Modem Network

Network Security Model - Defining an Enterprise Security Strategy

Overview

These are the 5 primary security groups that should be considered with any enterprise security model. These include security policy, perimeter, network, transaction and monitoring security. These are all part of any effective company security strategy. Any enterprise network has a perimeter that represents all equipment and circuits that connect to external networks both public and private. The internal network is comprised of all the servers, applications, data, and devices used for company operations. The demilitarized zone (DMZ) represents a location between the internal network and the perimeter comprised of firewalls and public servers. It that allows some access for external users to those network servers and denies traffic that would get to internal servers. That doesn't mean that all external users will be denied access to internal networks. On the contrary, a proper security strategy specifies who can access what and from where. For instance telecommuters will use VPN concentrators at the perimeter to access Windows and Unix servers. As well business partners could use an Extranet VPN connection for access to the company S/390 Mainframe. Define what security is required at all servers to protect company applications and files. Identify transaction protocols required to secure data as it travels across secure and non-secure network segments. Monitoring activities should then be defined that examine packets in real time as a defensive and pro-active strategy for protecting against internal and external attacks. A recent survey revealed that internal attacks from disgruntled employees and consultants are more prevalent than hacker attacks. Virus detection should then be addressed since allowed sessions could be carrying a virus at the application layer with an e-mail or a file transfer.

Security Policy Document

The security policy document describes various policies for all employees that use the enterprise network. It specifies what an employee is permitted to do and with what resources. The policy includes non-employees as well such as consultants, business partners, clients and terminated employees. In addition security policies are defined for Internet e-mail and virus detection. It defines what cyclical process if any is used for examining and improving security.

Perimeter Security

This describes a first line of defense that external users must deal with before authenticating to the network. It is security for traffic whose source and destination is an external network. Many components are used to secure the perimeter of a network. The assessment reviews all perimeter devices currently utilized. Typical perimeter devices are firewalls, external routers, TACACS servers, RADIUS servers, dial servers, VPN concentrators and modems.

Network Security 

This is defined as all of the server and legacy host security that is implemented for authenticating and authorizing internal and external employees. When a user has been authenticated through perimeter security, it is the security that must be dealt with before starting any applications. The network exists to carry traffic between workstations and network applications. Network applications are implemented on a shared server that could be running an operating system such as Windows, Unix or Mainframe MVS. It is the responsibility of the operating system to store data, respond to requests for data and maintain security for that data. Once a user is authenticated to a Windows domain with a specific user account, they have privileges that have been granted to that account. Such privileges would be to access specific directories at one or many servers, start applications, and administer some or all of the Windows servers. When the user authenticates to the Windows Active Directory Services distributed it is not any specific server. There is tremendous management and availability advantages to that since all accounts are managed from a centralized perspective and security database copies are maintained at various servers across the network. Unix and Mainframe hosts will usually require logon to a specific system, however the network rights could be distributed to many hosts.

·  Network operating system domain authentication and authorization

·  Windows Active Directory Services authentication and authorization

·  Unix and Mainframe host authentication and authorization

·  Application authorization per server

·  File and data authorization

Transaction Security 

Transaction security works from a dynamic perspective. It attempts to secure each session with five primary activities. They are non-repudiation, integrity, authentication, confidentiality and virus detection. Transaction security ensures that session data is secure before being transported across the enterprise or Internet. This is important when dealing with the Internet since data is vulnerable to those that would use the valuable information without permission. E-Commerce employs some industry standards such as SET and SSL, which describe a set of protocols that provide non-repudiation, integrity, authentication and confidentiality. As well virus detection provides transaction security by examining data files for signs of virus infection before they are transported to an internal user or before they are sent across the Internet. The following describes industry standard transaction security protocols.

