IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Organisation Remarks
____________________________________________________________________ .........................................
between any two terminal devices. Furthermore, it is necessary to document
the configurations of the active network components used for forming the
segments. This can involve the configuration files in the case of logical
segmentation, and the actual configuration of the network components in the
case of physical segmentation.
Survey of the network protocols in use
The network protocols used in the individual segments of a network as well as
the configurations required for this purpose (e.g. the MAC addresses, IP
addresses and subnet masks for the IP protocol) need to be determined and
documented. The documentation should provide details on which services are
authorised (e.g. HTTP, SMTP, Telnet), and which services are filtered in
accordance with which criteria.
Survey of the LAN /WAN connections
The LAN / WAN connections are to be described, if they have not already
been documented. For every LAN / WAN connections between two networks,
details must be provided on:
- Which transmission routes are used for this purpose (e.g. wireless
communications route for a LAN/LAN link)
- Which communication partners and services are permitted in which
directions on such routes
- Who is responsible for their technical implementation.
This should also include a documentation of the WAN protocols in use (e.g.
ISDN, X.25). If firewalls are employed (refer to Chapter 7.3 Firewalls), their
configuration must also be documented (e.g. filter rules).
Survey of the actual network performance and traffic flow
The network performance must be measured and the traffic flow between the
segments or subnetworks must be analysed. Corresponding measurements
need to be performed for each network protocol in use.
Any time the network environment is modified, the above mentioned surveys
are to be repeated. The documentation prepared as part of these surveys must
be stored so that it is protected against access by unauthorised parties, but
readily available for the security management and administrators.
Additional controls:
- Are performance measurements and traffic-flow analyses conducted
regularly?
- Is the documentation updated on a regular basis?
- Is the documentation also clear and understandable for third parties?
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000