Securing Network Devices

Securing Network Devices

1. Securing the Network Infrastructure

   • Routers
   • Switches
   • Servers
   • Endpoints
   • Other Devices

2. Securing Device Access

   • Edge Router
     • Single Router Approach
     • Defense-in-Depth Approach
     • DMZ Approach
     • Three Areas of Router Security
       • Router Hardening
       • Operating System Security
       • Physical Security
   • Secure Administrative Access
     • Restrict device accessibility
     • Log and account for all access
     • Authenticate access
     • Authorize actions
     • Present legal notification
     • Ensure the confidentiality of data

3. Assigning Administrative Roles

   • Configuring Privilege Levels
     • Privileged EXEC mode (privilege level 15)
     • User EXEC mode (privilege level 1)

4. Monitoring and Managing Devices

   • Securing Cisco IOS Image and Configuration Files
   • Secure Management and Reporting
   • Using Syslog for Network Security
   • Using SNMP for Network Security
   • Using NTP

5. Using Automated Security Features

   • Performing a Security Audit
   • Locking Down a Router Using AutoSecure
   • Routing Protocol Authentication

6. Securing the Control Plane

   • Routing Protocol Authentication
     • Routing Protocol Spoofing
     • OSPF MD5 Routing Protocol Authentication
     • OSPF SHA Routing Protocol Authentication
   • Control Plane Policing
     • Network Device Operations
     • Control and Management Plane Vulnerabilities
     • CoPP Operation