Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
If we only have cisco cat4500 and 9500 as the core switch and C2960x as distribution and access switch, what can we do to prevent ransomware attacked the internal resource?
If you already have ransomware in the network it's probably too late to do anything. If it hasn't spread everywhere yet then shutdown switch ports to isolate affected parts completely until they're certified "clean".
If you're looking to implement something as prevention then that's not something you can do just on switches. It's a total security solution - every single part of the network and IT needs to be included in the solution.
