nanog mailing list archives

Re: NSA able to compromise Cisco, Juniper, Huawei switches


From: "Dobbins, Roland" <rdobbins () arbor net>
Date: Mon, 30 Dec 2013 16:03:07 +0000


On Dec 30, 2013, at 10:44 PM, <Valdis.Kletnieks () vt edu> <Valdis.Kletnieks () vt edu> wrote:

What percentage of Cisco gear that supports a CALEA lawful intercept mode is installed in situations where CALEA 
doesn't apply, and thus there's a high likelyhood that said support is misconfigured and abusable without being 
noticed?

AFAIK, it must be explicitly enabled in order to be functional.  It isn't the sort of thing which is enabled by 
default, nor can it be enabled without making explicit configuration changes.

-----------------------------------------------------------------------
Roland Dobbins <rdobbins () arbor net> // <http://www.arbornetworks.com>

          Luck is the residue of opportunity and design.

                       -- John Milton

Attachment: signature.asc
Description: Message signed with OpenPGP using GPGMail


Current thread: