Physical Security Concerns for LAN Management By: Derek McQuillen

Physical Concerns Choosing the correct site for constructing the LAN Choosing the correct site for constructing the LAN External Security External Security Internal Security Internal Security Weather or Natural Disasters Weather or Natural Disasters Is it Real? Is it Real? 6 steps everyone company should take to keep their network protected 6 steps everyone company should take to keep their network protected

What is a LAN? Local Area Network Local Area Network Network that covers a small area: Network that covers a small area: –Such as a small office, school, or home network Can serve anywhere from 2 to 1000 users Can serve anywhere from 2 to 1000 users

Choosing a Site Must have the correct utilities to begin the setup, such as electricity Must have the correct utilities to begin the setup, such as electricity Keep away from high risk areas where natural disasters occur Keep away from high risk areas where natural disasters occur Must be built in freestanding building not to close to other buildings or high traffic areas Must be built in freestanding building not to close to other buildings or high traffic areas Keep away from dry or fire hazardous areas Keep away from dry or fire hazardous areas

Choosing a Site (Ideal Distance Requirements) The building must be at least: The building must be at least: –10 miles from any nuclear power plant –2 miles from highway or railroad –5 miles from any military base –5 miles from any police station or fire station

Construction Barriers around the sites perimeters Barriers around the sites perimeters Fire Rated walls around perimeter Fire Rated walls around perimeter Keep server room in the center of the building with higher walls Keep server room in the center of the building with higher walls –So signal is difficult to get out Keep all other equipment away from the servers: Keep all other equipment away from the servers: –In case an outside source needs to come in to repair something they can not gain access to the private information

External Security There are many layers of security when it comes to external security There are many layers of security when it comes to external security –Outside Alarm –Surveillance Cameras –Invisible electromagnetic field around sensor cables –Keep staff and visitor parking away from delivery areas

External Security Keep guards on duty at all times Keep guards on duty at all times Fingerprint Identification Readers Fingerprint Identification Readers –This prevents ID cards or Pin numbers for gaining access from being lost or stolen

Internal Security Man guard watching server room at all times Man guard watching server room at all times Heat and smoke detectors installed all though out the building Heat and smoke detectors installed all though out the building Cooling system to keep all electronic devices from overheating and causing damage Cooling system to keep all electronic devices from overheating and causing damage

Weather Every network needs to have a Uninterruptible Power Supply (UPS) Every network needs to have a Uninterruptible Power Supply (UPS) –In case the power goes out or any other weather related incident would occur Also, back up generators also should be purchased by all company’s Also, back up generators also should be purchased by all company’s –Same reasons as above

Is It Real? The previous slides show the most ideal ways to set up a network and keep it from being intruded. The previous slides show the most ideal ways to set up a network and keep it from being intruded. This would be outrageously expensive and almost impossible for a company to afford. This would be outrageously expensive and almost impossible for a company to afford. So depending on the financial situation, companies can pick and chose the security features they think are important. So depending on the financial situation, companies can pick and chose the security features they think are important.

Six steps everyone company should take to keep their network protected Lock the server room Lock the server room Use rack mount servers Use rack mount servers Protect your printers Protect your printers Disable the drives Disable the drives Pack up the backups Pack up the backups Don’t forget the workstations Don’t forget the workstations

Lock the server room The server room is the main component of the physical security of the network The server room is the main component of the physical security of the network If access is gained to servers, routers, hubs, or switch the entire company is now in danger. If access is gained to servers, routers, hubs, or switch the entire company is now in danger. So, when no one is in the area make sure a make sure the door is always locked. So, when no one is in the area make sure a make sure the door is always locked. The best way to do this is to make the door lock no matter what when it shuts and a code or fingerprint access must be used to enter. The best way to do this is to make the door lock no matter what when it shuts and a code or fingerprint access must be used to enter.

Use rack mount servers Take up less room and are easier to secure Take up less room and are easier to secure Easily locked into closed racks Easily locked into closed racks Can be bolted to the floor Can be bolted to the floor –Making the unit nearly impossible to move

Protect your printers Today’s printers store document contents in their own on-board memories Today’s printers store document contents in their own on-board memories Recently printed documents can be accessed then Recently printed documents can be accessed then Again, keep bolted to the ground Again, keep bolted to the ground If extra copies are printed If extra copies are printed –Do not just throw in the trash can  No one knows who can get a hold of the trash

Disable the drives Disable or remove floppy disks, USB, or other external drives Disable or remove floppy disks, USB, or other external drives Another way to disable the drives is to use a type of hardware called Disklock. Another way to disable the drives is to use a type of hardware called Disklock. –This is a piece that slides into the drive that can be locked in with a key and is not able to be removed without the key.

Pack up the backups Keep all tapes or discs from the servers locked away in a safe place, not just laying around next to the servers Keep all tapes or discs from the servers locked away in a safe place, not just laying around next to the servers Don’t use flash drives, floppy disks, or external hard drives for backing up files because they are easily lost or stolen Don’t use flash drives, floppy disks, or external hard drives for backing up files because they are easily lost or stolen

Don’t forget the workstations Disconnect computers that aren’t being used Disconnect computers that aren’t being used Equip computers that must remain in open areas with smart card so that it’s difficult for unauthorized persons to log on Equip computers that must remain in open areas with smart card so that it’s difficult for unauthorized persons to log on Keep cases closed so hard drives or other hardware can’t be stolen Keep cases closed so hard drives or other hardware can’t be stolen

Reminder Network security starts at the physical layer. Network security starts at the physical layer. If physical access is gained all the firewalls and software programs mean absolutely nothing. If physical access is gained all the firewalls and software programs mean absolutely nothing.