Network Security and Device Management Policy

Network Security and Policy

• Different network zones must be securely interconnected to maintain integrity and security.
• Utilize web security gateways, content filtering, and firewalls for controlling external network traffic.
• All network and infrastructure devices should implement Network Time Protocol (NTP) aligned with Indian Standard Time (IST).
• New network and infrastructure equipment must comply with IPV6 standards.

LAN and WAN Management

• Approval from COIS is mandatory for leased lines, MPLS VPNs, internet lines, and P2P communication links.
• Divisions can request bandwidth enhancements or reductions, subject to COIS's review.
• COIS governs the IP address scheme for LAN/WAN allocations.
• Rate contracts for WAN MPLS services must be finalized by COIS and utilized by divisions with prior approval for any extra needs.

Device Security Protocols

• Default settings and passwords of devices must be changed before deployment; passwords must align with policy standards.
• Secure protocols (SSH, SSL, IPsec) should be used for remote access, while insecure protocols like telnet must be disabled.
• All unused ports on devices need to be disabled, and devices should automatically close inactive sessions.
• Only approved routing protocols are allowed for WAN configurations.
• Regular (monthly) backups of device configurations are required, especially after changes.
• CCTV networks should be isolated from corporate LAN, connecting through a security appliance as needed.

Network Access Policies

• Remote access must be conducted via a secure VPN with two-factor authentication, granted on approval.
• Development, quality, and testing environments must be separated from the production environment.

Wireless Network Security

• Users must connect only via corporate wireless networks, avoiding external untrusted access points.
• Wireless LAN must be segregated from wired LAN, with regular maintenance and audits conducted.
• Wireless controllers are necessary for managing access points and limiting coverage.
• Tips for authentication: all wireless access must be authenticated with strong password policies and WPA2 encryption or better.

Email Usage Policy

• Strictly prohibits derogatory, offensive, political, or personal emails through corporate accounts.
• Sending mass emails requires authorization based on recipient count, restricted by user grade.
• Users must back up emails regularly; the administrator does not restore lost data due to user error.

Cloud Computing Strategy

• Explore cloud options for updating IT infrastructure, assessing data and application needs before adoption.
• Ensure compliance with cybersecurity and data regulation standards, specifically regarding data localization.
• Engage only MeitY empaneled Cloud Service Providers (CSP) for any services involving sensitive data.
• Must include strong security measures like data encryption and multi-factor authentication for projects with personal data.

Mobile Technology Integration

• Customized mobile applications aim to facilitate access for employees, dealers, consumers, and vendors.
• Development should adhere to open standards for compatibility with third-party solutions.
• Strong mobile device security must be maintained, utilizing SSL connections for external user access to corporate data.

Test your knowledge on essential network security measures and policies related to LAN and WAN management. This quiz covers the protocols for secure connections, device security, and guidelines for effective network administration. Enhance your understanding of both infrastructure management and device configuration standards.