cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1355
Views
3
Helpful
2
Replies

Cisco Live 2018 — How to handle threats in a very large event

282690
Level 5
Level 5
2 Replies 2

brford
Cisco Employee
Cisco Employee

Thanks Enrico for the great essay!

The ThreatWall at Cisco Live Europe 2018 in Barcelona was indeed active.  At one point we detected several crypto currency miners working over the event network.

The general policy used across the industry at very large public events is to actively monitor but only take action when staff can uniquely identify a device that is posing a threat.  When action is taken it is usually to block that devices access to the event network for a period of time; hoping that the person at the device will take the hint and change their behavior.

Brian

Brian Ford | brford@cisco.com | brford@yahoo.com | 51 75 61 6c 69 74 79 20 6d 65 61 6e 73 20 64 6f 69 6e 67 20 69 74 20 72 69 67 68 74 20 77 68 65 6e 20 6e 6f 20 6f 6e 65 20 69 73 20 6c 6f 6f 6b 69 6e 67 2e | Email me when you figure this out.

Thanks for your reply (sorry for my late).

In these days was published also an article on MWC2018 installation. 

https://blogs.cisco.com/security/cisco-catches-thousands-of-hidden-threats-on-a-massive-public-network?dysig_tid=8afaa1f…

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: