03 Nov
Posted by: chou.tammy in: colasoft, computer, internet, network security, network sniffer, software
Nowadays, almost every company has a network security admin! what will you do to ensure a proper training for your network security admin,properly training your security administrator is important. So, let’s see what makes a good network security administrator and what kind of training should be given to make a good network security administrator!
why a network security admin should be well trained?First of all,he/she should have a certain baseline of skills and some specific training. At a minimum, your network security trainee should be able to administer the systems he or she is protecting.But this doesn’t mean he/she should know each application thoroughly; applications are for systems administrators. Rather, the security administrator should be able to administer the operating systems and security-specific devices and applications that lie within your network defense perimeter.let’s see a example,if you run a Windows network, the security administrator must be qualified to administer the systems within that network, including everything from server to client. This is necessary because most vulnerabilities are discovered in the operating systems and their components.That’s why a well training for your security admin is very important. If you need a financial incentive to provide this training, keep in mind the words “due diligence” and the recent bout of court cases against companies that failed to properly secure their networks.
Developing a training plan isn’t that difficult, but I’ll make it even easier by outlining a sample training plan. I’ll base this sample plan on a Windows 2000 network with Windows XP Professional clients and a Check Point FireWall-1 NG.
This plan mentions specific certifications. While certifications normally mean next to nothing to me, these certification tracks do an excellent job of training and verifying the skill sets that a security admin requires. The key word here is training. In this plan, you’re using the certification as an industry standard tool set to train and verify the skills you want your security administrator to have.
“Clients and servers training”
For the operating systems involved in clients and servers training, the Microsoft Certified Systems Administrator program does an excellent job of training and verifying client- and server-level skills. The MCSA covers the following areas:
* Installing, configuring, and administering Windows XP Professional and Windows 2000 Server
* Managing a Windows 2000 network environment
* Implementing and administering Windows 2000 network security
* General security concepts
* Communications security
* Infrastructure security
* Cryptography basics
* Integration of various devices across your organization
Once your new security administrator thoroughly understands what he or she is protecting, it’s time to begin training on the device that’s most responsible for network security: the firewall.
“Firewall training”
Your best choice for firewall training is usually directly through the vendor. Check Point Certified Security Administrator (CCSA) is an entry-level certification that confirms the administrator’s ability to configure and manage fundamental implementations of Check Point’s FireWall-1.
The CCSA training plan verifies that the security administrator possesses the skills to define and configure security policies that enable secure access to information across the corporate network. The CCSA training also teaches the admin how to monitor network security activity and how to implement measures to block intruder access to protected networks.
“Final thoughts”
This is a basic plan for training a security admin. Advanced training for a new security admin should include training on all switches and routers and on any security-specific tools and applications that are used for your network defense. In addition, training your admin to understand how security impacts the organization as a whole is important to prepare him or her to create effective security policies.
Once you’ve trained the new admin and as new security devices and software are added to the network, have your security admin review and certify these devices to operate on the network. This builds security into the operations of your network instead of tacking it on at the end.
Above all I conclude above, a network analyzer is a good help to a network security administrator!Here is a very good one!It is an expert network analyzer designed for monitoring and diagnosing network traffic flowing through local network, helping network administrators to detect and troubleshoot network problems. With the abilities of real time packet capture, accurate protocol analysis, automatic network events diagnosis, combined powerful filters and statistic information of global network, Colasoft Capsa let you quickly and efficiently fix the network troubles.Capsa Network Analyzer (Packet Sniffer) is an easy-to-use Ethernet network analyzer (aka. packet sniffer or protocol analyzer) for network monitoring and troubleshooting purposes. It performs real-time packet capturing, 24/7 network monitoring, advanced protocol analyzing, in-depth packet decoding, and automatic expert diagnosing.
By giving you insights into all of your network’s operations, Capsa Network Analyzer (Packet Sniffer) makes it easy to isolate and solve network problems, identify network bottleneck and bandwidth use, and detect network vulnerabilities.
Leave a reply