Fichas
Network Device & Tunneling Protocols for Remote Access
Fichas del conjunto (30)
- 1Firewall1) Protects one network from another
2) Controls traffic in and out of network
3) Transport Layer 4 (TCP/UDP)
4) Filters via rules (ports) - 24 Firewalls TypesPacket, Application, Circuit & State-full
- 3Switch1) Data Layer 2
2) Forward traffic via MAC address
3) Mac table that maps MAC to port
4) Fast - 4Router1) Link Layer 3
2) Routes Traffic between IP subnets - 5Load Balancer1) Shifting a load from one device to another
2) used to avoid overloading - 6Proxies1) Sits between users and external network
2) Blocks malicious sites and caches known sites - 7Web Security Gateway1) Function as proxy with software security software built in (i.e websense)
2) UTM (unified treat management)
3) Firewall, Router, Switch, Malware, Spam - 8VPN Concentrator1) The connection point for remote users
2) Traffic is encrypted across the Internet and decrypted on the internal private network
3) Hardware device - 9Intrusion Detection Systems (IDS)1) Alerts but does not stop the attack
2) monitors and tracks network activity - 104 Types of IDS's (SHAD -B)Behavior Based Detection
Signature Based Detection
Anomaly Detection
Heuristic IDS - 11Protocol Analyzer /Packet Sniffer1) Captures and monitors network packets
2) Decodes each part of the communication
3) Sees all of the network - 12IPSEC1) Isn't a tunneling protocol
2) Provide encryption to tunnel protocols (L2TP) - 13SocketIP addresses and port number
- 14SFTP1) Only using TCP
2) SSH File Transfer Protocol
3) Uses one streem - 15FTPSTLS (Transport Layer) + SSL (Secure Socket Layer)
2) Uses two streams - 16L2TP1) Not secure
2) Uses IPSEC to provide data security - 17Spam Filters1) catches unwanted email and filter it out prior to it getting delivered
- 18Application Aware Device1) Ability to respond to traffic from what is there
2) Using SNMP and QoS based on importance
3) Firwall, IPS, IDS, Proxies etc - 19VPN1) Logically separate your switch ports into subnets
2) VLANs cannot communicate to each other without a router
3) Group users together by function - 20Demilitarized Zone (DMZ)1) Layer of security between internal network and the internet
2) Uses Firewall
3) Known as bastion hosts - 21Point-to-Point Protocol (PPP)1) Doesn't provide data security
2) Authentication using CHAP (Challenge Handshake Authentication Protocol - 22Point-to-Point Tunneling protocol (PPTP)1) Encapsulates and single point to point environment
2) Encrypts PPP packets
3) Not security because encryption occurs after negotiation (sniffers) - 23Layer 2 Forwarding (L2F)1) Tunnel primary for dial-up connections not WAN
2) provide authentication but no encryption - 24Layer 2 Tunneling Protocol (L2TP)1) Hybrid of PPP and L2F
2) No Data Security with no encryption by default
3) IPSec can be used to provide security - 25Subnetting1) Uses subnet mask value to divide network into smaller components
2) Confining traffic, reducing range of broadcast and network traffic - 26Virtial Local Area Network (VLAN)1) Creates groups of users and systems and segment them on the network
2) Reduces the size of broadcast domains
3) Improves performance and manageability
4) Increases security by segmenting similar data/users together - 27Network Address Translation (NAT)1) Allow an organization (multiple host internally) to use a single public IP for the internet
2) operates as a firewall - 28Port Address Translation (PAT)1) Single public IP and using multiple ports
- 29Network Access Control (NAC)1) Focuses on Authentication and security topologies after a network is in place
2) Set of standards by the network for clients access
3) Specified polices - 30Virtualization1) Allows one set of hardware to host multiple virtual machines
2) Break out virtualization layer could allow access to other virtual machines
3) Tools that intermingle can lead to privileged escalation
4) Hypervision attack can allow root access to all virtual system
5) MUST allows apply most recent patches
Información
- Descripción
- Fichas sobre Network Device & Tunneling Protocols for Remote Access, creado por Obi Davis el 03/02/2015.
- Creado por
- Obi Davis
- Visitas
- 1
- Valoración