Re: Sources of network security templates or designs

2010-06-26 Thread jul
http://www.team-cymru.org/ReadingRoom/Templates/ Sean Donelan wrote on 24/06/10 02:45: > While every network designer/architect with an emphasis on security has > his or her favorite design templates, I'm wondering what public sources > do people start with? > >Cisco SAFE and other published

RE: Sources of network security templates or designs

2010-06-26 Thread Tomas L. Byrnes
While the DISA STIGs are probably the archetype, you have to start with whatever the sponsoring or certifying authority uses, if you need to pass some audit later. Those almost always reference NIST docs: http://www.nist.gov/itl/publications.cfm?defaultSearch=false&authorlist= &keywords=&topics=3

RE: Penetration Test Vendors

2010-06-26 Thread suess13
Verizon Business ( purchased the cybertrust group) -Original Message- From: Chris Gravell [mailto:chris.grav...@green.ch] Sent: Thursday, June 24, 2010 2:39 PM To: nanog@nanog.org Subject: RE: Penetration Test Vendors Pen-testing for what? -Original Message- From: Scott Berkman