Non-Repudiation - RSA Digital Signatures 

Integrity - MD5 Route Authentication

Authentication - Digital Certificates 

Confidentiality - IPSec/IKE/3DES

Virus Detection  - McAfee/Norton Antivirus Software

Monitoring Security

Monitoring network traffic for security attacks, vulnerabilities and unusual events is essential for any security strategy. This assessment identifies what strategies and applications are being employed. The following is a list that describes some typical monitoring solutions. Intrusion detection sensors are available for monitoring real time traffic as it arrives at your perimeter. IBM Internet Security Scanner is an excellent vulnerability assessment testing tool that should be considered for your organization. Syslog server messaging is a standard Unix program found at many companies that writes security events to a log file for examination. It is important to have audit trails to record network changes and assist with isolating security issues. Big companies that utilize a lot of analog dial lines for modems sometimes employ dial scanners to determine open lines that could be exploited by security hackers. Facilities security is typical badge access to equipment and servers that host mission critical data. Badge access systems record the date time that each specific employee entered the telecom room and left. Cameras sometimes record what specific activities were conducted as well.

Intrusion Prevention Sensors (IPS)

Cisco markets intrusion prevention sensors (IPS) to enterprise clients for improving the security posture of the company network. Cisco IPS 4200 series utilize sensors at strategic locations on the inside and outside network protecting switches, routers and servers from hackers. IPS sensors will examine network traffic real time or inline, comparing packets with pre-defined signatures. If the sensor detects suspicious behavior it will send an alarm, drop the packet and take some evasive action to counter the attack. The IPS sensor can be deployed inline IPS, IDS where traffic doesn't flow through device or a hybrid device. Most sensors inside the data center network will be designated IPS mode with its dynamic security features thwarting attacks as soon as they occur. Note that IOS intrusion prevention software is available today with routers as an option.

Vulnerability Assessment Testing (VAST)

IBM Internet Security Scanner (ISS) is a vulnerability assessment scanner focused on enterprise customers for assessing network vulnerabilities from an external and internal perspective. The software runs on agents and scans various network devices and servers for known security holes and potential vulnerabilities. The process is comprised of network discovery, data collection, analysis and reports. Data is collected from routers, switches, servers, firewalls, workstations, operating systems and network services. Potential vulnerabilities are verified through non-destructive testing and recommendations made for correcting any security problems. There is a reporting facility available with the scanner that presents the information findings to company staff.

Syslog Server Messaging

Cisco IOS has a Unix program called Syslog that reports on a variety of device activities and error conditions. Most routers and switches generate Syslog messages, which are sent to a designated Unix workstation for review. If your Network Management Console (NMS) is using the Windows platform, there are utilities that allow viewing of log files and sending Syslog files between a Unix and Windows NMS.

Network Planning and Design Guide is available at Amazon.com and eBookmall.com

Shaun Hummel is an author of various technical books and has a web site focused on information technology job search solutions and certifications.

http://www.networkjobsolutions.com

About the Author

Shaun Hummel, CCNP, is a Senior Network Engineer with 11 years experience in enterprise network planning, design, and implementation. He has worked for various private and public companies in Canada and the United States improving infrastructure, security, and management. He has written Network Planning and Design Guide, Cisco Wireless Network Design Guide and Network Assessment Guide. www.networkjobsolutions.com

Cisco Network Trunk Module Modem For Igx Igxntm $400 Cisco Network Trunk Module Modem For Igx Igxntm

Efficient Network 5851 060-5851-035 DSL Modem 0605851035 $54.65 Efficient Network 5851 060-5851-035 DSL Modem 0605851035

Efficient Network 5851 060-5851-035 DSL Modem 5851 $54.65 Efficient Network 5851 060-5851-035 DSL Modem 5851

Zyxel Network, Adsl Modem/bridge Only. Each $36.04 Manufacturer: Zyxel. Each. Customers also search for: Discount Network, Adsl Modem/bridge Only, Buy Network, Adsl Modem/bridge Only, Wholesale Network, Adsl Modem/bridge Only, 0760559114237, Switches and Bridges

Modem $10 Modem

Cisco Modem (Analog) Plug-in Module 56Kbps V.90 V.92 /16pt Analog Modem Network Module(s) Refurbished NM16AMV2 $2962.8 Cisco Modem (Analog) Plug-in Module 56Kbps V.90 V.92 /16pt Analog Modem Network Module(s) Refurbished NM16AMV2

t Modem Security Enclosure - Network device security cabinet $27.99 CradlePoint Modem Security Enclosure - Network device security cabinet

