Slashdot Mirror


Cisco to Acquire Perfigo

MisterFuRR writes "Looks like Cisco is going to acquire Perfigo. Perfigo is a developer of packaged network access control solutions that provide endpoint policy analysis, compliance, and access enforcement capabilities. I can just see it now: Linksys routers with stickers that say 'Perfigo Ready.'"

28 of 110 comments (clear)

  1. Re:More monopolization by ScrewMaster · · Score: 4, Informative

    There are. The Sherman Antitrust Act, for one. The problem is enforcement.

    --
    The higher the technology, the sharper that two-edged sword.
  2. Re:LInksys makes crappy routers by jesuscash · · Score: 3, Interesting

    It seems to be Cisco's business strategy lately to acquire other (smaller) companys so they don't have to plunk down the cash for R&D and so that they can make knee-jerk reactions to market demands. What results is a product not ready for prime time that they have little understanding of and the TAC's are as confused as the sys-admins. Their infrastructure devices seem to do a fairly decent job, but try to find any information on their IDS (formerly NetRanger). End of life for these things is less than a year away and documentation is sparse at best. At least their message boards confirm that others are seeing the same problems and we're not just crazy.

  3. Well... by Anonymous Coward · · Score: 3, Funny

    ...if you can't innovate, just acquire and extort. It worked for Microsoft.

    1. Re:Well... by Anonymous Coward · · Score: 2, Insightful

      Cisco has always made a practice of purchasing companies that have technology they want. Why innovate when it's easier to acquire a company? Cisco is full of small dev teams that come from acquired companies. Linksys just happened to be a large purchase for them.

    2. Re:Well... by _Hellfire_ · · Score: 5, Informative

      Yeah absolutely!

      Cisco hasn't really done anything for networking in their entire history. Oh except for Standby Router Protocol, and IGRP (Interior Gateway Routing Protocol). They also innovated on their own design with EIGRP (Enhanced Interior Gateway Routing Protocol) Oh they also did Spanning Tree Protocol, VLAN Trunking Protocol, Skinny (a VoIP standard) and Hot Standby Routing Protocol.

      Not to mention Multiple Spanning Tree (MST), a new IEEE standard that grew from Cisco's proprietary
      Multiple Instances Spanning Tree Protocol (MISTP) implementation.

      They also invented NetFlow and WCCP (Web Cache Control Protocol).

      So yeah! No innovation at all from this company that has become the baseline in security and reliability for networking.

      Show some respect, because that Internet connection you're on at the moment is probably brought to you courtesy of Cisco innovation.

      --
      "And then I visited Wikipedia ...and the next 8 hours are a blur..."
    3. Re:Well... by pyite · · Score: 2, Informative

      You seem to have left out a couple. Let me enlighten you!

      SRP (Spatial Reuse Protocol)
      DPT (Dynamic Packet Transport)

      which of course have gone on to inspire the IEEE 802.17 standard RPR (Resilient Packet Ring).

      --

      "Nature doesn't care how smart you are. You can still be wrong." - Richard Feynman

    4. Re:Well... by jd · · Score: 2, Insightful
      Agreed with the above points, but CISCO's strength has tended to lie more in implementing other people's standard well, than in revolutionising the network protocol world.


      The Cisco Discovery Protocol is cool, but closed so other people had to invent their own, and most of them don't talk to each other. (GateD's discovery protocol, for example, is wonderful. Assuming the only router you ever want to use is GateD.)


      Cisco's deployment of IPv6 was surprisingly slower than that of, say, Bay or Telebit. (For a long time, the only IPv6 hardware router that earned much respect was the one by Telebit. Not bad going, when you consider that they're hardly one of the giants in the router world.)


      Other things are more curious. I'm fairly sure Cisco's IOS supports the ISIS protocol, but I don't think they do ESES or ESIS. Their QoS is extremely limited, being only three levels of priority per packet classification plus weighted fair queueing. I'm fairly sure they don't do RED, CBQ, HFQ, SFQ, ECN, IMQ or any of the fancier packet manipulations Netfilter nerds take for granted. Nor have they invented anything distinct but comparable in flexibility.


