Network infrastructure example

Network - Hosts

Network Groups

Devices - Interfaces - Apply Policy

Devices - Interfaces - ACL

Services

     NET Security Manager 2.0

• Powerful management of network security policy  
• Extending network security to high level
• Build Firewall for insiders
• Network Security Management of unlimited number of networks and hosts
• Proved in Military environment with strong security requirements

NET Security Manager is application for managing network security policy by implementing network access control for overall organization. Management of security access to the network services is achieved by using access control lists (ACL) on networks routers, L3 switches, VPN devices, firewalls, dialups, wireless access points interfaces or any network device capable for IP routing and filtering. It is based on graphical user interface that simplify management and applying organization security policy over all network infrastructure based on TCP/IP protocol.

Applying security policy on network and transport layer (layer 3 and 4) of OSI communication model is powerful security mechanism that arising organization security to high level.

 Features Overview

• Centralized organization network security access control management over network and transport OSI layer (IP/TCP).
• Vendor independent network security access control of all organization’s network layer 3 devices.
• Network access control is achieved by applying ACL (Access Control List) on network layer 3 devices interfaces.
• Defining network security access policy for single IP (host), network, network segment or network/hosts group.
• Simplified and clarified security policy definition using Network Groups and assigning networks, hosts or network segments group membership.
• Simple and easy logical network group (VPN) management - ideal for service providers, hierarchical and large organizations.
• 31 already defined typical network services: IP, ICMP, TCP, UDP, DNS, SMTP, POP3, Telnet, HTTP, HTTPS, FTP (Active and Passive), TFTP, File Shearing, Lotus Domino, MS Exchange, NTP, ODBC, SQL Server, ODBC, SNMP, Syslog, RADIUS, …
• Custom definition of any required and specific services.
• Storing network information, network security policy and network device configuration backup - no need for additional network configuration backup & documentation.
• NET Database supports full recovery and replication features.
• Supports for multi-user environment over the network.
• Automatic calculating ACLs for all organization’s network devices interfaces.
• Automatic highlighting interfaces with changed ACL due to security policy changes.
• Minimizing security policy applying time by automatic calculating interfaces ACL changes, due to security policy changes, and ability to apply changed security policy only on changed interfaces.
• Automatic highlighting networks with defined security policy and no connection to the any device interface.
• Ability to apply policy on single interface, all devices’ interfaces, only changed device’s interfaces, all interface for all devices or all changed interfaces for all devices.
• Applying network security policy without network interruption or need for network devices reboots to take effects.
• No network interruption or irregular security states if NET Security Manager lose network communication with device while applying security policy.
• Automatic backup network device’s running configuration to flash or/and local file using TFTP file transfer.
• Reporting of Networks, Networks-Hosts, Networks Group Membership, Networks Policy, Network Groups Policy, Network Group Members, Devices - Interfaces and Services
• Scalable from small and medium to large enterprise organizations with hundreds and thousands networks/hosts.
• Proved in a Military environment with strong security requirements and more than 500 networks and hosts.

Need for Network Security Management

Without network access control management each computer in any network can gain access and attack computer and server in whole organization information infrastructure, resulting in unauthorized data viewing, theft of proprietary information, data integrity changes, crashes of vital organization services, etc. This means that each computer or server (or any network device) is practically unsecured from inside intruders. Simplified, this situation leads to the system with no authorization of users in a network system, no integrated and manageable network access controls and no network access logging. The insider attack can affect all components of computer security. By accessing through a system, confidential information could be revealed. Viruses and Trojan horses are a threat to both the integrity and confidentiality of information in the system. Insider attacks can affect availability by overloading the system's processing or storage capacity, or by causing the system to crash.

Some computers or servers may hold very sensitive information or drive vital organization services, like financial, banking, strategic reports, organization structure, marketing, government, military and all other possible confidential data and services. Think about all possible damages, losing repute and other possible short and long term costs that can arise from this situation, especially when many statistic researches has showed that 70-80% of all security incidents is done from inside an organization (from insiders). That’s why it is important not to underestimate the enemy inside!

According to many security surveys about 50-80% of all incidents is done from insiders. This is not all! Incidents from inside typically producing 10 time more damage and long term costs then incidents from outsiders. It is time to secure your system from both: insiders and outsiders.