Eicon Networks S92 Manuel d'utilisateur télécharger pdf (Page 18)

YuChakTinMichael‘sGIACGCFWProjectAssignment

Page 18

LayersofProtection:

Intermsofsecurity,thegoalistoensurethatcritical internal resourcesmusthave

multiplelayersofprotectionifbeingaccessedfromthe“outside”.Insucha

multilayerarchitecture,firewallsofdifferentbrands/makesareusedsuchthatany

vulnerabilityon any oneofthemwon’trendertheentiresolutionbreakable.

Toensurethatthefirewallsystemsthemselvesaresecure,onlylocalconsolelogins

areallowed.Loginviathenetwork(suchastelnet)areentirelydisabled.Onalarge

andcomplexnetwork,itisdesirabletosetupoutofbandchannelsforthecentralized

administrationofthesefirewalls.OnGIAC’srelativelysimplenetwork,however,

suchapproachmaybetoocomplicatedandcostlytoimplement.

Frontline/PrimaryFirewalls:

Toprotectthenetworkagainstoutsideintrusion atthefrontline,itisdesirabletouse

namebrandfirewallsoftwarethathassolidreputations.IntheGIACnetwork,the

frontlinefirewall ontheB2ClinkisCheckPointFW1. Weshouldalwaysoptfor

usingthelatestversionsofthesesoftware,butduetoresourcelimitation,theFW1

versionbeingusedis4.0(whichis2yearsoldalready)runningonNTServer4.0.

DepartmentalLevelF irewalls:

FirewallsatthedepartmentallevelincludeNortonPersonalFirewall2002and

DeerfieldVisNetic.Thesefirewallsolutionsprovideadditionallayersofprotectionat

muchlowercosts,makingadefenseindepthstrategypossiblecosteffectively.

EquipmentGuidelines:

Inordertoprovidesecurity,reliabilityandanacceptablelevelofperformance,the

computerhardwareplatformsmustbededicated– afirewallsystemshouldjustactas

afirewallandnothingelse.Theminimumrecommendedhardwarerequirementsfor

thededicatedrouter/firewallplatformsreallydependon theactual use.When drafting

thehardwarerequirements, theguidelinesare:

1 2 ... 13 14 15 16 17 18 19 20 21 22 23 ... 208 209

Pas de commentaire

Eicon Networks S92 Manuel d'utilisateur Page 18