Secure network infrastructure assessment

If your enterprise is currently running the Cisco Internetwork Operating System (IOS) – the operating system that drives the majority of routers and switches in commercial use today – you need to be aware of the increasing threat posed by potential vulnerabilities in IOS-based devices.

To ensure protection, your organisation needs to maintain its Cisco IOS infrastructures at recommended levels and deploy security best practice features. However, most organisations lack the resources required to investigate, scope, plan and execute upgrades and feature configuration and deployment, and this exposes them to operating risk. That’s where we have a custom solution to offer that can give you real peace of mind.

Secure Network Infrastructure Assessment is a network and security assessment service that discovers, catalogues and provides remediation recommendations for Cisco hardware and software. The service ensures that organisations do not expose themselves to unnecessary risk, by keeping products up to date and assisting with the alignment of their Cisco estate to configuration, security and patch management best practices.

The service is modelled on IOS Vulnerability Mitigation (IVM) and IOS Best Practices Configuration for Security (IBP).

Solution Features

Secure Network Infrastructure Assessment:

Identifies and catalogues all Cisco products deployed in the customer’s network;
Creates an asset database;
Identifies all end-of-sale and end-of-support components;
Analyses Cisco device configurations for security and network configuration best practices;
Analyses Cisco operating system version and patch revisions against the deployed configurations to determine security and downtime risk.

Business Benefits

Reduced mean-time-to-repair (MTTR) - The detailed asset list (CMDB-data) gives organisations visibility of all the equipment in their IT environment, leading to improved trouble-shooting when equipment fails.

Reduced security risk – Facilitates the standardisation of router, switch and advanced technology device releases through proper identification and cataloguing of the installed device base. Patches and upgrades can be prioritised based on their relevance in relation to the overall IT strategy and vulnerability profile. Standardisation, in turn, minimises the risk for human error and undiscovered equipment being left exposed to security threats

Reduced operational expense through standardisation -The identification of hardware and software which is in, or approaching end-of support, gives organisations the opportunity to update and standardise technology to ensure manufacturer support.

Identify best practice – Best practice configuration ensures maximum security and consistency, as well as regulatory compliance. The analysis and recommendations included in the service enables organisations to benchmark their configurations against industry best practice.