And the really neglected high-risk areas are:
Network equipment carriers themselves.
Switches, routers, firewalls and ACs, which are wrongly configured, often have more severe effects than single terminals.
In the large number of accident retries, one common point is found:
No one can tell you anything after a problem.
Who the hell is it?
When is it?
The government is not sure what equipment it's going to use.
Do what you want.
This is what the network equipment support audit is for.
i. Enterprises without uniform transport audit, equipment management is largely dependent“I'm conscious.”
Under the traditional mode:
-
Multiple equipment shares a administrator account
-
A lot of people know the code.
-
The passwords may still be available to the separating staff.
In this environment:
Something's wrong with the equipment.
It's hard to get a hold of.
And we can't rewrite it.
Even if enterprise wifi network Portal certification is deployed, the security system remains if network equipment login itself is not controlled“One missing piece.”。
II. The core of the network equipment transportation audit is to:“People”and“Operation”Tie it.
Three things must be done for a truly effective transportation audit:
-
One account for one person.
-
Qualifications
-
Operation marks
The system you are providing is based on the TACCS+ protocol for authentication, authorization and audit of network equipment login.
TACCS+ has the advantage of:
-
Use TCP, reliable communications
-
Authentication separate from authorization
-
Command authorization
-
Data Full Encryption
It's perfect for the transport scene.
III. UNIFORM IN THE SYSTEM OF ACCOUNTS: PROBABLY COMBATING A COMMON ACCIDENT
Through the unified identification system:
All personnel using personal account login devices
Local device no longer holds a real account
Accounts are created and recovered centrally.
Departure of MVD:
Just deactivate the account number.
No passwords are required to change from station to stage.
This step is directly addressed:
The account's out of control.
Command level authorization: reduction of mishandling from source
The only rights to traditional equipment are:
Administrator
Normal User
The particle size is too thick.
System support by role:
Which orders are allowed to be executed
Which orders are prohibited?
For example:
Transport engineer:
Viewable Status, View Configuration
Senior Administrator:
Only to allow the configuration to be modified and the device restarted
Even if the account number is stolen:
The damage that can be caused is also limited to the minimum.
V. OPERATIONAL OVERSIGHT: Every order is recorded
The system records:
Account
Device IP
Login Time
Execute Command
Results of implementation
(c) To create audit logs that cannot be tampered with.
When the device is abnormal, it can be quickly traced:
Who's changed configuration recently?
What's changed?
Matching downtime point
From“Guess why.”♪ And become“Look at the evidence.”。
VI. ARRIVING IN THE OBJECTIVE:
System-configurable anomalies:
Password error limit
Unknown IP login
Non-working hours login
Once activated:
Automatic alarm.
Transport security“Ex post facto tracing”Upgrade To“Prior warning”。
VII. THE COMPTAL OF THE WIFINET ENTERPRISE
Many people think that the corporate wifi network Portal certification is only about terminals.
In fact, it has assumed the following:
The role of the unified portal.
Staff, personnel of the carrier, external staff:
First, the identification check is done through corporate wifi network Portal.
Re-entry into different business systems
Portal workout“Who are you?”，
TACCS+ Solutions“What can you do?”。
Together, they constitute a complete identity system.
VIII. Why would the integrated firm prefer to choose a mature vendor ' s MSIP?
Because of the transport audit:
Core equipment
The problem is very serious.
NATSHEL_BRAND, which has been working for 22 years in the field of web-based certification and billing, has a unified identity certification system centred on:
Network Device Login
Staff access
Visitors' access.
Unusual behavior.
Remote transport
The whole system is built, not a single-point function.
For the integrated agent:
The programme is more credible
Lower project risk
Later maintenance is more manageable
IX. Network equipment transportation audit, ongoing from“Optional”Changed“Mark”
The larger the enterprise, the higher the requirement for transport security.
A truly mature business network must have:
-
Uniform account number
-
Tier Rights
-
Full-scope audit
-
Unusual alarm.
These competencies are built around the enterprise Wifi network Portal Certification and a unified identification system.
If you want to take the project from“Device stacking scheme”Upgrade To“Security governance programme”The network equipment-vitation audit section must be focused on planning.
NATSHEL_BRAND can provide a stable, mature and high-value enterprise network, the corporate wifi network Portal Certification and Transportation Audit Programme, to help you keep high-risk scenes under control.