Xircom 56Kbps Network Modem Combo Mini PCI Ethernet Fast Ethernet $5.1 Xircom 56Kbps Network Modem Combo Mini PCI Ethernet Fast Ethernet

APC Network Management Card With Environmental Monitoring & Modem AP9618 $489.04 APC Network Management Card With Environmental Monitoring & Modem AP9618

SDSL Network Extender 2000 - short-haul modem $1239.99 Black Box SDSL Network Extender 2000 - Short-haul modem - 10Base-T - RJ-45 / RJ-45/RJ-11 - external - up to 3.8 miles (pack of 2 )

Atek Modem Cable $16.99 1 1 x 15-pin Male PCMCIA 1 x RJ-11 Female 72" Actiontec and generics Modem BFM5603-LF, EF144, EF288, EF336, FM288B, GFM5600-RF, MD28800, ML33602, ML28800,Apache Micro Modem 33.6 - V34PCM-R, 56K - A56PCM-RBest Data Modem 56PC + 56SPCBoca research Modem MV.34PC/MD56PCCardinal Modem MVP144C2, MVP288C2, MVP336C2, MVPV24PC, MVPV34PCompaq Modem 61-001Diamond Multimedia Modem Supra Modem PC Card 56KThinfax Modem 28.8 - 33.6Eigercom Modem 28.8 33.6 56KHayes Modem Accura Modem 5684US, 5361US,Optima Modem 533PAM, 288 T2 535PAM, 336 T2 5346New Media Modem Novalink Modem Performance Modem 28.8Piiceon Modem 14.4 28.8, 8043400, 8043400ECPractical Peripherals Modem 5688USSilicom Modem Modem Master Modem 56KSimple Technology Modem 14.4, 28.8, 33.6, 56K 15-pin typeViking Modem all 15-pin typesZoom Technologies Modem 28.8 - 33.6, 56K Dual mode (not cards with Lucent chipset, I.E. Not cards with L, towards the End of Card Part #) Durable molded telephone plug Atek Atek, Inc Copper Modem Modem Cable Network Cable PCCA-M-15-1 RJ-11 Replacement cable for many brands and models of 15-pin PC card (PCMCIA) modems. Retail www.atek.com

StarTech.com Modem Cable $16.99 1 x 9-pin DB-9 Female Network 1 x 9-pin DB-9 Male Network 36" Copper DB-9 FCC Gray Lifetime MC93MF Modem Modem Cable Network Cable Not Applicable RoHS StarTech.com Yes www.startech.com

Belkin Modem Retractable Cable $9.99 1 x RJ-11 Male 31.20" Belkin Belkin International, Inc Copper F3L900-4.3-RTC Lifetime Modem Modem Retractable Cable Network Cable RJ-11 Silver www.belkin.com

Belkin Modem Cable $17.99 1 1 x RJ-11 Male 50 ft 8 oz Shielded Belkin Belkin International, Inc Copper F3L641-50 Lifetime Modem Modem Cable Network Cable RJ-11 Retail Silver www.belkin.com

StarTech.com Telephone/Modem Cable $7.99 1 x RJ-11 Male 25 ft FCC Copper Gray Lifetime Network Cable Phone/Modem RJ-11 RJ25FT StarTech.com Telephone/Modem Cable www.startech.com

Cables To Go Modem Cable $14.99 09445 1 x 25-pin DB-25 Male 1 x 9-pin DB-9 Female 25 ft External modem Thumbscrews Beige Cables To Go Copper DB-25 DB-9 Lifetime Modem Modem Cable Molded Network Cable www.cablestogo.com

APC Modem Extension Cable $14.99 1 1 x 9-pin DB-9 Female 10 ft 62372-10 AT null modem cable 10 ft Header card AT style computer Compatible modem Full handshake Molded w/thumbscrews APC American Power Conversion Corp American Power Conversion's 10ft. standard AT null modem DB-9F to DB-9F. Beige Copper DB-9 Extension Cable Lifetime Modem Modem Extension Cable Network Cable Retail www.apc.com

