登录查看更多内容

How can you secure the core network when virtualizing it?

由人工智能和领英社区提供技术支持

Network virtualization is a powerful way to optimize the performance, scalability, and efficiency of your core network. However, it also introduces new security challenges that require careful planning and implementation. In this article, you will learn how to secure the core network when virtualizing it, using some best practices and tools.

在这篇协作文章中查找专家回答

由社区从 2 条内容中精选。了解更多

1 Assess your risks

Before you start virtualizing your core network, you need to identify and prioritize the potential threats and vulnerabilities that could compromise your data, applications, and devices. You can use a risk assessment framework, such as NIST SP 800-30, to analyze the impact and likelihood of different scenarios, such as denial-of-service attacks, unauthorized access, data breaches, or configuration errors. Based on your risk assessment, you can define your security objectives and requirements for your virtualized core network.

添加您的观点

2 Segment your network

One of the key benefits of network virtualization is the ability to create logical partitions of your physical network, called virtual networks or subnets. These partitions can isolate different types of traffic, such as voice, video, or data, and apply specific policies and controls to each segment. By segmenting your network, you can reduce the attack surface, limit the spread of malware, and enforce the principle of least privilege. You can use tools such as VLANs, VXLANs, or SDN to create and manage your network segments.

添加您的观点

Bilal Asghar

Software House | NOC | Co-work space | Remote | IT Network and System Engineer
举报内容
The basic key here is segmentation using subnetting and vlans once implimented make sure only specific subnet is allowed to access with in that vlan and no one else if inter vlaning due to smaller subnet ranges or for what ever reason still keep in mi.d not to allow all after this rest of the security principles should be followed as well switch securoty it self is as important as router firewall or siem/ids systems are concerened.

已翻译

赞

3 Encrypt your data

Another important aspect of securing your core network when virtualizing it is to protect your data in transit and at rest. Data encryption can prevent eavesdropping, tampering, or theft of your sensitive information, such as customer records, financial transactions, or intellectual property. You can use protocols such as IPSec, SSL/TLS, or VPN to encrypt your data packets as they travel across your virtualized network. You can also use encryption tools such as BitLocker, LUKS, or Veracrypt to encrypt your data stored on your virtual machines or cloud services.

添加您的观点

4 Monitor your network

To ensure the security and integrity of your virtualized core network, you need to continuously monitor your network activity and performance. Monitoring can help you detect and respond to any anomalies, errors, or incidents that could affect your network availability, reliability, or security. You can use tools such as SNMP, NetFlow, or SIEM to collect and analyze your network data, such as traffic volume, bandwidth usage, latency, or errors. You can also use tools such as Nmap, Wireshark, or Metasploit to scan and test your network for vulnerabilities or exploits.

添加您的观点

Venkateshwarlu T

Network Security Engineer @ Infinx
举报内容
AlienVault OSSIM (Open Source Security Information and Event Management) is an open-source SIEM platform that includes network data analysis capabilities. It offers log management, network traffic analysis, threat detection, and incident response features. AlienVault OSSIM integrates with various security tools and provides unified security monitoring.

已翻译

赞

5 Update your network

Finally, you need to keep your virtualized core network up to date with the latest patches, updates, and configurations. Updating your network can help you fix any bugs, vulnerabilities, or compatibility issues that could expose your network to risks or reduce its performance. You can use tools such as Ansible, Puppet, or Chef to automate and streamline your network updates and configurations. You can also use tools such as Nessus, OpenVAS, or Qualys to audit and verify your network compliance and security.

添加您的观点

6 Here’s what else to consider

This is a space to share examples, stories, or insights that don’t fit into any of the previous sections. What else would you like to add?

添加您的观点

Network Engineering

+ 关注

给文章评分

我们借助人工智能创建了此文章。您认为这篇文章怎么样？

很棒不太好

举报此文章

查看全部

How can you secure the core network when virtualizing it?

1

2

3

4

5

6

1 Assess your risks

2 Segment your network

3 Encrypt your data

4 Monitor your network

5 Update your network

6 Here’s what else to consider

Network Engineering

给文章评分

感谢您的反馈

更多Network Engineering相关文章

更多相关阅读内容

How can you secure the core network when virtualizing it?

1

2

3

4

5

6

1 Assess your risks

2 Segment your network

3 Encrypt your data

4 Monitor your network

5 Update your network

6 Here’s what else to consider

Network Engineering

给文章评分

感谢您的反馈

查看其他技能