Network-Security-Audit
- 1. 80 Broad Street, 5th Floor New York, NY 10004 www.2secure.biz info@2secure.biz Tel: 646-666-9601 Fax: 718-942-5355 Date: 10/13/2014 Case Study: NETWORK SECURITY AUDIT Preface: A Network Security Audit evaluates network devices for security settings and recommends changes to en- hance resilience and compliance. The Case: A Law Firm headquartered in New-York City with more than 10 worldwide branch locations, was looking to perform a Network Security Audit on its infrastructure. This audit followed 3 main phases: Discovery: Documenting devices with their Location, Model #, serial, MAC and management IP Network Diagrams: Create global and location based diagrams. Assessment: Management Access Best Practices TACACS+ (highlight omissions) SNMPv3 (highlight omissions) Privilege levels (highlight omissions) Line, console, VTY access AAA functionality correct and operational Support for SSHv2, no Telnet Use of HTTPS and disable HTTP (if applicable) Assessment: Device Hardening Best Practices Secure routing practices Disable unused services and ports Device plane hardening techniques Infrastructure ACLs Layer-2 security Performance Recommendations Assessment: Network Policy Review Validate current device OS software against known PSIRT advisories Adherence with industry and regulatory requirements The above process was fully documented with a report that both Managers and Engineers understood. In Conclusion: Our experts delivered greater security, visibility and control over infrastructure while saving money. About 2Secure Corp 2Secure is a Cyber Security firm that takes a PROACTIVE approach to solving network problems. We provide the right tools to fix problems the first time around – in fact, we guarantee it!