-
Essay / Macro and Micro View Network Security Management
Macro and Micro View Network Security Management: Organizations need a holistic view of their network. With devices and hosts from disparate vendors, security teams need a standardized, comprehensive view of the network, including: routing rules, access rules, NAT, VPN, and more. ; hosts, including all products (and versions), services, vulnerabilities and patches; and assets, including asset groupings and classifications. With a comprehensive network view, security teams can view network hosts, along with configurations, classifications, and other relevant information. A network map or model is both a useful visualization tool and a diagnostic tool, providing analysis that is only possible when considering the bigger picture. For example, security and compliance teams can use this macro view to see how data moves between network points. Say no to plagiarism. Get a tailor-made essay on “Why Violent Video Games Should Not Be Banned”? Get the original essay Although the macro view is necessary to see how all the network elements fit together, network administrators must also be able to drill down into the network elements. details of a particular device, easily accessing information about rules, access policies and configuration compliance. And this information must be considered in the context of the broader network, including context such as segments or zones, routing, routers, switches, intrusion prevention systems (IPS), and firewalls. Network components that impact the device will undoubtedly come from various vendors, creating data in different vendor languages that must be deciphered, correlated, and optimized to allow administrators to streamline rule sets. Daily or weekly reviews of all devices on the network are impossible to accomplish with a manual process, and less frequent review of device configurations puts network security and compliance at risk. Automating policy compliance helps ensure compliance and consistency, and conserves IT resources. Ideally, a network modeling tool that provides a macro view should also allow administrators to explore a micro view of each device, providing insights into users, applications, vulnerabilities, and more. This allows administrators to see the broader view of the network and then focus on particular devices to manage. Create usage policy statements: Create usage policy statements that describe users' security roles and responsibilities. You can start with a general policy that covers all network systems and data within the company. This document should provide the general user community with an understanding of the security policy, its purpose, guidelines for improving their security practices, and definitions of their security responsibilities. Create an administrator acceptable use statement to explain procedures for administering user accounts, enforcing policies, and reviewing privileges. If your company has specific policies regarding user passwords or further processing of data, clearly present those policies as well. Check the policy against the partner's acceptable use policy statements and.