In January I wrote a summary of a past CCIE Security “Ask the Expert” Session from 2007.  Yusuf Bhaiji, the CCIE Security Proctor, just completed another session and it was full of some more good information.  I don’t think this one was quite as good as the last one, but here are the highlights:
General Test [...]

Lock and Key may be kind of a primitive method to creating dynamic access, but I still like it. Lock and key is exactly what is says. You basically are keeping dynamic access-list entries locked up until a valid user (Key) can come along and unlock them for use.
I have a server that I like [...]

Cisco made a great way to stop certain types of traffic from taking over a port. On a switch you can use storm control to limit the total amount of bandwidth that can be used for unicast, broadcast and multicast traffic. You can also define an action to be taken when the threshold is reached. [...]