Hi Scott, Would have to recommend reading the document, as the NSA have produced very well written guides for many years. Then adopt whichever recommendations you like, or a cunning disguise if you prefer.
Paul. On Tue, Oct 13, 2009 at 6:55 PM, Scott Granados <gsgrana...@comcast.net>wrote: > NSA security policy, hmmmm, does that involve a lot of port mirroring and > copying of data to non existant trunks. (shshshshshsh) Or use of encryption > standards that are almost secure.;) > > Call me crazy (you wouldn't be the first) but I have to say I'm always > skeptical when someone says "Hi, we're from the Government and we're here to > help!" > > > > ----- Original Message ----- From: "Kevin Graham" < > kgra...@industrial-marshmallow.com> > To: <jckdaniel...@gmail.com>; <cisco-nsp@puck.nether.net> > Sent: Tuesday, October 13, 2009 10:37 AM > Subject: Re: [c-nsp] best practices switches/Router > > > >> my aim is to do review of the configs of ROUTERS and Switches in my >>> network. >>> As a review , need to track down the best practices that should be >>> configured and are not there in my network. >>> >> >> Was: >> >> http://www.google.com/search?q=site%3Acisco.com+best+practices >> >> ...not sufficient? >> >> From a security standpoint, in addition to the NSA SNAC publications >>> already >>> >> mentioned, Cisco's Network Security Baseline is very much worth reading: >> >> >> >> https://www.cisco.com/en/US/docs/solutions/Enterprise/Security/Baseline_Security/securebasebook.html >> _______________________________________________ >> cisco-nsp mailing list cisco-nsp@puck.nether.net >> https://puck.nether.net/mailman/listinfo/cisco-nsp >> archive at http://puck.nether.net/pipermail/cisco-nsp/ >> > > _______________________________________________ > cisco-nsp mailing list cisco-nsp@puck.nether.net > https://puck.nether.net/mailman/listinfo/cisco-nsp > archive at http://puck.nether.net/pipermail/cisco-nsp/ > _______________________________________________ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/