Chapter 11:

Managing a Secure Network

CCNA Security v2.0

 11.0 Introduction
11.1 Network Security Testing
11.2 Developing a
Comprehensive Security Policy
11.3 Summary

© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Public 2
 Upon completion of this section, you should be able to:
• Describe the techniques used in network security testing.

• Describe the tools used in network security testing.

© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Public 3
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Public 4
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Public 5
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Public 6
 Operational Status of the Network:
• Penetration testing

• Network scanning

• Vulnerability scanning

• Password cracking

• Log review

• Integrity checks

• Virus detection

© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Public 7
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Public 8
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Public 9
 • Nmap/Zenmap

• SuperScan

• SIEM

• GFI LANguard

• Tripwire

• Nessus

• L0phtCrack

• Metasploit

© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Public 10
Sample Nmap Screenshot Sample Zenmap Screenshot

© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Public 11
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Public 12
 Essential functions:
• Forensic Analysis

• Correlation

• Aggregation

• Retention

© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Public 13
 Upon completion of this section, you should be able to:
• Explain the purpose of a comprehensive security policy.

• Describe the structure of a comprehensive security policy.

• Describe the standards, guidelines, and procedures of a security policy.

• Explain the roles and responsibilities entailed by a security policy.

• Explain security awareness and how to achieve through education and training.

• Explain how to respond to a security breach.

© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Public 14
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Public 15
 Determine what the assets of an organization are by asking:
• What does the organization have that others want?

• What processes, data, or information systems are critical to the

organization?
• What would stop the organization from doing business or fulfilling its
mission?

© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Public 16
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Public 17
Audience Determines Security Policy Content

© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Public 18
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Public 19
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Public 20
 A governing policy includes:
• Statement of the issue that the policy addresses

• How the policy applies in the environment

• Roles and responsibilities of those affected by the policy

• Actions, activities, and processes that are allowed (and not allowed)

• Consequences of noncompliance

© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Public 21
 Technical components:
• General policies

• Telephony policy

• Email and communication policy

• Remote access policy

• Network policy

• Application policy

© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Public 22
Customize End-User Policies for Groups

© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Public 23
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Public 24
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Public 25
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Public 26
NIST Information Technology Portal

© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Public 27
NSA Website

© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Public 28
Common Criteria Website

© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Public 29
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Public 30
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Public 31
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Public 32
• Chief Executive Officer (CEO) • Chief Security Officer (CSO)

• Chief Technology Officer (CTO) • Chief Information Security

Officer (CISO)
• Chief Information Officer (CIO)

© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Public 33
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Public 34
Primary components:
• Awareness campaigns

• Training and education

© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Public 35
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Public 36
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Public 37
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Public 38
 Chapter Objectives:
• Explain the various techniques and tools used for network security testing.

• Explain how to develop a comprehensive security policy.

© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Public 39
Thank you.
• Remember, there are
helpful tutorials and user
guides available via your
NetSpace home page. 1
(https://www.netacad.com) 2
• These resources cover a
variety of topics including
navigation, assessments,
and assignments.
• A screenshot has been
provided here highlighting
the tutorials related to
activating exams, managing
assessments, and creating
quizzes.

© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Public 41