Securing Network Devices

Securing Network Devices

1. Securing devices access

   • Edge router
     • Types
       • Single router
       • Defense-in-depth
       • DMZ
     • Physical security
     • OS n' config-files
     • Hardening
       • Administrative control
       • Unnecesary services
       • Unused ports
   • Secure administrative access
     • Strong passwords
     • Increase pass security
     • Secret password algorithm
     • Securing access line
   • Virutal logins
     • Login enhacement features
       • Block
       • Quite-mode
       • Delay
       • Logs
       • Failed attempts
   • SSH
     • Configuration

2. Assigning administrative roles

   • Privilege levels
     • 16 leves
     • Only asign commands
   • Role-based CLI
     • Root view
       • Create view
         • Commands and interfaces set
         • Create superviews
           • Views set
           • Users, group of users

3. Monitoring and managing devices

   • Securing IOS and config-files
     • IOS Resilient feature
       • Restore IOS image
       • Restore config-file
     • Secure Copy Protocol
     • Password recovery
   • Management and reporting
     • Out-of-band
       • Dedicated network
       • Highest security level
     • In-band
       • Enterprise network
       • Internet
       • Devices to be managed or monitored
       • IPSec, SSH, SSL
   • Syslog
     • Event notifications messages
       • Gather info
         • Monitoring n' troubleshooting
       • Type of info
       • Specify destination
   • SNMP
     • Monitoring network performance
     • Change configurations
     • Management Information Base
   • NTP
     • Sinchronize time n' date
     • MD5

4. Using automated security features

   • Audit
     • Settings
       • Services, interfaces n' ports
       • Restrict commonly managment servs.
   • AutoSecure
     • Recommendatios for vulnerabilities
     • Lock down
       • Management plane
       • Forwarding plane
     • Gather information
     • Secure passwords
     • Prompts banner

5. Securing the control panel

   • Routing protocols
     • Problems
       • Routing loops
       • Monitored traffic
       • Discard traffic
     • Authentication
       • MD5
       • SHA
   • Policing vulnerabilities
     • Control plane
       • CoPP
     • Data plane
       • ACL's

Bilder und Dateien der Mindmap