|
Security Buying Guide
Security is a reality of life for everyone. Information security is everyone's responsibility. Whether it is keeping systems up to date with configurations and virus definitions or ensuring the company's personnel and client records are secure, Nortel is delivering technologies that provide secure access to information from security policy compliant systems regardless of where and how the user accesses the network. Nortel's award winning security solutions provide small and medium-sized businesses with the network intelligence for success.
What are the security risks that I need to be aware of?
How do I know if I need security in my network?
You should implement a security solution if your business has any of the following requirements:
How do I protect my network from external and internal attack?
Securing the network from attack involves both protecting the infrastructure and protecting the traffic.
What is a VPN and why is it important for my business?
Virtual Private Networking (VPN) is composed of a network that uses a shared public infrastructure as a channel for private data communications. Virtual Private Networks are used to link remote sites (Site to Site) and remote users to the enterprise data services they need.
What is a virus and what can it do to my network?
A virus is one of several forms of malicious software (malware) commonly seen on both the Internet and enterprise networks. A virus is a special program written to "attach" itself to a file on a computer and when executed, performs a task without the user's knowledge. The virus can infect other files, find other systems on the network it can infect and spread through the network. The impact from a virus can range from very small to extremely large, particularly with the more widespread viruses over the last few years. Users often receive virus infected programs through email, in software they have downloaded, through specific file sharing systems (peer to peer file transfer) and when visiting web pages. Viruses can infect computers and result in lost productivity and potentially lost data. Malware trends are suggesting the virus writers are getting smarter to avoid detection or infect as many computers as possible in as short a time as possible. The SQL Slammer event in January 2003 rendered any enterprise networks almost inoperable due to the sheer volume of traffic. Protecting yourself from virus infections involves using an anti-virus detection program, being cognizant of what files are attached to e-mail and who sent them or the website link before you click on it. If the sender is not known, do not open any attachment or click on any link. Having a virus detection program is only part of the solution. Nortel's VPN Tunnel Guard and Sygate's LAN Enforcer products can assist the detection of systems which do not have anti-virus software or up to date detection signatures and limit the spread of infections in your network.
What key things should I keep in mind when evaluating a security solution?
What do I need to consider when thinking about securing my network?
What kind of security do I need to implement a wireless network?
Wireless networks are viewed in the industry as posing specific security challenges. Implementing the appropriate level of security is dependent upon the specific needs of your wireless network. All wireless networks require at least one Access Point, which is the "bridge" between the wireless and wired networks. Wireless security solutions include encryption technologies such as Wired Equivalent Privacy (WEP) and WiFi Protected Access (WPA). WEP is not considered much better than using an unencrypted wireless network, while WPA offers distinct advantages and increase protection levels. Both encryption methods can be used to limit connections to the wireless network from unauthorized devices although WEP implementations have been successfully compromised. Additional filtering is available to limit the actual wireless device capable of connecting to the Access Point. These filters require configuration for each wireless network interface card and prevent unauthorized devices from connecting to the network, even if they have the correct network encryption configuration. The most secure level of protection for a wireless network uses a VPN service over the wireless to provide the same level of security and protection for the network connection as discussed earlier. Besides several Extensible Authentication Protocol (EAP) implementations of 802.1X, Nortel's WLAN 2200 series Access Points offer the latest security standard Wi-Fi Protected Access (WPA), a subset of the current 802.11i draft* (security specifications currently under development by the IEEE). They also provide a closed system mechanism to prevent unauthorized users from attaching to the network by preventing the broadcast of the SSID. A second security layer, the WLAN Security Switch, provides VPN encryption and firewall along with the capability to not only detect unauthorized or "rogue" Access Points, but also prevents users from connecting to them, and locating unauthorized APs within a 10-meter perimeter.
What security choices are available for small businesses?
Each small business is different, with different needs and problems. Some want to do it themselves with specific products, like firewalls and VPN solutions. Others may wish to use security consultants to design the appropriate solution, build and operate it. Alternatively, they may choose to use managed security service to meet their needs. No matter which option you choose, small businesses should seriously consider using firewalls at their network perimeter and VPN services for employee and business partner access to their networks and applications.
What questions should I ask a potential vendor?
Potential customers should ask their security vendor
Nortel partners with the best in the business of providing solutions for our customers. The Security Developer and Security Expert Advantage Programs can provide the resources any business needs.
How is security sold and managed?
Ideally security should be part of a total solution and integrated with other network devices and services. This is important for the small business that often does not have significant IT resources. The Yankee Group* identified the top concerns for small and medium businesses when examining network equipment in:
* Ease of Integration for Routers, Switches and Hubs Is Top SMB Purchase Driver
How much should I expect to pay?
Any given solution has a large number of variables depending upon the business requirements. Typical small business security solutions often fall into the $5,000 - $10,000 range depending upon many variables affecting size, scalability and availability requirements.
What are my security options from Nortel?
How do I learn more or purchase a Nortel Networks security solution?
|
|||
