Network-Security-Checklist MSE安全攻防资料 checklist.docVIP

NETWORK INFRASTRUCTURE SECURITY CHECKLIST Version 4, Release 1 23 August 2002 DISA FIELD SECURITY OPERATIONS  Database Reference Number: _________________________ Database entered by:________________Date:____________ Technical Q/A by:__________________Date:____________ Final Q/A by:______________________Date:____________ CAT I: _____ CAT II: _____ CAT III: _____ CAT IV: _____ Total: _____  Unclassified UNTIL FILLED IN CIRCLE ONE FOR OFFICIAL USE ONLY (mark each page) CONFIDENTIAL and SECRET (mark each page and each finding) Classification is based on classification of system reviewed: Unclassified System = FOUO Checklist Confidential System = CONFIDENTIAL Checklist Secret System = SECRET Checklist Top Secret System = SECRET Checklist Date of Network SRR:_________________________ Network Reviewer Phone/Location Previous SRR Y N Date of Previous SRR A03 Available Y N Number of Current Open Findings Site Information Site Name Address Phone Site Personnel Information Position Name Phone Number Email Area of Responsibility SM ISSM NSO Penetration Test Information Network Address ISS Job ID Function Type of Scan 1 2 3 4 5  This page is intentionally left blank. SUMMARY OF CHANGES General Changes: Added section about unclassified until filled in Various grammar changes throughout document Replaced all references to NSA approved encryption to FIPS-140-2 Section 3.4.2Device Management PDI NET0320 removed duplicate checks 8 and 9 Section Exploits protection Updated PDI NET1010 to reflect new DDoS ports Section 4.2 General Standards for Remote Access Methods Removed PDI NET1520 and renumbered repeated PDI number 1160 to NET1520 Removed check 15 under PDI1560  This page is intentionally left blank. TABLE OF CONTENTS Unclassified UNTIL FILLED IN 2 1.0 Introduction 9 1.11 NATO Classification 9 2.0 Enclave Architecture 11 3.0 Network Infra