      While I agree, then, that Cisco has had a huge impact on the networking world and that the innovation they have done has generally influenced a lot of the way things are done, they are still far short of where they could be. Now, I could be wrong, but I believe the poster's intent was that Cisco isn't going to get any closer to their potential by just taking other firms over. It may improve your product range, but it doesn't alter your mind's range. You can generally do a lot more by stretching the mind than stretching the wallet, although there are plenty of cases where doing the latter makes doing the former much easier.

      --
      It's a small world and it smells funny; I'd buy another if it wasn't for the money; Take back what I paid (SoM)
  4. A rich ecosystem? by e9th · · Score: 5, Funny
    [Cisco] NAC provides a rich ecosystem...

    You know, that's the worst abuse of the word ecosystem I've ever heard.

    I guess *BSD is the spotted owl here.

  5. Re:More monopolization by Anonymous Coward · · Score: 4, Insightful

    Perfigo was funded by a venture capital firm. Their whole purpose was to either a) make a bunch of money selling their stuff to individual customers b) make a bunch of money selling the stuff to a larger company

    Cisco, for years, has aquired many smaller companies for the technology and/or ideas the smaller companies have.

    http://www.google.com/search?hl=en&lr=&client=fi re fox-a&q=100+best+companies+to+work+for+cisco&btnG= Search

    I recall reading that cisco was among the top 100 companies to work for in the US. Rated by their employees...

  6. I see... by Anonymous Coward · · Score: 5, Funny

    'Perfigo is a developer of packaged network access control solutions that provide endpoint policy analysis, compliance, and access enforcement capabilities.'

    It's all so clear to me now.

    1. Re: I see... by Black+Parrot · · Score: 3, Funny


      > > 'Perfigo is a developer of packaged network access control solutions that provide endpoint policy analysis, compliance, and access enforcement capabilities.'

      > It's all so clear to me now.

      Unfortunately your PHB will feel like he has to pretend to understand it, because all the other PHBs are pretending they understand it and yours doesn't want to look like the only person in the room who doesn't get it. So he'll bring home a million dollars worth and tell you to install it.

      --
      Sheesh, evil *and* a jerk. -- Jade
    2. Re: I see... by ShinmaWa · · Score: 4, Informative

      I am not familiar with Perfigo, but it seems as though they make equipment which will not allow a device to obtain non-trivial network access unless/until it has been shown to be up to snuff according to various configurable criteria

      Got it in one! Right on.

      That's exactly what Perfigo does. Its becoming rather popular on college campuses to protect their networks from morons coming back from summer vacation with their laptops and desktops loaded with worms, virii, trojans, major security holes, etc.

      --
      The /. Effect: Thousands of users simultaneously accessing a site to not read its content.
  7. Re:More monopolization by w1r3sp33d · · Score: 4, Insightful
    If they choose to buy up the best company in each market, they have still left many others to compete against them in each market.

    I could choose: Nokia firewall, Juniper router, HP switches, Brocade SAN, and M$ radius server or I could cut one check to Cisco and get pretty much all the same function out of a combination of their boxes.

    I'm not saying that it is right or wrong, but it is not a monopoly.

  8. Re:More monopolization by ImaLamer · · Score: 4, Insightful

    Cisco joins a long chain of American companies who buy out the little guy, thus increasing monopolization. There should be laws against this sort of thing

    Cisco does not have a chance at monopoly status. They also aren't buying a rival router manufacturer, just acquiring a company which will add to their technology portfolio.

    But, monopolies in themselves aren't illegal. I learned that in the third week of "economics". It is the actions of companies that get them into trouble. The definition of monopoly in my econ book reads something like: One business that can fulfill market demand at cheaper prices than two or more companies.

    Basically, it can be good for the consumer in some cases (think gas & electric) which is why being a monopoly isn't illegal. It's when others try to take your sole status and you crush them and the innovation they would bring to the table...

  9. Re:More monopolization by Orestesx · · Score: 2, Insightful

    The purpose of any company is to make a bunch of money. I'm not sure what your point is. I think it's great when a large company such as Cisco can bring a promising but under-utilized technology to market by acquiring a company. If this leads to fewer ddos's, great.

