I have tried to implement a monthly review of my firewall rules, my own internal audit. In my reply to the rule creep post I talked about the importance of documentation. This subject has come up again here and is still a valid point. And I think a key to making documentation useful is reviews for currency, or another way to look at it, audits. Our network devices, servers and workstations are scanned regularly with Retna, which is a vulnerability and compliance management tool. This is a downward directed audit required by our customer. Regular audits keep us honest and don't let things get too lax. In the "network world" things move fast and you can quickly find yourself way behind. I like ccie14430's position, look at audits as way to make things better.
↧
