You must use secure protocols whenever possible. Many protocols are used in order to carry sensitive network management data.
#Cisco no vstack how to
See the Logging Best Practices section of this document for more information about how to implement logging on Cisco IOS network devices. Based on the needs of your organization, this approach can range from a simple diligent review of log data to advanced rule-based analysis. This strategy must leverage logging from all network devices and use pre-packaged and customizable correlation capabilities.Īfter centralized logging is implemented, you must develop a structured approach to log analysis and incident tracking. In order to gain knowledge about existing, emerging, and historic events related to security incidents, your organization must have a unified strategy for event logging and correlation. See the Authentication, Authorization, and Accounting section of this document for more information about how to leverage AAA. The AAA framework provides authentication of management sessions and can also limit users to specific, administrator-defined commands and log all commands entered by all users. The Authentication, Authorization, and Accounting (AAA) framework is vital to secure network devices. Leverage Authentication, Authorization, and Accounting
Refer to Risk Triage for Security Vulnerability Announcements for assistance this evaluation process. You need to have knowledge of a vulnerability before the threat it can pose to a network can be evaluated. In order to maintain a secure network, you need to be aware of the Cisco security advisories and responses that have been released. Īdditional information about these communication vehicles is available in the Cisco Security Vulnerability Policy. Security advisories and responses are available at. The method used for communication of less severe issues is the Cisco Security Response. The Cisco Product Security Incident Response Team (PSIRT) creates and maintains publications, commonly referred to as PSIRT Advisories, for security-related issues in Cisco products. Monitor Cisco Security Advisories and Responses These topics highlight specific critical areas of network operations and are not comprehensive. These topics contain operational recommendations that you are advised to implement. The operational procedures in use on the network contribute as much to security as the configuration of the underlying devices. Although most of this document is devoted to the secure configuration of a Cisco IOS device, configurations alone do not completely secure a network.
Secure network operations is a substantial topic. Where possible and appropriate, this document contains recommendations that, if implemented, help secure a network. However, in cases where it does not, the feature is explained in such a way that you can evaluate whether additional attention to the feature is required. The coverage of security features in this document often provides enough detail for you to configure the feature. The data plane does not include traffic that is sent to the local Cisco IOS device.
#Cisco no vstack software
This document is not restricted to specific software and hardware versions. There are no specific requirements for this document. Structured around the three planes into which functions of a network device can be categorized, this document provides an overview of each included feature and references to related documentation. This document describes the information to help you secure your Cisco IOS ® system devices, which increases the overall security of your network.
0 kommentar(er)
