Networks

Ask something
Question Locked

Network Security

0 helpful
12 replies

by tptbusines_98 2 views

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hello,

How are you doing today???

I am rebuilding a network infrastructure. The newtwork has 6 Windows 2003 Servers, 15 XP Pro SP 3 Workstations, 2 XP Pro SP 3 Laptops, 1 Dell Laser MFP 1815dn Printer, 2 HP Laserjet 1000 Series Printers, and 1 HP Designjet 500 Plotter.

Is there a network security checklist????? I f there is, can someone point me to it. When accepting a network that you are "NEW" to, what are the "best" practices for evaluating the network and securing the network??????

Is there a scheduled guide to follow??? How can I tell if ANYONE has remote access to the network????? What should be done 1st, then installed???????

Let me know.

I look forward to hearing from you...

Thank you,

12 replies

by jessie

Actually, the simplest one is on those W2k3 servers, go into the Help and Support Center and search for Security Checklist. The first thing that comes up is Checklist: Securing computers using Secuirty Configuration Manager : Security Templates.

Good luck.

by bincarnato

Assuming you are taking this account over from another provider:

I would change all passwords for the Domain Administrator account and the router. I would then get into the router and look at what ports are opened up and where they point to in order to see if any remote control type ports are open. Look in AD Users & Computers to see if any accounts exist for persons that are not with the client anymore and disable the accounts. Then based off of the list of open ports, determine what reason they are open and then close any ports that are not needed. Look at the servers for software like logmein or go to my pc and see if that is there for the client or not. If the client doesn't use it, remove it.

by cg it

my suggestion is, if there isn't any documentation on the network, then start from scratch and plan out how you would have security on your network [documenting it of course]. Even if there is security, I'd create a plan of how the network should be secured,get that approved, then go through the network and where security meets the plan, leave in place, where it doesn't, change it to the plan.

by tptbusines_98

"Thank You" for that timely response.
In addition to what has been stated, should I close ANY open ports?????

by trentmw

The guy asked for a list...and you left #1 off the list! BACKUPS, make sure they are current full and you have configs and registries not to mention databases.

#2 Router security
#3 Server Security
#4 Appliaction Inventory
#5 D R Plan

by cg it

you absolutely need open.

This is a production environment [I'm assuming it is]. until you know what must be open, closing ports randomly might very negative effects.

by trentmw

#1 Make sure you have backups of all data and configs from servers and routers, if you can read a router config you'll be able to tell if access is allowed.

#2 Change Router passwords, as you did not mention any specific devices, and only mentioned Servers and LAN devices you are not really talking about a WAN are you?

#3 Secure all server passwords, place them in the CIO's care in a sealed container.

#4 Look for and or create a Standard Operating Proceedures Manual.

#5 Make an application list of all known apps, document ports, protocols, and in/outbound access.

#6 Find and disable any modems connected to server(s) and router(s) till you know who and why they have access.

#7 Review and modem pool, or RAS server for who has access via remote connections and justify the acccess.

#8 If you have to ask these types of question given the title you state you hold, find a local expert and hire them.

This discussion is closed to new replies.