 |
 |
|
Contact Us! Complete this Form to Get a Quote or Call (888) 233-6471
Featured Solution: Cisco High Availability DataInformation theft is big business today. Malevolent hackers break into business networks to steal credit card or social security numbers for profit. Small and medium-sized businesses are at risk because they are seen as an easier mark than large corporations. Protecting the perimeter of the network is a good start, but it is not enough, since many information thefts have help from a trusted insider, such as an employee or contractor. Information theft can be costly to small and medium-sized businesses, since they rely on satisfied customers and a good reputation to help grow their business. Businesses that do not adequately protect their information could face negative publicity, government fines, or even lawsuits. For example, new consumer laws enacted in California require any business that suspects customer information has been viewed by unauthorized people must notify ALL their customers. Any security strategy must prevent theft of sensitive electronic information from both inside and outside the business. Cisco Security Monitoring, Analysis and Response System (1) Identifies threats by learning the topology, configuration, and behavior of the network environment, (2) Facilitates troubleshooting and identifying attacks or vulnerabilities for a wide range of enterprise networks, (3) Visually characterizes an attack path, identifies the threat source, and makes precise recommendations for threat mitigation, and (4) Simplifies incident management and response through integration with Cisco Security Management software. VPN Services for Cisco ASA Series (1) Provides remote end-user access for up to 10,000 SSL or true IPsec connections, (2) Supports applications and functions unavailable to a clientless, browser-based VPN connection, (3) Allows users to connect to IPv6 resources over IPv4 network tunnels, Nd (4) Facilitates creating user profiles and defining names and addresses of host. nFX Cinxi One offers you a new, cost-effective approach to security and compliance. Cinxi combines complete log management capabilities with powerful correlation technology, real-time monitoring, and an integrated incident response system, all on one appliance. Cinxi offers organizations of all sizes: (1) In-depth, real-time visibility into your security and compliance posture, (2) Unparalleled speed and performance, (3) Prioritized threat identification, alerting, and remediation guidance, (4) Comprehensive, automated log management reporting for compliance and audit, (4) Extensive on-board log storage with fast access to your event logs, and (5) A simple-to-deploy and easy-to-use solution, all at a fraction of the cost of other products. A passive attack is characterized by the interception of messages without modification. There is no change to the network data or systems. The message itself may be read or its occurrence may simply be logged. Identifying the communicating parties and noting the duration and frequency of messages can be of significant value in itself. From this knowledge certain deductions or inferences may be drawn regarding the likely subject matter, the urgency or the implications of messages being sent. This type of activity is termed traffic analysis. Because there may be no evidence that an attack has taken place, prevention is a priority. Traffic analysis, however, may be a legitimate management activity because of the need to collect data showing usage of services, for instance. Some interception of traffic may also be considered necessary by governments and law enforcement agencies interested in the surveillance of criminal, terrorist and other activities. These agencies may have privileged physical access to sites and computer systems. Securing and operating todays complex systems is challenging and demanding. Mission and operational requirements to deliver services and applications swiftly and securely have never been greater. Organizations, having invested precious resources and scarce skills in various necessary security efforts such as risk analysis, certification, accreditation, security architectures, policy development, and other security efforts, can be tempted to neglect or insufficiently develop a cohesive, well-though out operational security testing program. Look at the big picture. The results of routine testing may indicate that an organization should readdress its systems security architecture. Some organizations may need to step back and undergo a formal process of identifying the security requirements for many of its systems, and then begin a process of reworking its security architecture accordingly. This process will result in increased security inefficiency of operations with fewer costs incurred from incident response operations. One form of attack on computing systems connected to the Internet is eavesdropping on network connections to obtain login ids and passwords of legitimate users [RFC 1704]. Bellcore's S/KEY(TM) one-time password system was designed to counter this type of attack, called a replay attack [RFC 1760]. Several one-time password implementations compatible with Bellcore's S/KEY (TM) system exist. These implementations are increasingly widely deployed in the Internet to protect against passive attacks. The Cisco Intrusion Prevention System (1) Identifies, classifies, and stops malicious traffic, including worms, spyware, adware, viruses, and application abuse, (2) Delivers high-performance, intelligent threat detection and protection over a range of deployment options, (3) Uses reputation filtering and global inspection to give businesses actionable intelligence and prevent threats with confidence, and (4) Promotes business continuity and helps businesses meet compliance needs. Auditors face some challenges when reviewing router and firewall configurations. I'm going to discuss a few of them in this article. My assumption is that there is a device hardening standard in place, which points out the key elements of configuration. I am also assuming configuration review is only small, and not the most important part of audit program (design assessment, change control, access control, etc... have to be done as well). |