    On another note, there's a great gem of market-speak in this pr:

    "CleanMachines' turnkey approach directly complements Cisco NAC, which leverages a systems architecture approach that is more appropriate for Enterprise customers."

    Why is "Enterprise" capitalized?

  10. Slashdot challange! by WhatAmIDoingHere · · Score: 4, Funny

    Can we /. Cisco?

    If we manage to do it, I will be very impressed.

    --
    Not a Twitter sockpuppet... but I wish I was.
    1. Re:Slashdot challange! by _Hellfire_ · · Score: 3, Funny

      I doubt it - they've got more bandwidth than god.

      --
      "And then I visited Wikipedia ...and the next 8 hours are a blur..."
  11. All I see... by eingram · · Score: 3, Funny

    I can just see it now: Linksys routers with stickers that say 'Perfigo Ready.'"

    I just see more open WAPs myself. =D

  12. Re:More monopolization by Anonymous Coward · · Score: 2, Interesting

    And the alternative produces rolling california blackouts. Point: utility monopolies.

  13. Re:More monopolization by CestusGW · · Score: 3, Informative

    The situation you're thinking of is the one where competition produces overlap, redundancies and inefficiencies. In Canada, for example, Rogers has a monopoly on the installation, maintenance and management of cable TV lines. They can also sell cable access over these lines, but so can everyone else. Bell has a similar monopoly over telephone infrastructure, but other companies can sell services over this infrastructure. This is because having two companies put down phone lines down the same street is inefficient - you only need one phone line, not two. Having only one phone line benefits the consumer. Having only one company sell services over the phone line does NOT benefit the consumer.

    --
    Too much repetition my too much repetition!
  14. Thanks! by ljavelin · · Score: 2, Funny

    Thanks for the nice press release. Notice how the Perfigo website didn't make the posting - Maybe Perfigo was in fear that it'd stuffer from the /. effect?

  15. VLANs by macdaddy · · Score: 4, Interesting

    Don't forget VLANsm. Yes, I know they didn't technically invent them but it their entirely fucked up implementation that we're stuck using today. Use of Cisco's pre-standard implementation of VLANs was so widespread that the IEEE working group for 802.1Q had to more or less disregard all other implementations, some superior and some not, and give a thumbs up to to Cisco or they risked writing a standard that no one would use because the world's largest LAN infrastructure company wanted to do it their own way. Think of it like Microsoft deciding to ignore the W3C's newest HTML or XML standard and writing their entire suite of applications to embrace their own competing standard. In the end Cisco's VLAN implementation is what we're stuck with and it sucks when compared to what we could have had. Cisco's implementation didn't even have rudimentary authentication built into the standard. 802.1Q devices implicitly trust the VLAN advertisements they get on a trunk port as gospel. Thanks Cisco for fucking this up. We netadm's sure do appreciate it.

  16. Re:Is everyone blind or something? by numatrix · · Score: 4, Funny

    You can't understand it? It's quite simple. See, there's this website called Slashdot. What happens there is four or five people post the same story to the site. The shortest, most incoherent submission is further mangled by one of the editors and posted to the chosen (by their wallets) ones for an early read. These readers in turn notify the appropriate editor of half a dozen changes, suggestions, and fixes, all of which are ignored when it is posted to rest of the site.

    Then some smart aleck in the comments doesn't have anything meaningful to say about the story itself, so he posts an amazed comment about how such an obvious typo could make it through the ever so thorough vetting process.

    This is of course followed up by an even worse smart aleck who 'educates' the previous user and the entire thread is subsequently modded as not-funny and off-topic and hopefully removed from the visible comments for most users.

    Welcome! Hope you enjoy it here. Oh yeah; almost forgot. You're supposed to make a spelling typo in your spelling correction so that other people can ridicule you too. All part of the fun.

  17. Re:Wow... by bcreane · · Score: 2, Funny

    Yea, I found the article boring when scanning superficially. But after reading the perfigo site faq, its clear there's a potential for "synergy" between cisco and perfigo's products. It may be one of those [very] rare acquisitions that adds value for investors (and customers).

