Test optimize and document the design
After assessing the security state of the network, it is possible to develop a strong security design. The design methodology should consider all aspects of network security and its integration with the core network infrastructure. Use an in-depth, system-wide approach based on industry standards to develop a multilayer defense against directed attacks from hackers or an indiscriminate attack from viruses and worms.
■ Network security design review: You need a strong security design from both an operational and technical perspective. Conduct a collaborative review of the organization business strategy and related security goals, requirements, and standards. It is possible to recommend protocol, policy, and feature improvements for individual security components after considering all aspects of network security such as scalability, performance, and manageability.
■ Network security design development: This step develops a strategy, plan, and design for integrating a new security solution into the core network infrastructure. The design team reviews the security goals of the organization and defines an in-depth analysis of the technical, procedural, and resource requirements for a customized security deployment that meets these goals. You will also make decisions on the hardware, software, and sample configurations for the intended solution. Here are the key steps:
— Develop the logical design: This activity deals with a logical topology for the new or enhanced network, network layer addressing, naming, and switching and routing protocols. Logical design also includes security planning, network management design, and the initial investigation into which service providers can meet WAN and remote-access requirements.
1-104 Security Cisco Network Devices (SND) v2.0 © 2006 Cisco Systems, Inc.
— Develop the physical design: You will select specific technologies and products required by the logical design during the physical design activity. You will also complete the selection of service providers.
— Test, optimize, and document the design: The final activity is to write and implement a test plan, build a prototype or pilot, optimize the network design, and document your work with a network design proposal.
© 2006 Cisco Systems, Inc. Introduction to Network Security Policies 1-105
This topic describes the activities included in the implement phase of the secure network life cycle.
Continue reading here: Adaptive Threat Defense
Was this article helpful?