May 23, 2012

Dealing With Security Policies

One of the most tedious tasks in networking is documentation. Sometimes it can really bore me! Recently at work I’ve had the pleasure of not only documenting what’s there, and designing a network overhaul, but developing our IT Security Policy. This can certainly open up a can of worms. So doing due diligence I decided to take some time and refresh my mind on the deep interworkings of security policy. Here is a list of some of the resources that I looked at. While I’m not going to publish my companies security policy I will say that using a combination of these best practice recommendations and a little command-line kung-fu I’m pretty confident that the network is about as safe and locked down as it’s going to get.

Anyone looking for some PIX 515s? Got a few that came out in the upgrade.

Anyhow, here are the resource links:

Cisco’s Best Practice White Paper

SANS policy Templates

NIST Security Guidelines (PDF)

Feel free to add any resources you’ve used in the comments section below.

CCIE: No more Univercd.

News from Cisco thats probably not a big suprise:

http://www.cisco.com/web/learning/le3/ccie/announcements/index.html#universcd

CCIE labs changing from UniversCD to Cisco Documentation On Sept 24 2008 CCIE labs will no longer support using the UniversCD documentation for the lab exam. All labs are migrating to Cisco Documentation only. For those scheduled to take the CCIE lab prior to Sept 24 access will still be available for UniversCD. The Cisco Documentation pages have the same information that currently resides on UniversCD, please refer to the links on the CCIE web pages to view these pages and become familiar with the new format. After Sept 24 2008 only the Cisco Documentation web pages will be available for CCIE labs.

Time to change my practice plan!