In a world where computer hacking has become a sport, cyber terrorism is on the rise, and government regulations are becoming more stringent, companies are increasingly concerned regarding the security of their networks. While technology for securing networks has increased, hackers, too, have improved technology and malicious purposes in mind: accessing your confidential information and interfering with your business operations. The 2006 Computer Crime and Security Survey, conducted by the Computer Security Institute and the FBI, shows that 52% of companies surveyed detected unauthorized use of their computer systems.
Network security is a multi-step process that encompasses assessing, planning, monitoring and enforcing security policies. IT must be able to monitor and audit network usage for compliance, keeping the following questions in mind: Who is really using the network? Are they the intended, trusted users and are they using resources appropriately? If network users (or usage) are non-compliant, what is the remedy to enforce the policies? In terms of driving down cost, the ability to quickly answer these questions is paramount. Less labor is required as a company becomes more efficient at monitoring and remedying its network, allowing more time for proactively evaluating the network for vulnerabilities. The ability to detect any unusual network activity, or possible vulnerabilities, is essential to determining if the network is still secure.
Security assessment and planning
At the outset, IT engineers need tools to assist in security planning. The first step in this effort is getting an up-to-date view of the network resources. This can be a time-consuming and error-prone exercise if done manually. Through the use of Active Discovery, Fluke Networks can automatically provide a fast and accurate inventory of network elements that includes routers, switches, servers, hosts and wireless access points. For example, the OptiView Series III Integrated Network Analyzer begins the process of discovery as soon as it connects to the network. For enterprise-wide visibility, the OptiView Console operates in a centralized location accessing data from analyzers in remote locations. OptiView Console integrates results from these remotely located network analyzers to provide a single, comprehensive view of the entire enterprise network that enables assessment of risks and documentation necessary for security planning. For monitoring critical gigabit Ethernet links the OptiView Link Analyzer achieves full line rate capture and gives detailed views of traffic to assess risks and document usage.
Secure network from internal threats
Most organizations have systems in place to handle security threats from the outside. However, many organizations are not prepared to handle threats from the inside. Yet when employees bring in unauthorized devices, such as wireless access points—and use unauthorized applications—such as instant messaging and other peer-to-peer applications—they can create holes in the network.
The discovery capabilities in the OptiView Series III Integrated Network Analyzer make it easy to find unauthorized devices and applications anywhere on your network that could potentially cause a security breach. You can also use the OptiView to conduct routine audits to detect unauthorized downloading of restricted documents or sharing of confidential information with unauthorized users.
Security monitoring and policy enforcement
Since the foundation for network security is the knowledge the IT staff possesses about their network, Fluke Networks allows IT to gather and maintain this information on an ongoing basis. With this information IT can determine whether or not the network is secure by being able to answer the critical questions identified above. OptiView Analyzers identify the actual users on the network and allow IT to determine quickly and easily whether or not they belong there. In addition, intruder traffic and activity can be documented. This enables IT to identify traffic that threatens operations and pinpoints it to the source so that policies can be enforced.
Is your facility without a device policy for cordless phones or Bluetooth? If so, how do you know if someone brings one of these devices inside your no use area? AnalyzeAir Wi-Fi Spectrum Analyzer can identify these devices operating in your RF spectrum, thus allowing you to track them down and remove them from the secured area.
The Fluke Networks solution is a significant asset in network security management and yields a fast return on investment. For additional information on how you can improve network security, please review our technical documentation section or contact your local sales representative.