I'm sure you're right. I just found the whole conversation odd and the idea of the NSA being helpful humorous, especially when you walk by buildings that don't exist!
Sort of like asking the IRS for tax advice and hoping that you'll get the most cost effective option.;) You have a good point though and if anyone should be able to pull together security documentation you'd hope the NSA would be a great resource. Thanks Scott ----- Original Message ----- From: Paul Cosgrove To: Scott Granados Cc: Kevin Graham ; [email protected] ; [email protected] Sent: Tuesday, October 13, 2009 2:06 PM Subject: Re: [c-nsp] best practices switches/Router Hi Scott, Would have to recommend reading the document, as the NSA have produced very well written guides for many years. Then adopt whichever recommendations you like, or a cunning disguise if you prefer. Paul. On Tue, Oct 13, 2009 at 6:55 PM, Scott Granados <[email protected]> wrote: NSA security policy, hmmmm, does that involve a lot of port mirroring and copying of data to non existant trunks. (shshshshshsh) Or use of encryption standards that are almost secure.;) Call me crazy (you wouldn't be the first) but I have to say I'm always skeptical when someone says "Hi, we're from the Government and we're here to help!" ----- Original Message ----- From: "Kevin Graham" <[email protected]> To: <[email protected]>; <[email protected]> Sent: Tuesday, October 13, 2009 10:37 AM Subject: Re: [c-nsp] best practices switches/Router my aim is to do review of the configs of ROUTERS and Switches in my network. As a review , need to track down the best practices that should be configured and are not there in my network. Was: http://www.google.com/search?q=site%3Acisco.com+best+practices ...not sufficient? From a security standpoint, in addition to the NSA SNAC publications already mentioned, Cisco's Network Security Baseline is very much worth reading: https://www.cisco.com/en/US/docs/solutions/Enterprise/Security/Baseline_Security/securebasebook.html _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/ _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/ _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
