EXECUTIVE SUMMARY

LAN-to-WAN Domain Weaknesses

Unauthorized network probing and port scanning Unauthorized access through the LAN-to-WAN domain IP router, firewall, and network appliance operating system software vulnerability. Threats from people (this could be misconfigured equipment) Equipment not being used correctly Use of personally owned software/hardware Viruses, Trojans, and network worms Fire, water, electrical disturbances, and hardware failures. LAN-to-WAN Domain Solutions

Effective logical access control starts with defining system-specific security policies that clearly and concisely state what protection mechanisms are to be enforced in order to achieve security requirements for a system. Thus the security policies are formalized by security models and implemented by security mechanisms providing access controls that minimize both internal and external threats. Some of the controls that could be used after a sound security policy is in place are: Encryption of data Multi-Protocol Label Switching Implementing a proxy server for remote services Use of firewalls Protocol implementation IP address rules Port filtering Adding a DMZ for anonymous users Using Dual-Homed ISP connections in case the primary ISP fails Using an IDS & IPS Data leakage security appliances Web-content filtering Traffic monitoring devices LAN-to-WAN configuration Change management (to avoid unauthorized changes to the network infrastructure) Secured location of critical LAN-to-WAN devices FCAPS for network management Network Access Control (NAC) defining requirements for accessing the network Redundant routers and firewalls to avoid bottlenecks in the network Backup and Recovery policies and solutions Use of VPNs for remote access Load-balancing techniques Use of