How to install ASDM for PIX 7.x

1. Copy the ASDM binary file to a TFTP or FTP server on your network. 2. Log in to the security appliance and enter privileged EXEC mode: hostname> enable password: hostname# 3. Ensure that you have connectivity from the security appliance to the TFTP / FTP server. 4. Delete the old version of PDM by… Continue reading How to install ASDM for PIX 7.x

Sample – Network Infrastructure – Project Schedule for Networked Systems

Sample Project Tasls. Task Responsible Person Project initiation   Draft project proposal   Approve project   Develop project plan   Collect information from different anticipated users on network requirements   Specify network requirements   Approve network requirements   Specify network components: hardware, software   Develop network infrastructure plan   Develop network quality plan   Develop… Continue reading Sample – Network Infrastructure – Project Schedule for Networked Systems

Sample Visio – Network DMZ Drawing with Backup considerations

Free – Visio Network DMZ Drawing with Backup considerations Document download DMZ Drawing with Backup considerations www.bestitdocuments.com

Grouped Pieces of ITIL V3 Processes

ITIL Change Management o Service Catalog o Service Design o Design coordination o Service Level Management o Availability Management o Capacity Management o IT Service Continuity Management o Information Security Management o Vendor / Supplier Management ITIL Service Transition o Financial Management o Demand Management o Service Portfolio Management o Service Management for IT Services… Continue reading Grouped Pieces of ITIL V3 Processes

A Multi-Layered Security Approach

The best security plan is a multi-layered one that creates circles of protection within one another, so that if one defense is penetrated, an intruder still has to get through more levels in order to do damage. Such an approach is called a defense-in-depth design. Computer security should also be multi-layered, which means inclusion of… Continue reading A Multi-Layered Security Approach

Suggested Secure Media Destruction Standard

Scope This standard applies to all corporate data, including corporate customer data, whether located at a corporate facility or a third party facility, and whether handled by corporate employees, or corporate contractors, vendors, third party service providers, or their staff or agents.  This standard also applies to all wholly owned and partially owned subsidiaries. Furthermore,… Continue reading Suggested Secure Media Destruction Standard

Unix Cross Reference Command Summary

Backed by request from our blog comments. BSD Commands.pdf Quick Command Index.pdf RH Linux Commands.pdf Solaris 7 Commands.pdf Solaris 8 Commands.pdf UCR.PDF Universal Unix Commands.pdf Unix Crossreference.pdf Free – Document download Unix Cross Reference Command Summary

Understanding Computer Forensics and Data Destruction

An often overlooked aspect of computer security involves data that remains on your computer after you think it is gone. The practice of recovering data from a computer is called computer forensics, a term that is usually associated with recovering data that constitutes evidence in a criminal or civil court cases. Recovery of “Deleted” Data… Continue reading Understanding Computer Forensics and Data Destruction

SDLC – Package software support Considerations

Are packages appropriately supported and maintained? Consider Maintenance agreement with the supplier Changes and upgrades checked and tested before installation Source code provided Measures to prevent unauthorized access to the software Software supplier: number of support staff, references, reliability Contracts Software certified Where software is owned by the supplier-escrow agreement Implications of in-house modifications Stability/Penetration… Continue reading SDLC – Package software support Considerations

Sample – Managed Security Serivce (MSS) Firewall Standard

Scope This standard applies to all corporate data, including corporate customer data, whether located at a corporate facility or a third party facility, and whether handled by corporate employees, or corporate contractors, vendors, third party service providers, or their staff or agents.  This standard also applies to all wholly owned and partially owned subsidiaries. The… Continue reading Sample – Managed Security Serivce (MSS) Firewall Standard

Security – Standard Patch and Cert Update Policy Recommendations

Suggested Standard for Patch, Cert and Vendor updates Policy Standard Security Update Recommendations Statement All security patch fixes and Cert recommendation, and other such materials provided by vendors or official computer emergency response teams (CERTs) must be promptly implemented for testing, and production. Within 30 days of receipt of a software advisory from a vendor,… Continue reading Security – Standard Patch and Cert Update Policy Recommendations