  18. Please discontinue Perfigo's products by RR · · Score: 3, Interesting

    At UCSC, we use Perfigo's SecureSmart servers for making it safe to plug the students' computers into the school network. It's bad.

    The server is constantly going down. Get this: It checks every 6 hours to make sure that it's currently registered. Frequently, it forgets that it's registered or Perfigo's registration server scrambles its licenses or something, because the dorm network then goes down. This happens about once per week.

    The system is based on a router running Red Hat 7 on commodity x86 machines. Last I heard, it was still using Linux 2.4.9. The upgrade procedure is a drive reimage. The actual routing goes on in a proprietary routing program with fairly low performance. The scanning is done with a customized Nessus. The administration is some custom PHP (IIRC) code, with no security roles and complete control via a single password.

    Furthermore, the source to the free software they use, they refuse to send to the customer. Somebody really should see if they can sue Perfigo for violation of the GPL.

    Ignoring the above, the Resnet administrator has set up the SecureSmart server to scan PCs for the usual Windows problems. If it finds one, he has it set up to let the user see only antivirus pages and Windows Update. Then it's supposed to scan the user's computer again after 24 hours. What usually happens is that the user's computer doesn't get an IP address anymore, ever, and the administrator has to unblock the specific MAC manually (using his single password).

    I'm guessing that we're still using it because the administrator feels that he has invested too much effort into it already. I don't know exactly what Cisco was thinking. Perfigo is just a bad investment.

    If you're also going to UCSC, you should check out https://api.alkaid.org/ It's currently a bit out of date, but it shows that the administrator should have known not to use Perfigo.

    --
    Have a nice time.
    1. Re:Please discontinue Perfigo's products by I+kan+Spl · · Score: 2, Funny

      Not only that, the perfigo boxes can be horribly confused, fairly easily.

      In one instance the SecureSmart server was convinced that my Linux laptop was infected with a doze virus...

      --
      My UID is prime and so is this number: 09 F9 11 02 9D 74 E3 5B D8 41 56 C5 63 56 88 C0.
  19. Perfigo SmartEnforcer by ComputerSherpa · · Score: 2, Informative
    Yep, my university now uses Perfigo. Last year we had a flood of worms, viruses etc. that nearly shut down our network. This year we implemented Perfigo SmartEnforcer on all student computers to keep that from happening again. SmartEnforcer basically scans the computer it's on and determines whether Windows Update and Norton Antivirus are up-to-date; only if they are will it allow network access. Only problem is that most of our student's aren't up-to-date, and can't follow our simple directions for updating their machines. Result: Lots of time spent in front of student computers watching progress bars, clicking "Next" a half dozen times, and trying to fix the scuzzy thing when it inevitably breaks.

    I haven't decided which is worse: the problem or the solution.

    --
    Information wants to be anthropomorphized!
  20. We use Perfigo here by landimal_adurotune · · Score: 2, Interesting

    Small colleges like the one I work at do not have the bandwith/resources to weather a huge worm/virus/ddos hit so we evaluated Bradford, Perfigo, StillSecure and Cisco's products. Cisco was ~100,000 and we'd have to put in end to end switches, we're a all-girl liberal arts private college so that is out of the question money wise. Bradford didn't understand the impact of firewalls on the market (at the time, they've changed their tune recently). StillSecure has a great roadmap, but a 5 year old could get around the security. Perfigo was the best of what was out there, and we did have the disconnect problems described by the previous poster, but we worked with Perfigo and got everything fixed, no issues at all since the last (and did not have to re-image like the previous poster said) 10-minute patch. My fear is this: Perfigo's reporting engine was/is terrible, Cisco is not known for UI improvements, hell not even known for a UI. Plus, we got a great deal from Perfigo, they were understanding to our situation and worked on the price, Cisco could give a rats ass about our business, so I fear we'll not be able to afford Perfigo in the future. Perfigo has amazing support, and most people that I talk to that complain about their installation have never called Perfigo to work with them on the problem. Three months into the school year, we've had 0 worms hit us, 0 DDoS attacks going outbound, and we know that no rouge access points are connected to our tiny internet pipe (ok there is one was to get one set up, but this is a liberal arts college, kismet shows nothing out there).