Introduction

Network security is a popular topic. It seems that everywhere you look there is something in the news about a new exploit or vulnerability that has been exposed. Unfortunately, network security is not a quick, easy fix. To truly have a secure network, security must be implemented at several different layers. This is known as defense-in-depth. But where should a network administrator start when working towards increasing the security level of a network? One approach is to initially focus on the center of the network the servers and client workstations and then work outward towards the public Internet connection. Alternatively, you can start with the public connection the routers, switches, and firewalls and work towards the center of the network. The direction in which a network security plan is implemented depends on an organization s needs and requirements. However, in most cases, the network administrator will want to secure the Internet connection first and then focus on ensuring that the internal network is secure and, more importantly, stays secure.

A good security plan is one that realizes that network security is a daily, ongoing event that requires the administrator to not only implement an initial solution but also to monitor it and manage it over time to ensure that new threats and required changes are taken into account.

First and foremost, a network administrator should use the principle of least privilege for their user accounts. Next, they should configure and implement a solid security solution using security templates. After the security templates...