The local administrator of the registered subnet or individual addresses is responsible for maintaining accurate registration information.Notification to administrators of registered subnets or individual network addresses in the event of quarantine or blocking:.Explicit blacklisting or permanent whitelisting of the ITS vulnerability scanner is prohibited.These services may be provided through a proxy server. The quarantine network will allow hosts to access services necessary to patch and remediate infections.All data gathered from the vulnerability scanning and quarantine processes should be classified as RIT Confidential information.Hosts that are vulnerable will be “moved” to a quarantine network where they may be allowed to self-remediate. The network should be scanned regularly for hosts that are vulnerable to remotely exploitable attacks.Sample banner text may be found via the Network Standard Web page. This banner text shall not provide the underlying characteristics of the network device.Whenever possible, network devices will display a trespassing banner at login.Hard-coded passwords will be allowed as necessary for non-interactive purposes, as well as recovery of Network Devices that have become disconnected from the network.Centralized user-level authentication should be used to authenticate all interactive users making changes to all Network Devices.
Changes are subject to the change control process. This list is maintained by ITS and is reviewed by ITS on a yearly basis (or as needed).All external connections to RIT should be protected by an access list that blocks certain high-risk TCP/UDP ports.All networks should be protected from Layer-3 IP address spoofing by an access list or other means.Access to configuration backups should be restricted to authorized personnel only.Access to Network Devices should be controlled by access lists so that the equipment is accessible only from a limited number of locations.
0 kommentar(er)
