 |
 |
|
Cisco ASA - Call PBM IT Solutions at (888) 233-6471The Cisco Secure Network Foundation allows small and medium-sized businesses to focus on profitability, rather than their network. It delivers consistent, secure services to all users, wired or wireless. Security services are integrated into Cisco routers, switches, and security appliances, helping small and medium-sized businesses to streamline operations and reduce costs. The Cisco Secure Network Foundation incorporates Cisco Self-Defending Network technology that protects networks today and adapts to handle tomorrows security needs. Businesses can continue to operate, even while threatened by attack, and can meet both customer and legal requirements for data security and privacy. Cisco IronPort Email Security Appliances (1) Fight spam, viruses, and blended threats to protect organizations of all sizes with industry-leading security capabilities (2) Prevent data leaks, enforces compliance, and protects reputation and brand assets, (3) Reduces downtime, simplifies administration of corporate mail systems, and eases the technical support burden, and (4) Is currently deployed by eight of 10 largest ISPs and more than 40 percent of the world's largest enterprises Cisco Virtual Office (1) Extends highly secure, rich, and manageable network services to employees working outside the traditional work environment, (2) Is a cost-effectively scales to deployment requirements through standard or express versions, (3) Includes remote site and head-end systems, remote site aggregation, and services from Cisco and approved partners, and (4) Delivers an office-caliber experience to staff wherever they're located with full IP phone, wireless, data, and video services. Large businesses require the following network security protections: (1) A strong firewall and proxy to keep unwanted people out, (2) A strong Antivirus software package and Internet Security Software package, (3) For authentication, use strong passwords and change it on a weekly/bi-weekly basis, (4) When using a wireless connection, use a robust password, (5) Exercise physical security precautions to employees, (6) Prepare a network analyzer or network monitor and use it when needed, (7) Implement physical security management like closed circuit television for entry areas and restricted zones (8) Security fencing to mark the company's perimeter, (9) Fire extinguishers for fire-sensitive areas like server rooms and security rooms, and (10) Security guards can help to maximize security. In recent years, security needs have intensified. Data communications and e-commerce are reshaping business practices and introducing new threats to corporate activity. National defense is also vulnerable as national infrastructure systems, for example transport and energy distribution, could be the target of terrorists or, in times of war, enemy nation states. On a less dramatic note, reasons why organisations need to devise effective network security strategies include the following: (1) Security breaches can be very expensive in terms of business disruption and the financial losses that may result, (2) Increasing volumes of sensitive information are transferred across the internet or intranets connected to it, (3) Networks that make use of internet links are becoming more popular because they are cheaper than dedicated leased lines. This, however, involves different users sharing internet links to transport their data, and (4) Directors of business organizations are increasingly required to provide effective information security. For an organization to achieve the level of security that is appropriate and at a cost that is acceptable, it must carry out a detailed risk assessment to determine the nature and extent of existing and potential threats. Countermeasures to the perceived threats must balance the degree of security to be achieved with their acceptability to system users and the value of the data systems to be protected. Test the most important systems first. In general, systems that should be tested first include those systems that are publicly accessible, that is, routers, firewalls, web servers, e-mail servers, and certain other systems that are open to the public, are not protected behind firewalls, or are mission critical systems. Organizations can then use various metrics to determine the importance or criticality of other systems in the organization and proceed to test those systems as well. Vulnerability involves bugs or mis-configurations or special sets of circumstances that could result in an exploitation of that vulnerability. A vulnerability could be exploited directly by an attacker, or indirectly through automated attacks such as Distributed Denial of Service (DDOS) attacks or by computer viruses. One form of attack on computing systems connected to the Internet is eavesdropping on network connections to obtain login ids and passwords of legitimate users [RFC 1704]. Bellcore's S/KEY(TM) one-time password system was designed to counter this type of attack, called a replay attack [RFC 1760]. Several one-time password implementations compatible with Bellcore's S/KEY (TM) system exist. These implementations are increasingly widely deployed in the Internet to protect against passive attacks. Deploy Comprehensive Network Security: Cisco adaptive security appliances integrate industry-leading firewalls, unified communications security , VPN technology, intrusion prevention, and content security in a unified platform to (1) Stop attacks before they penetrate the network perimeter, (2) Protect resources and data, as well as voice, video, and multimedia traffic, (3) Control network and application activity, and (4) Reduce deployment and operational costs. Auditors face some challenges when reviewing router and firewall configurations. I'm going to discuss a few of them in this article. My assumption is that there is a device hardening standard in place, which points out the key elements of configuration. I am also assuming configuration review is only small, and not the most important part of audit program (design assessment, change control, access control, etc... have to be done as well). |
