Securing the Network Infrastructure - created from Mind Map

Page 1

The network infrastructure includes routers, switches, servers and other devices.

Assigning Administrative Roles

Monitoring and Managing Devices

Using Automated Security Features

Securing the Control Plane

Securing Device Access

Physical Security

Operating System Security

Router Hardening

Secure Local and Remote Access

Increasing Access Security

Local access

Remote access

Telnet, SSH, HTTP, HTTPS, or SNMP

Strong Passwords

Encrypt all traffic between the administrator computer and the router

security passwords min-length length -service password-encryption- exec-timeout minutes [seconds]

Secret Password Algorithms

MD5, Scrypt, Sha-256

privilege level

role-based CLI

User EXEC mode ,Privileged EXEC mode

controlling which commands are available to specific roles

Cisco IOS Resilient

monitoring tool

provides a method for securing the IOS image and configuration files locally on the device

Syslog, SNMP, NTP

Cisco routers are initially deployed with many services that are enabled by default(CDP y LLDP)

Cisco CDP Monitor

Routing Protocol Spoofing

Routing systems can be attacked by disrupting peer network routers, or by falsifying or spoofing the information carried within the routing protocols.

Redirecting traffic to create routing loops. Redirecting traffic so it can be monitored on an insecure link .Redirecting traffic to discard it