IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Organisation Remarks
____________________________________________________________________ .........................................
The network concept is prepared in a manner similar to that described in S
2.139 Survey of the existing network environment and thus essentially involves
the following steps; however, these steps need not be executed strictly in the
order given below. In some case, the results of executing the individual steps
influence one another mutually, so that these results need to be checked and
consolidated on a regular basis.
1. Conception of network topography and topology as well as physical and
logical segmentation
2. Conception of the network protocols to be used
3. Conception of LAN / WAN connections
The individual steps essentially involve the following activities:
Step 1 - Conception of network topography and topology
Based on the analysis profile (see above) and actual structural conditions, a
suitable network topography and topology need to be selected (also refer to S
5.60 Selection of a suitable backbone technology, S 5.2 Selection of an
appropriate network topography and S 5.3 Selection of cable types suited in
terms of communications technology). However, future requirements such as
scalability also need to be considered here. The prepared concept must be
documented (cabling plans, etc.)
Based on the ascertained requirements and the anticipated / calculated data
flow, an appropriate physical and logical segmentation must be performed
during conception of the network topography and topology (refer to S 5.61
Suitable physical segmentation, S 5.62 Suitable logical segmentation and S
5.13 Appropriate use of equipment for network coupling).
Step 2 - Conception of the network protocols
This step involves the selection and appropriate conception of the required
network protocols. This includes, for example, the preparation of an
addressing scheme for the IP protocol and the formation of subnetworks.
During the selection of the network protocols, it must be observed that these
protocols are supported by the network topology as well as planned and
existing active network components.
Step 3 - Conception of LAN / WAN connections
Based on the anticipated flow of data across the planned LAN / WAN
connections as well as requirements concerning security and availability, the
LAN / WAN connections can be conceived in this step. This includes the
selection of suitable coupling elements (refer to S 5.13 Appropriate use of
elements for network coupling) as well as their secure configuration (refer to
Chapter 7.3 Firewalls and S 4.82 Secure configuration of active network
components).
Additional steps
Based on the developed network concept, measures for preparing a network
management concept can now be implemented (refer to S 2.143 Development
of a network management concept, S 2.144 Selection of a suitable network
management protocol and S 2.145 Requirements for a network management
tool) and a realisation plan can be outlined in accordance with S 2.142
Development of a network realisation plan.
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000