer?
1) Defense in depth, no single tool will catch/prevent everything.
2) BYOD devices you have to protect & prevent from being threats, but not being able to install any agents on them. #XFD14

So why would you want to do security enforcement at the network layer?
1) Defense in depth, no single tool will catch/prevent everything.
2) BYOD devices you have to protect & prevent from being threats, but not being able to install any agents on them. #XFD14

Got SD-WAN? @HPE Networking has 3 solutions to serve different use cases and all operate as edge firewalls as well: Juniper Session Smart Routers, Aruba EdgeConnect (SilverPeak) and Aruba MicroBranch. #XFD14

SecOps targeted dashboard to aid in seeing where an organizations threats come from, and who the targets/suspects are.

This ideally would expedite triage & remediation.

#XFD14

From detection of new/unique malware to delivery of updated signatures/ML update can be from seconds to 5 minutes. The variance is due to where in the pipeline the verdict comes. #XFD14

How does HPE @junipernetworks threat labs operate? Monitoring for threats, develop detection methods aiming for zero false positives, then share the threat intel with 3rd parties. #XFD14