TAILIEUCHUNG - File Router Security Configuration Guide

The ease or difficulty of packet snooping (also known as eavesdropping) on networks depends largely on the technology implemented. Shared media networks are particularly susceptible to eavesdropping because this type of network transmits packets everywhere along the network as they travel from the origin to the final destination. When concentrators or hubs are used in a shared media environment (such as FDDI, 10BASE-T, or 100-Mbps Ethernet), it can be fairly easy to insert a new node with packet-capturing capability and then snoop the traffic on the network. As shown in Figure 5-2, an intruder can tap into an Ethernet switch. | Report Number C4-040R-02 Router Security Configuration Guide Principles and guidance for secure configuration of IP routers with detailed instructions for Cisco Systems routers Router Security Guidance Activity of the System and Network Attack Center SNAC Authors Vanessa Antoine Raymond Bongiorni Anthony Borza Patricia Bosmajian Daniel Duesterhaus Michael Dransfield Brian Eppinger Kevin Gallicchio Stephen Hamilton James Houser Andrew Kim Phyllis Lee Brian McNamara Tom Miller David Opitz Florence Richburg Michael Wiacek Mark Wilson Neal Ziring December 15 2005 Version National Security Agency 9800 Savage Rd. Suite 6704 Ft. Meade MD 20755-6704 Router Security Configuration Guide Warnings This document is only a guide to recommended security settings for Internet Protocol IP routers particularly routers running Cisco Systems Internet Operating System IOS versions through . It cannot replace well-designed policy or sound judgment. This guide does not address site-specific configuration issues. Care must be taken when implementing the security steps specified in this guide. Ensure that all security steps and procedures chosen from this guide are thoroughly tested and reviewed prior to imposing them on an operational network. SOFTWARE IS PROVIDED AS IS AND ANY EXPRESS OR IMPLIED WARRANTIES INCLUDING BUT NOT LIMITED TO THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE EXPRESSLY DISCLAIMED. IN NO EVENT SHALL THE CONTRIBUTORS BE LIABLE FOR ANY DIRECT INDIRECT INCIDENTAL SPECIAL EXEMPLARY OR CONSEQUENTIAL DAMAGES INCLUDING BUT NOT LIMITED TO PROCUREMENT Of substitute goods or SERVICES LOSS OF USE DATA OR PROFITS OR BUSINESS INTERRUPTION HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY WHETHER IN CONTRACT STRICT LIABILITY OR TORT INCLUDING NEGLIGENCE OR OTHERWISE ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. This document is current as of October 2005. The .

• An ninh - Bảo mật
• Check Point Mobile
• Proxy Settings
• Configuring VPN
• The Installation Process
• Secure Domain Logon
• CAPI Store
• SecuRemote
• Remote Access Clients
• Different Management Servers
• The Configuration File
• Configuring Gateways
• SecureClient Features
• Endpoint Security VPN CLI
• thủ thuật máy tính
• công nghệ thông tin
• tin học
• quản trị mạng
• computer network