Network Hardening Essay

net income HardeningNetwork Layout 4 VPN (Remote Access Domain) Virtual Private Networks (VPNs) with VPN package and Secure Socket Layer/VPN (SSL/VPN) tunnels A Virtual Private Network or VPN enables a computer or network-enabled device to send and receive info through shared or public networks as if it were directly machine-accessible to the private network, while its benefiting from the functionality, security and management policies of the private network. It was created to stimulate a realistic pint-to-point connection through the using of dedicated connections, virtual tunneling protocols or traffic encryptions. Three Strategies for hardening the network environment1 Firewall Friendly VPNThe increase demands of e- short letter come with a compelling exigency for data security. Virtual Private Network with IP Security Architecture (IPsec VPN) meets this requirement by providing end-to end encryption and authentication at the IPlayer and protecting secret data that flows over possibly untrustworthy networks. IPsec has the advantage of a gigantic scope of coverage and agile granularity of protection however, incompatibilities exist betwixt IPsec VPN and the Network Address Translation (NAT) that firewalls practice.2 Security insurance enforcement room of enforcement of security policy should be a primary consideration throughout the research, test and implementation phases of any security technology. Careful research, review of makers documentation, questions presented to vendors and manufacturers, and testing of the technology can serve to meet this criteria. Without a method of enforcement, effectiveness of security policy is questionable at best. piece audit trails, hardware analysis and security logs should be reviewed regularly it is a fourth dimension-intensive process and this alone alerts the administrator to violations and security threats after they have occurred. Without a means ofenforcement, the administrator is risking the securi ty of the VPN by relying upon the remote VPN users to voluntarily admit with policy. As the secure network perimeter is being extended to espouse the VPN client, security policy must be enforced in real-time to protect the integrity of both the VPN client and the network.Having addressed security policy issues that require the VPN client to have antivirus software installed and using the latest update policy also requires a properly configured personal firewall to be running on the client PC or Laptop, and requires a time limit on inactive VPN sessions. How is this to be made obligatory, and remove the state from the VPN user to voluntarily comply with policy? The answer is as declared above by defining the need and carefully researching solutions forthcoming to follow through this need. The VPN Concentrator, a managed antivirus package, will fulfill the dictated requirements.3 Web core filteringFiltering incoming and outgoing traffic, using signatures, reputation ratings an d other heuristics. Whitelist allowed types of sack up content, instead blocking all executable content by default and use a process to enable individual selected access if a business justification exists. sort of disallow ActiveX, Java, Flash Player, HTML inline frames and JavaScript except for whitelisted web sites. Preferably use a solution that can similarly chat SSL traffic for malicious content, especially SSL communications with unfamiliar web sites. Preferably use technology that automatically opens downloaded files in a sandbox to celebrate anomalous behavior such as network traffic or changes to the file system or registry. Preferably, since this approach is more proactive and primitive than blacklisting a tiny percentage of malicious domains. An example implementation is available at http//whitetrash.sourceforge.netReferencewww.computer.howstuffworks.com/vpn.htmwww.en.wikipedia.org/wiki/Virtual_private_networkwww.iprodeveloper.comwww.cisco.com/c/en/us/td/docswww.ci sco.com/web/ close/security/intelligence/firewall-best-practices.html