登录查看更多内容

What are the best network administration practices for a secure organization?

由人工智能和领英社区提供技术支持

Network administration is a crucial skill for any system administrator who wants to maintain a secure and efficient organization. A network administrator is responsible for managing the network infrastructure, devices, services, and security policies that enable the communication and collaboration of users and systems. In this article, we will cover some of the best network administration practices for a secure organization, such as:

此文章中的业界达人

由社区从 7 条内容中精选。了解更多

David Akinsanya, MBA, FACHE

IT Infrastructure (Network & Telecom Engineering)

1 Network design

A good network design should adhere to some fundamental principles, such as segmentation, redundancy, and standardization. Segmentation involves dividing the network into smaller subnets or zones based on the function, location, or security level of the devices and users. This can help isolate and control the traffic, reduce the attack surface, and improve the performance and scalability of the network. Redundancy involves adding backup or alternative paths, devices, or services to the network to ensure availability and reliability in case of failure or disruption. Standardization involves following consistent and documented rules and conventions for naming, addressing, configuring, and managing the network devices and services. This can simplify and automate the network administration tasks, reduce errors and conflicts, and enhance the security and compliance of the network.

添加您的观点

David Akinsanya, MBA, FACHE

IT Infrastructure (Network & Telecom Engineering)
举报内容
Absolutely. Network design and implementation constitutes the foundation upon which everything else is built. Network architecture can greatly enhance organization’s missions and operations when built properly or become a show stopper when designed poorly

已翻译

赞

2 Network monitoring

As a network administrator, it is essential to constantly monitor the network performance, status, and activity to identify and resolve any issues, anomalies, or threats. To do this, one can use Simple Network Management Protocol (SNMP), Network Management System (NMS), and Security Information and Event Management (SIEM). SNMP uses agents, managers, and traps to communicate and exchange data. NMS provides a centralized and graphical interface for managing and monitoring the network devices and services. SIEM integrates and analyzes data from various sources such as network devices, servers, applications, or logs to detect and respond to security incidents or threats. Furthermore, SIEM can use rules, correlation, or machine learning to generate alerts, reports, or actions.

添加您的观点

David Akinsanya, MBA, FACHE

IT Infrastructure (Network & Telecom Engineering)
举报内容
Absolutely. We can’t improve what we can’t measure or identify. Proper monitoring tools provide valuable insights to the network. Some major issues are not spontaneous, they build up over time and detonates when it reaches maturity

已翻译

赞
Pavel Na?

Head of IT
举报内容
Monitoring has to be done right. In case you monitor every single part of system but dont take immediate action on it then it just comes to this black hole of thousand alerts which everyone eventually ignores. Its better to trim it to essential metrics then to be overwhelmed

已翻译

赞

3 Network security

As a network administrator, it's important to implement and enforce various security measures and policies to protect the network from unauthorized access, modification, or damage. This includes encryption, authentication, authorization, firewall, and VPN. Encryption uses cryptographic methods to make the data unreadable, while authentication verifies the identity of users or devices accessing the network. Authorization grants or denies access rights based on roles, groups, or policies. Firewall filters and controls incoming and outgoing network traffic based on rules or policies. Lastly, VPN creates a secure and encrypted tunnel between two or more endpoints or networks to extend reach, enhance privacy, or bypass restrictions.

添加您的观点

David Akinsanya, MBA, FACHE

IT Infrastructure (Network & Telecom Engineering)
举报内容
Security is not a once and for all deal. The best security measures at most, only reduces risk and hardly remove it. Security plans or strategies built on properly designed networks and assessments from proper monitoring monitoring are the best

已翻译

赞
Pavel Na?

Head of IT
举报内容
Consider also consolidating data gathered from multiple network devices to single point - XDR/SIEM to have top level overview.

已翻译

赞

4 Network documentation

Maintaining and updating network documentation is an important task for a network administrator. This documentation should include diagrams to visually represent the network topology, devices, connections, and zones. Additionally, an inventory of the network devices, services, and resources should be included, along with their specifications, locations, owners, or statuses. Policies should also be included to define the network objectives, standards, procedures, or responsibilities. Finally, logs of the network events, activities, or changes should be kept to provide a record of what has occurred over time. These logs can be generated by the network devices, services, or applications and can be stored, analyzed, or audited.

添加您的观点

David Akinsanya, MBA, FACHE

IT Infrastructure (Network & Telecom Engineering)
举报内容
Absolutely. A short pencil is more reliable than a sharp memory. Proper documentation should include quick snapshots and detailed information about the network topology, its design, how systems are connected, resources and how they can be accessed, contact and support information etc

已翻译

赞

5 Network automation

Network automation can help a network administrator to perform repetitive or complex network tasks more efficiently, accurately, and consistently. This can be done using scripts, tools, and APIs. Scripts are sequences of commands that can be executed by a program or interpreter to do a specific task, such as configuration, backup, or testing. Scripts can use languages like Python, PowerShell, or Bash. Tools are software applications or platforms that provide various functions such as discovery, provisioning, orchestration, or verification. They can use frameworks like Ansible, Puppet, Chef, or Netconf. APIs are Application Programming Interfaces which allow the network administrator to interact with the network devices, services, or applications programmatically via requests and responses. APIs can use formats such as REST, SOAP, or GraphQL.

添加您的观点

6 Here’s what else to consider

This is a space to share examples, stories, or insights that don’t fit into any of the previous sections. What else would you like to add?

添加您的观点

Maryam Alizadeh
举报内容
Other essential best practices include the following: * Employ effective policy development, communication and execution. * Implement network segregation. * Develop and deploy a zero-trust architecture and mindset of continuous verification. * Employ automation in workflow and incident response when possible. * Take steps to prevent insider theft or data loss. * Establish a strong end-user education program. * Recognize what baseline network activity looks like. * Proactively test systems to uncover vulnerabilities and poor configuration. * Have an effective networking monitoring service in place.

已翻译

赞

System Administration

+ 关注

给文章评分

我们借助人工智能创建了此文章。您认为这篇文章怎么样？

很棒不太好

举报此文章

查看全部

What are the best network administration practices for a secure organization?

1

2

3

4

5

6

1 Network design

2 Network monitoring

3 Network security

4 Network documentation

5 Network automation

6 Here’s what else to consider

System Administration

给文章评分

感谢您的反馈

更多System Administration相关文章

更多相关阅读内容

What are the best network administration practices for a secure organization?

1

2

3

4

5

6

1 Network design

2 Network monitoring

3 Network security

4 Network documentation

5 Network automation

6 Here’s what else to consider

System Administration

给文章评分

感谢您的反馈

查看其他技能