CertiGuide to Security+  9  Chapter 3:  Infrastructure Security (Domain 3.0; 20%)       9  3.5  Security Baselines            9  3.5.2  Network Hardening

3.5.2  Network Hardening 1 3.5.2.2  Configuration

OS/NOS products, being software-based with their code stored on server hard disks, are typically updated via software updates on CD or downloaded from the web. Installing an OS update is much like installing any other program or OS component. The install program copies the code into the proper locations on disk, perhaps makes some configuration changes, and the updated server is ready for use.

With network devices, the program code and data controlling the device is often stored in a form called “firmware”, which is a combination of “software” and “hardware”. Like OS updates, network device updates are often distributed over the web. However, rather than being stored on a hard disk, code for network devices is usually written into ROM (read only memory) chips with a special firmware update program.

As always, stay on top of the latest versions of firmware available for your networking products. These often address security-related vulnerabilities. To locate updates for your network devices, check the vendors’ websites.

And remember to perform tests before applying to a live environment.

3.5.2  Network Hardening 1 3.5.2.2  Configuration