LAN Configuration and Change Management
Suppose you find inappropriate network packets during your LAN traffic analysis. For example, say your traffic analysis revealed a collection of packets originating from an IP address that is not valid for your network. In most cases, LAN controls should only allow traffic originating from and addressed to valid addresses. If you initially set up your LAN controls to properly filter network addresses, something is wrong.
One of the first things you should check is the current settings of your routing rules. You should be able to tell if you have defined your routing rules properly. If you find that the rules have changed, determine when the rules changed, who changed them, and why were they changed.
Get Auditing IT Infrastructures for Compliance, 3rd Edition now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.