Thursday, 22 March 2007

Class Notes

IPChains and IPTables----- exc 242-244 and 266-268

Thursday, 15 March 2007

class notes

starting slide 23
end slide: 28

DMZ
bastion hosts
application gateways

Handson Lab 242-245

ipchains -- iptables

Thursday, 8 March 2007

Class notes

packet tracer : Solarwinds
stop at slide 23

discuessing the case study:

due date : 5th April for all of the cases

Case 1: Pretend that the classroom network is a self-contained network. You wish to draft a security policy that maintains security for all devices and users in the network. Make a list of all needed equipment and software to implement this policy.

example: --
client securing desktop (physical security - workstation - OS - antivirus - firewall)
server ( NOS - centrlized Antivirus - group policy -
switch (physical - vlan - config / pass - trunking
cables: physical - conduits - ohs regulations - type of cables
routers: physical - configuration (password 2 levels console /remote - ACL)\
firewall (H/W): Location - physical - environment
topolgy: perimeter - physical access (smart cards /biometric) - type of cables and connecters (specific adaptors - documentation of security policies - UPS - backup strategy - configure IPC

Case 2:
Devise
(draft) a company policy regarding removable media (storage needs) that both provides employees with the functionality they need to best get their job done yet does not compromise the security of company data. Be sure to include media disposal in the policy.

removable media

http://infosyssec.org/

Case 3:
Find out more about security options on desktop switches. Use the Cisco 2950 series as an example. Go to the Cisco web site and find the documentation for this switch. Read the documentation and list as many different security features as you can find – explain each feature as you list it as it pertains to securing a network.


Case 4:
Look up the documentation for Cisco 2950 switches at http://cisco.com/en/US/products/hw/switches/index.html and explain how to configure a SPAN port. List any considerations you should take when configuring SPAN.
Case 5:


Research some of the security options for the BIND program. You can start with http://www.isc.org/products/BIND/. Make a short report that includes the best practices for configuring BIND for optimal security.

installing and setting the ENDIAN FW