SHDSL Network Extender 2000 SHDSL Point-to-Point kit - DSL modem $579.99 Paradyne SHDSL Network Extender 2000 SHDSL Point-to-Point kit - DSL modem - external - Ethernet - 2.3 Mbps (pack of 2 )

SHDSL Network Extender 2020 Dual Line SHDSL Kit - DSL modem $754.99 Paradyne SHDSL Network Extender 2020 Dual Line SHDSL Kit - DSL modem - external - Ethernet - 2.3 Mbps (pack of 2 )

DSL Modem $71.7 High Quality Content by WIKIPEDIA articles A Digital Subscriber Line modem is a device used to connect a computer or router to a telephone circuit that has Digital Subscriber Line service configured. Like other modems, it is a type of transceiver. It is also called a DSL Transceiver or ATUR. The acronym NTBBA, which stands for network termination broad band adapter, is also common in some countries. Author: Miller, Frederic P./ Vandome, Agnes F./ McBrewster, John Binding Type: Paperback Number of Pages: 88 Publication Date: 2010/12/24 Language: English Dimensions: 6.00 x 9.02 x 0.21 inches

Cheap HUAWEI E220 3G HSDPA USB MODEM 7.2Mbps wireless network card ,support google android tablet PC $294.74 Huawei E220 usb modem 3G HSDPA USB MODEM 7.2Mbp wireless network card support google android tablet PC

1pc/lot UNLOCKED HUAWEI E220 3G HSDPA MODEM wireless WCDMA network card WIFI support google android 2.2 $20.94 UNLOCKED HUAWEI E220 3G HSDPA USB MODEM 7.2Mbps wireless Gsm WCDMA Usb Network Broadband WIFI Gateway USB MODEM 7.2Mbps wireless

CradlePoint Modem Security Enclosure - Network Device Security Cabinet. Each $32.14 Manufacturer: CradlePoint. Each. Protect your USB, ExpressCard, and PC card modems with the security enclosure, specially designed for the MBR1200. Product Type: Network device security cabinet Customers also search for: Discount CradlePoint Modem Securi

Atek PCMCIA Modem Replacement Cable $17.99 1 x Male Proprietary 1 x RJ-11 Female 72" Modem Most 4-pin PC card (PCMCIA) Durable molded telephone plug Atek Atek, Inc Copper Modem Network Cable PCCA-M-04-1 PCMCIA Modem Replacement Cable RJ-11 Retail www.atek.com

Zoom 5715 ADSL Modem $45.99 1 Mbps ADSL2+ Upstream 1 Year 1 x RJ-11 ADSL Network WAN 1 x RJ-45 10/100Base-TX Network Auto-sensing LAN 1.26" Height x 5.24" Width x 4.57" Depth 10 Mbps Ethernet 100 Mbps Fast Ethernet 24 Mbps 24 Mbps ADSL2+ Downstream 5715 5715 ADSL Modem 5715-02-00AG Web Based Management Bridge Mode: Ethernet to ADSL self learning - Transparent Bridging (IEEE 802.1D) Supports up to 128 MAC learning addresses The Zoom Bridge Modem is an ADSL 2/2+ modem with an Ethernet interface to a computer or a router. The Model 5715 provides a very stable system installation with a simplified set of configuration options to ensure problem free operation. The Bridge Modem works with any operating system which supports an Internet browser, including Windows, Macintosh OS and Linux. The Zoom Bridge Modem automatically detects the ADSL network settings. The Model 5715 also supports the use of third party PPPoE client software to provide compatibility with the widest range of service providers. ADSL Modem External G.dmt G.lite Network RoHS Yes Zoom Zoom Telephonics, Inc www.zoom.com

