Best practices for securing an Internet-connected corporate WAN/LAN

What is the best method to secure a corporate WAN/LAN from the Internet? Are their some good guidelines available?
Whoa! Yep, there are many things that must be done to secure a corporate WAN/LAN that is connected to the Internet. Here are some basic principles and, where relevant, some available guidelines.
  1. Remember that perimeter security is not the only thing you need to worry about. To see the big picture, you can get a roadmap from SANS. The site also has many guidelines and articles.

  2. Secure hosts on your network. See CIAC, NSA, the Center for Internet Security, Microsoft and other product guidelines for doing so. This includes not just servers, but workstations, too.

    Visit:

  3. Have a corporate security policy that covers everything including what admins can do, acceptable Internet access and use policy. Have management support and if people break the rules, have repercussions.

  4. Use firewalls and other perimeter security devices. See info on SANs site, Trusecure (the NISTS firewall guide).

  5. Check out products before buying -- see reviews at ICSA labs.

This was first published in June 2003

Join the conversationComment

Share
Comments

    Results

    Contribute to the conversation

    All fields are required. Comments will appear at the bottom of the article.
    Back to top