Eicon Networks S92 Uživatelský manuál stáhnout pdf (Strana 185)

YuChakTinMichael‘sGIACGCFWProjectAssignment

Page 185

AuditReport

AuditoftheGIACnetworksecurityarchitecturewasperformedfrom4

th

Aprilto8

th

April,2002.Duringthisaudit,thefollowingareaswereassessedandreviewed:

à Existingsecuritypoliciesandprocedures

à Logicalandphysicalsecuritymeasures

à Securitydevicesconfigurations

à Rulebaseimplementationsandpoliciescompliance

à Administrativeandchangecontrolprocedures

WeconcludethattheGIACsecurityarchitectureissuccessfulinsecuringthe

network:

n Thefirewallsystemsareworkingasexpectedwithoutmajorproblems.Ontopof

this,thelayereddefensearchitecturemakesitpossibletomitigateanyserious

threat.

n Documentation,changecontrolandotheradministrativeproceduresareinplace

andareproperly followed.

n Duringthetechnicalassessmentphrases,mostvulnerabilitiesfoundareminor

andarerelatedtothenonfirewalldevices,includingtheWindows2000based

borderrouter,theVPNserverandtheRASserver.

n Intermsofperformance,faulttoleranceandremoteaccesssecurity,roomfor

furtherimprovementdoesexist.

Belowisalistofrecommendations:

Recommendatio nOne

AlthoughtherearetwoseparatelinksforusebyGIAC,theB2Bstreamissharing

bandwidthwiththeINETstreamwithoutanybandwidthcoordinationmechanismin

place.AQoSsolutionsuchastheCheckPointFloodGate1softwareshouldbe

consideredatRouter_Eiconcard:

“FloodGate1®isa policybased,QualityofService(QoS)solutionforVPNs,private

WANsandInternetlinks.Itoptimizesnetworkperformancebyassigningpriorityto

1 2 ... 180 181 182 183 184 185 186 187 188 189 190 ... 208 209

Žádné komentáře

Eicon Networks S92 Uživatelský manuál Strana 185