[c-nsp] best practices switches/Router

[Paul Cosgrove]

Hi Scott,

Would have to recommend reading the document, as the NSA have produced very
well written guides for many years.  Then adopt whichever recommendations
you like, or a cunning disguise if you prefer.

Paul.


On Tue, Oct 13, 2009 at 6:55 PM, Scott Granados <gsgranados at comcast.net>wrote:

> NSA security policy, hmmmm, does that involve a lot of port mirroring and
> copying of data to non existant trunks.  (shshshshshsh) Or use of encryption
> standards that are almost secure.;)
>
> Call me crazy (you wouldn't be the first) but I have to say I'm always
> skeptical when someone says "Hi, we're from the Government and we're here to
> help!"
>
>
>
> ----- Original Message ----- From: "Kevin Graham" <
> kgraham at industrial-marshmallow.com>
> To: <jckdaniels12 at gmail.com>; <cisco-nsp at puck.nether.net>
> Sent: Tuesday, October 13, 2009 10:37 AM
> Subject: Re: [c-nsp] best practices switches/Router
>
>
>
>>  my aim is to do review of the configs of ROUTERS and Switches in my
>>> network.
>>> As a review , need to track down the best practices that should be
>>> configured and are not there in my network.
>>>
>>
>> Was:
>>
>>  http://www.google.com/search?q=site%3Acisco.com+best+practices
>>
>> ...not sufficient?
>>
>>  From a security standpoint, in addition to the NSA SNAC publications
>>> already
>>>
>> mentioned, Cisco's  Network Security Baseline is very much worth reading:
>>
>>
>>
>> https://www.cisco.com/en/US/docs/solutions/Enterprise/Security/Baseline_Security/securebasebook.html
>> _______________________________________________
>> cisco-nsp mailing list  cisco-nsp at puck.nether.net
>> https://puck.nether.net/mailman/listinfo/cisco-nsp
>> archive at http://puck.nether.net/pipermail/cisco-nsp/
>>
>
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>