In the previous video, we took a look
at the concept of three planes, the management
plane, the control plane, and the data plane.
We looked at some examples of each of those.
And now as we focus on hardening our network infrastructure
devices, wouldn't it be great if there
is some like big huge guide that we could
use that could say, OK, for each of these planes,
here are some of the techniques that we
can use to harden our devices.
That would be awesome.
And the great news is Cisco has provided us such a document.
I'd like to introduce it to you right now.
And here is this document. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And here is this document.
It is Document ID 13608.
As of this recording, it was updated in September of 2020,
which is fantastic.
And it's called the Cisco Guide to Harden Cisco iOS Devices.
Now in this document, there are dozens and dozens and dozens
for each of the planes of techniques
that we can use to harden our Cisco iOS devices.
Now that's good news and bad news.
It's good news because it can make us aware of, oh yeah,
I might want to use this, oh I might want to use that.
And it's bad news because if we just throw everything in, WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And it's bad news because if we just throw everything in,
it's very likely we're going to lose some functionality
that we needed.
So it's a risk/reward kind of behavior there.
So what I'd like to do in this video is
talk with you about this document,
talk with you about how it's broken out
with each of the three planes.
And then as we proceed through, we'll
take a closer look at the data plane and the management plane
and the control plane regarding this document,
with some highlights of some of those features we
could use to harden our Cisco iOS devices.
So I recommend, at some point, doing
a search for that document, downloading it,
and having it available to you.
Let me give you a high level overview of its content. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
Let me give you a high level overview of its content.
So it walks through the management plane.
And just here is dozens and dozens
of options for securing and hardening devices
regarding the management plane.
And as we scroll down further, it has the control plane
and it has the data plane.
So a couple of highlights before we
dive into this document taking a look at techniques.
Number one, not every solution is
going to be perfect for every network.
Two, we want to test out any options we plan on deploying.
And if we are going to implement a solution,
make sure we use change control, where we've tested it, WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
make sure we use change control, where we've tested it,
got signed off on it, we've implemented it,
and then it becomes part of our standard.
And then as you implement these security features
for hardening our network devices in the future, as we
roll out new switches and routers,
we can incorporate those features because they've all
been tested and start off with a much better security posture
than we would have otherwise.
All right, so in the next video, we'll
start off regarding this document
with some of the concepts regarding hardening Cisco iOS
devices focused on the management plane.
I'll see you there in just a moment.
Meanwhile, I hope this has been informative for you
and I'd like to thank you for viewing. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
and I'd like to thank you for viewing.