How to Use This Checklist
 

How to Use This Checklist

This checklist is a companion to the module, "Securing Your Network." Use it to help secure your network, or as a quick evaluation snapshot of the corresponding modules.

This checklist should evolve as you discover steps that help implement your secure network.

Router Considerations

Check Description
/jpg/check.GIF Latest patches and updates are installed.
/jpg/check.GIF You subscribed to router vendor's security notification service.
/jpg/check.GIF Known vulnerable ports are blocked.
/jpg/check.GIF Ingress and egress filtering is enabled. Incoming and outgoing packets are confirmed as coming from public or internal networks.
/jpg/check.GIF ICMP traffic is screened from the internal network.
/jpg/check.GIF Administration interfaces to the router are enumerated and secured.
/jpg/check.GIF Web-facing administration is disabled.
/jpg/check.GIF Directed broadcast traffic is not received or forwarded.
/jpg/check.GIF Unused services are disabled (for example, TFTP).
/jpg/check.GIF Strong passwords are used.
/jpg/check.GIF Logging is enabled and audited for unusual traffic or patterns.
/jpg/check.GIF Large ping packets are screened.
/jpg/check.GIF Routing Information Protocol (RIP) packets, if used, are blocked at the outermost router.

 

Firewall Considerations

Check Description
/jpg/check.GIF Latest patches and updates are installed.
/jpg/check.GIF Effective filters are in place to prevent malicious traffic from entering the perimeter
/jpg/check.GIF Unused ports are blocked by default.
/jpg/check.GIF Unused protocols are blocked by default.
/jpg/check.GIF IPsec is configured for encrypted communication within the perimeter network.
/jpg/check.GIF Intrusion detection is enabled at the firewall.

 

Switch Considerations

Check Description
/jpg/check.GIF Latest patches and updates are installed.
/jpg/check.GIF Administrative interfaces are enumerated and secured.
/jpg/check.GIF Unused administrative interfaces are disabled.
/jpg/check.GIF Unused services are disabled.
/jpg/check.GIF Available services are secured.
 

Last Updated: October 01, 2006

Winteacher.com
How to Use This Checklist

 © 2003-2006 Winteacher.com . All rights reserved