CCNA - Capitulo 16.3

CCNA - Capitulo 16.3

1. NETWORK ATTACK MITIGATIONS

   • THE DEFENSE IN DEPTH APPOACH
     • COMBINATION OF NETWORKING DEVICES AND SERVICES WORKING IN TANDEM
     • VIRTUAL PRIVATE NETWORK (VPN)
       • ROUTER IS USED TO PROVIDE VPN SERVICES WITH
         • CORPORATE SITES
         • REMOTE ACCESS
     • ASA FIREWALL (NGFW)
       • STATEFUL FIREWALL SERVICES
       • INTERNAL TRAFFIC
         • CAN GO OUT AND COME BACK
       • BUT
       • EXTERNAL TRAFFIC
         • CANNOT INITIATE CONNECTIONS TO INSED HOSTS
     • INTRUSION PREVENT SYSTEM (IPS)
       • MONITORS INCOMIMG AND OUTGOING TRAFFIC LOOKING
         • MALWARE
         • NETWORK ATTACK SIGNTURES
     • EMAIL SECURITY APPLICANCE (ESA)
       • FILTERS SPAM AND SUSPICIOUS EMAILS
     • AAA SERVER
       • SECURE DATABASE
       • WHO IS AUTHORIZED TO ACCESS AND MAANGE
         • NETWORK DEVICES
       • PROVIDE ONLY AUTHORIZED
         • INDIVIDUALS WHITH ACCESS
       • ACCOUTING
         • WHAT DID YOU SPEND IT ON ?
       • AUTHORIZATE
         • HOW MUCH CAN YOU SPEND ?
       • AUTHENTICATION
         • WHO ARE YOU ?
     • WEB SECURITY APPLIANCE (WSA)
       • FILTERS KNOW AND SUSPICIOUS INTERNET MALWARES SITES
   • KEEP BACKUPS
     • PROTECTING AGAINST DATA LOSS
     • INFRAESTRUCTURE DIVICES
       • SHOULDE HAVE BACKUPS OF CONFIGURATION FILES AND IOS IMAGES
     • FREQUENCY
       • REGULAR BASIS
         • SECURITY POLICY
       • FULL BACKUPS
         • CAN BE TIME CONSUMING
           • PERFORM MONTHLY OR WEEKLY BACKUPS WITH FREQUENT PARTIAL BACKUPS OF CHANGED FILES.
     • VALIDATION
       • ALWAYS VALIDATE BACKUPS
         • ENSURE THE INTEGRITY OF THE DATA
         • VALIDATE THE FILE RESTORATION PROCEDURES.
     • STORAGE
       • SHOULD BE TRANSPORTED TO AN APPROVED OFFSITE STORAGE LOCATION . REQUIRED BY THE SECURITY POLICY.
         • ON A DAILY
         • WEEKLY
         • MONTHLY ROTATION
     • SECURITY
       • SHOULD BE PROTECTED
         • USING STRONG PASSWORDS.
   • UPGRADE , UPDATE AND PATCH
     • CREATION OF A STANDARD SOFTWARE IMAGE
     • SOLUTION MANAGEMENT OF CRITICAL SECURITY PATCHES END SYSTEMS
       • AUTOMATICALLY DOWNLOAD UPDATES
     • MITIGATE A WORM ATTACK
   • FIREWALLs
     • PROTECTS COMPUTERS AND NETWORKS BY PREVENTING UNDESIRABLE TRAFFIC
       • FROM ENTERING INTERNAL NETWORKS
     • BETWEEN TWO OR MORE NETWORKS
     • FIREWALL OPERATIONS
       • FIREWALL PERMITS TRAFFIC FROM USERS IN THE INSIDE NETWORK TO EXIT AND RETURN.
       • FIREWALL DENIES OUTSIDE TRAFFIC ACCESS TO THE INSIDE NETWORK.
     • TYPES
       • PACKET FILTERING -
         • PREVENTS OR ALLOWS ACCESS BASED ON
           • IP OR MAC ADDRESSES
       • URL FILTERING
         • PREVENTS OR ALLOWS ACCESS TO WEBSITES BASED ON
           • SPECIFIC URLS OR KEYWORDS
       • APPLICATION FILTERING
         • PREVENTS OR ALLOWS ACCESS BY SPECIFIC APPLICATION TYPES BASED ON
           • PORT NUMBERS
       • STATEFUL PACKET INSPECTION (SPI)
         • INCOMING PACKETS MUST BE LEGITIMATE RESPONSES TO REQUESTS FROM INTERNAL HOSTS.
           • UNSOLICITED PACKETS ARE BLOCKED UNLESS PERMITTED SPECIFICALLY.
           • SPI CAN ALSO INCLUDE THE CAPABILITY TO RECOGNIZE AND FILTER OUT SPECIFIC TYPES OF ATTACKS, SUCH AS DENIAL OF SERVICE (DOS)
   • ENDPOINT SECURITY

Imagens e arquivos do mapa