Security Questions
What are your corporate security policies?
What network security is already in place?
What level of security is desired?
What are the security policies for each service?
What is the authentication method (directory, database, NIS/NIS+, etc.)?
What are the logging requirements for management, business, and subscriber reporting?
Will you allow subscriber’s CGIs?
Will you allow subscriber’s Java servlets?
Is there any intention of supporting shell accounts?
Do you plan to use VPNs?
Will RADIUS be authenticated using LDAP?
Will you use NAT (Network Address Translation)?
Do you plan to use split-DNS?
How are you going to harden each system?
How are you going to manage the security posture of each system over time?
How will you validate that patches ...
Get Designing ISP Architectures now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
