CCIE Security v3.0 Quick Reference

Chapter 9. Security General

Need for Network Security Policy

The primary reasons behind network security are technology and configuration weaknesses, policy vulnerabilities, and intrusion leading to exploitation of network resources. Networks must address all vulnerabilities using a sound security policy that is defined before granting access to network resources. The policy must constantly be reviewed to avoid exploitation. Take care to address threats from within and outside the network. Protocol and application vulnerabilities must be addressed as part of the security policy to counteract exploitation. For more information about the requirements for a robust network security policy and best practices, visit http://www.cisco.com/en/US/tech/tk869/tk769/technologies_white_paper09186a008014f945.shtml ...