A.10.6 Network security management

Objective: To ensure the protection of information in networks and the protection of the supporting infrastructure.

A.10.6.1 Network controls

Control

Networks shall be adequately managed and controlled, in order to be protected from threats, and to maintain security for the systems and applications using the network, including information in transit.

A.10.6.2 Security of network services

Control

Security features, service levels, and management requirements of all network services shall be identified and included in any network services agreement, whether these services are provided in-house or outsourced.

Firewall Partners

At Castleforce we are partnered with several leading firewall vendors and we can provide pre and post technical assistance with all the products listed. 

 Check Point is a leader in network security software, firewall solutions, VPN solutions, endpoint security, network protection, security management, data protection and Pointsec data encryption technologies. Check Point provides leading enterprise, small business and consumer network security solutions. EAL4 Certified Firewalls

 Stonesoft specialise in High Availability Security Appliances including Firewalls, IDS/IPS and SSL VPN in both hardware and virtual appliances.  EAL4 Certified Firewalls

Networking and security solutions from Juniper Networks helps consolidate network security issues for small, medium and large enterprises

 The MSA security appliance from Celestix is specifically designed for network security, running a hardened version of Microsoft ISA Server 2006.

 SonicWALL provides firewall products with unified threat management services such as network anti-virus, anti-spyware, virtual private networking (VPN), content filtering and other security services.

The XTM family of network security appliances is a new class of performance-driven solutions. Blazing fast throughput combines with advanced networking features to handle high-volume traffic securely - and at an affordable price. Includes a suite of flexible management tools that allows IT administrators to manage security through an intuitive centralized console, command line interface, and web UI.    

Firewall Backup

 Restorepoint from TADASoft can help you roll back a configuration change, therefore avoiding costly downtime and security risks to your network. Multiple administrators can use Restorepoint to manage configuration backups for a variety of switches, routers, firewalls, proxies and other network appliances from multiple vendors. It’s easy to see how Restorepoint simplifies the tasks of maintaining a healthy and stable network.

Intrusion Detection (IDS) and

Intrusion Prevention (IPS) Partners

At Castleforce we are partnered with several leading IDS/IPS vendors and we can provide pre and post technical assistance with all the products listed. 

 Stonesoft Stonegate IDS/IPS are ICSA Lab Certified and have hardware and VMware Certified virtual appliances, that can be managed through the same management centre. 

Juniper Networks IDP Series Intrusion Detection and Prevention Appliances offer the latest capabilities in network intrusion prevention to protect the network from a wide range of attacks.