Tag: Networking (340)

Sample – Network UAT Change Policy

Network Services is requiring User Acceptance Testing (UAT) on all high risk/high impact changes and/or changes that will result in a known impact or system degradation. The risk scoring of the change is based on information entered in the change record as well as the Enterprise model used for scoring changes. The change is to… Continue reading Sample – Network UAT Change Policy

Sample – High Level LAN Architecture Considerations

Standards-based: Implementation, Monitoring and Break / Fix. Green Initiatives – reduce power, space, & cable plant requirements. High Speed Backup Infrastructure design. Wireless Standards for Trusted Laptops and BYOD. Deployment in new office build-outs. Implement Global LAN Multicast Architecture Migrate LAN infrastructure of recently acquired sites to corporate standards. Evaluate NextGen Data Center Network Architecture.… Continue reading Sample – High Level LAN Architecture Considerations

Our Cisco Switching Notes

Switching is ASIC (hardware) –based, as opposed to bridges (software). Otherwise, a switch is like a bridge with many more ports. A L3 “intelligent” switch is faster than a router and can sort by L3 addresses. Switches perform address learning by reading frames’ source addresses. They make forward-or-filter decisions whereby broadcasts (all 1s), multicasts (host… Continue reading Our Cisco Switching Notes

Sample Visio – Sample DNS Flows

Sample approach to a webcommerce DNS design. The webcommerce.local domain will be authoritatively hosted by Active Directory Integrated DNS on at least two DC’s / DNS servers.  One of these servers will be located in Dallas and the other, for fault tolerance reasons, will be located at the San Jose site.  All DC’s and member… Continue reading Sample Visio – Sample DNS Flows

IT Strategy and Technology

Becoming customer-centric starts with Strategy and is supported with Technology Enablers.  Technology is a means to an end.  Not an end in itself. Strategy and objectives identification. What is our overall mission? The value proposition? Marketing strategy? How will loyalty models be utilized or trigger-based marketing? Develop the customer and business metrics and establish benchmarks… Continue reading IT Strategy and Technology

Enabling – Oracle Audit Configuration for Security Audit Trails

Make sure you have enough disk space to support the storage of the event logs and make sure you have a process or strategy for log rotation / retention. The purpose of this document is to define the specific Oracle parameters required to capture the desired Oracle database events to the SYS.AUD$ table on test… Continue reading Enabling – Oracle Audit Configuration for Security Audit Trails

Network Security Scan Types and Considerations

Network Scan Types and Scope This network scanning recommendations defines network scan types, identifies reasons for scanning, identifies times when network scanning is allowed, who should approve network scanning, and specifies who should be notified when network scanning is done. Network device location scan – This scan may use different means to determine IP addresses… Continue reading Network Security Scan Types and Considerations

Cisco – Short Cryto PIX commands

PIX IPSEC Commands isakamp enable interface-name isakamp policy policy-number, authentication pre-share isakamp policy policy-number, encryption 3des isakamp policy policy-number, hash md5 isakamp policy policy-number group 1 isakamp policy policy-number lifetime 1000 crypto ipsec transform-set set-name esp-3des esp-md5-hmac crypto map name priority set peer peer-address crypto map name priority set transform-set set-name access-list name / number… Continue reading Cisco – Short Cryto PIX commands

SPLAT – Nokia Appliances IP / IPSO Security Configuration Standards

Purpose This document will provide standards for the configuration of Nokia IP Security Appliances.  These standards will provide continuity across the enterprise for all Nokia Appliances. Background Nokia IP Security Appliances are purpose built security devices, which are deployed at strategic locations throughout the Corporate Security to run Check Point Firewall-1.  These appliances run a… Continue reading SPLAT – Nokia Appliances IP / IPSO Security Configuration Standards

Enterprise IT Incident Response – Network Forensic Considerations

Network Forensics allows your organization to capture valuable, actionable intelligence to help secure your network and help ensure its availability. By capturing raw network data and using advanced forensics analysis, your IT and security staff can effectively identify how your business assets are affected by network exploits, internal data theft, and security or HR policy… Continue reading Enterprise IT Incident Response – Network Forensic Considerations

Cisco PIX – Logging Command Reference Shortcuts

Logging Message Filtering No logging message buffer-number: Do not manages with “number x” Logging Message Filtering 11101 Configuration mode change messages 11104 11105 11106 11107 11108 11109 502103 Privilege Level Change Message 611103 – 611104 User Logout Messages 304001 HTTP Path Messages Pix Logging – Syntax: loggin on enable logging Cisco Pix Logging Levels Level… Continue reading Cisco PIX – Logging Command Reference Shortcuts

Sample – Device Configuration Backup Network Management Standard

Overview Device configuration backup standard means that the running configuration must be saved into the router start-up configuration file first and then it must also be saved to an offline location a regional NMIS Archive server. To maintain the versions of the configuration files on the offline server first the existing configuration must be saved… Continue reading Sample – Device Configuration Backup Network Management Standard

Sample – CDP Network Management Standard

CDP Network Management Standard Overview CDP is used to discover the neighbor networking devices. CDP mostly works with Cisco hardware only, but some other vendors have implemented this as well. CDP is critical in network discoveries and it needs to be enabled on the all the devices. CDP is a layer two protocol only so… Continue reading Sample – CDP Network Management Standard

Sample – Cisco IOS Command Matrix

Move Up or Down Between Different Modes – Prompts. Mode:   Prompt down: up: enter/leave IOS:    none —– —– —– —– —– —– —– user exec: return exit exit quit quit logout logout > —– —– —– —– privileged exec: enable disable     # —– —– —– —– —– —– —– global config: config t… Continue reading Sample – Cisco IOS Command Matrix

Sample eHealth / Spectrum – Network Device Monitoring Considerations

Overview: Devices send traps the SDC – Secure Domain Connector  Central trap locations for all devices:  Primary Trap Director          Host-Name: IP Address: Location:  Failover Trap Director   Datacenter Network Devices:  eHealth eHealth Primary snmp-server “Host-Name” snmp-server “community”  Datacenter Network Devices: Host-Name: IP Address: Location:  eHealth eHealth Backup snmp-server “Host-Name” snmp-server “community” Variety of mechanisms monitor enterprise… Continue reading Sample eHealth / Spectrum – Network Device Monitoring Considerations