Netgear DM111P DSL Modem $55.99 1 x RJ-11 ADSL Network WAN 1 x RJ-45 10/100Base-TX Network Auto-sensing/Auto MDI-X LAN 1.50 Mbps ADSL2+ Upstream @ G.dmt 1.60" Height x 3.78" Width x 5.75" Depth 10 Mbps Ethernet 100 Mbps 100 Mbps Fast Ethernet 24 Mbps ADSL2+ Downstream @ G.dmt 6.70 oz Netgear's Broadband DSL Modem is the simple solution for setting up direct, always-on Internet connectivity for home and office networks. Plus, it gets you up and running fast with Netgear's signature ease of installation. Up to 24 Mbps downstream and 1.5 Mbps upstream throughput delivers true broadband experience. Netgear's Broadband DSL Modem works with your current broadband DSL service provider. DM111P DM111P Broadband DSL Modem DM111P-100NAS DSL Modem G.dmt Netgear Netgear, Inc Network Not Applicable www.netgear.com

Radio Modem $238.98 High Quality Content by WIKIPEDIA articles Radio modems transfer data wirelessly across a range of up to tens of kilometres. Using radio modems is a modern way to create Private Radio Networks (PRN). Private radio networks are used in industrial critical applications, when realtime data communication is needed. Also Radio Data Modem enables user to be independent of telecommunication or satellite network operators. In most cases users use licensed frequencies either in UHF or VHF band. Licensed frequency is reserved for gived user in certain area thus ensuring that there is less likelihood to have radio interference from other RF tranmsmitters. Also licence free frequencies are available in most countries, enabling easy implementation, but at the same time other users may use same frequency, thus making it possible that give frequency is blocked. Typical users for Radio Data Modems are: Land survey differential GPS, fleet management applications, SCADA applications (utility distribution networks), automated meter reading (AMR), telemetry applications and many more. Author: Surhone, Lambert M./ Tennoe, Mariam T./ Henssonow, Susan F. Binding Type: Paperback Number of Pages: 624 Publication Date: 2010/08/21 Language: English Dimensions: 6.00 x 9.02 x 1.38 inches

TrendNet / TRENDnet Network TFM-561U 56K USB Phone Internet Fax Modem Retail / TFM-561U $37.92 TrendNet - TRENDnet Network TFM-561U 56K USB Phone Internet Fax Modem Retail - TFM-561U

TP-Link / TP-Link Network TD-8616 1Ethernet Port ADSL2+ Modem Bridge mode Trendchip Retail / TD-8616 $40.02 TP-Link - TP-Link Network TD-8616 1Ethernet Port ADSL2+ Modem Bridge mode Trendchip Retail - TD-8616

TrendNet / TRENDnet Network TEW-658BRM 300Mbps Wireless N ADSL 2 2+ Modem Router Retail / TEW-658BRM $67.12 TrendNet - TRENDnet Network TEW-658BRM 300Mbps Wireless N ADSL 2 2+ Modem Router Retail - TEW-658BRM

D-Link / D-Link Network Router DSL-520B ADSL2+ Modem Router 10/100 LAN RJ-11 Retail / DSL-520B $62.01 D-Link - D-Link Network Router DSL-520B ADSL2+ Modem Router 10/100 LAN RJ-11 Retail - DSL-520B

Cisco Network/Modem Combo Plug-in Module EN Fast EN ISDN NM1FE1CT1CSURF $450 Cisco Network/Modem Combo Plug-in Module EN Fast EN ISDN NM1FE1CT1CSURF

Cisco Network/Modem Combo Plug-in Module EN Fast EN ISDN NM1FE1CT1CSU= $450 Cisco Network/Modem Combo Plug-in Module EN Fast EN ISDN NM1FE1CT1CSU=

Lenovo USB, Keyboard/Mouse, VGA, Modem, Network, Docking/Port Replicator 250510U $43.45 Lenovo USB, Keyboard/Mouse, VGA, Modem, Network, Docking/Port Replicator 250510U

Cisco Network Modem Combo Internal 16 Analog port(s) Serial Refurbished NM16A $283 Cisco Network Modem Combo Internal 16 Analog port(s) Serial Refurbished NM16A

This entry was posted on Tuesday, August 18th, 2009 at 3:30 pm and is filed under Uncategorized. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.