Network Management and Infrastructure Blog

 Week 11 - Network Hardening Network Hardening is the process of securing a network to protect it from threats and reduce vulnerabilities. Here are some key steps to harden a network: Firewall Configuration : Set up firewalls to block unauthorized traffic and control access to your network. Network Segmentation : Divide the network into smaller sections to limit access to sensitive areas and reduce the spread of threats. Encryption : Encrypt data to keep it secure during transmission, and use VPNs for secure remote access. Access Control : Use strong passwords, multi-factor authentication (MFA), and role-based access to control who can access the network. Patch Management : Regularly update software and devices to fix vulnerabilities and prevent exploits. Intrusion Detection Systems (IDS/IPS) : Monitor network traffic for suspicious activity and block potential threats. Monitoring and Logging : Continuously monitor network activity and store logs to detect and investigate unusual ...

 Week 10  Network Segmentation Security Network segmentation is a critical cybersecurity practice that involves dividing a network into smaller, isolated sections to enhance security, improve performance, and restrict access to sensitive data. This strategy helps prevent unauthorized access, contain cyber threats, and improve overall network management. Benefits of Network Segmentation Enhanced Security Restricts access to sensitive systems, ensuring that only authorized users and devices can interact with critical data. Limits the lateral movement of attackers within the network, reducing the impact of malware, ransomware, and insider threats. Reduced Attack Surface Minimizes the exposure of critical assets by separating them from less secure areas of the network. Prevents threats from spreading across the entire infrastructure. Improved Network Performance Reduces congestion by limiting unnecessary traffic between network segments. Helps prioritize bandwidth for critical app...

  Week 9 Post WiMax is a wireless broadband technology with both benefits and challenges: Benefits: Better Access: It brings high-speed internet to rural and underserved areas. Economic Growth: Helps businesses expand and creates jobs. Education & Healthcare: Enables online learning and telemedicine. Affordable & Mobile: Cheaper to install and allows internet on the go. Innovation: Encourages new tech and increases competition. Challenges: Limited Coverage: Struggles with range and interference in some areas. Security Risks: Vulnerable to hacking and privacy issues. High Setup Costs: Expensive to install, especially in sparsely populated areas. Obsolete Tech: Newer technologies like 5G could replace it. Health Concerns & Incompatibility: Worries about health risks and device compatibility. Conclusion: WiMax can improve internet access but faces challenges in range, security, and future relevance

 Week 8  IPv6 is the latest version of the Internet Protocol, designed to replace IPv4. It uses a 128-bit address system, allowing for a much larger number of unique IP addresses than IPv4, which only supports 4.3 billion addresses. Key benefits of IPv6 include: More IP Addresses : With 340 undecillion possible addresses, IPv6 can support the growing number of devices on the internet. Faster and More Efficient : The IPv6 header is simpler, helping data move more efficiently. Built-in Security : IPv6 includes security features, like IPsec, to protect data transmissions. Better for Mobile Devices : It supports automatic address configuration and improved mobile device performance. No Need for NAT : Each device can have its own public IP address, removing the need for Network Address Translation used in IPv4. IPv6 is essential for the future growth of the internet, as it allows more devices to connect and operate more efficiently.

 Week 7 Post      Securing TCP/IP requires measures to protect data and prevent unauthorized access. Encryption protocols ensure data confidentiality and integrity, while authentication methods, such as certificates, verify the identities of devices and users. Firewalls restrict network traffic to authorized sources, and techniques like deep packet inspection help block malicious activities. Intrusion detection and prevention systems further enhance security by monitoring for suspicious behavior.      To address specific threats, keeping software and devices up to date ensures vulnerabilities are patched, while monitoring and logging aid in detecting and analyzing security incidents. Together, these measures ensure secure and reliable communication over TCP/IP networks.

Name resolution Breakdown Name Resolution : The process of converting domain names (like www.google.com ) into IP addresses (e.g., 192.168.1.100). Why It's Important : Computers communicate using IP addresses, so name resolution is essential for network interaction. How It Works : Browser checks the local hosts file (personal address book) first. If the domain is not found, the computer queries a DNS server (like an internet librarian). DNS server sends back the IP address, allowing the computer to connect to the website. Methods of Name Resolution : Hosts file : Simple, but requires manual updates. DNS : A distributed system that efficiently handles domain-to-IP translation. Multicast DNS : Used for automatic name discovery in local networks. Link-Local Multicast Name Resolution : A protocol specific to Windows systems. DNS Security : Critical for the internet's function; attacks can disrupt access for many users. DNS queries can reveal browsing history, raising privacy conc...

 Week 5 - Whois and TracerRT      This week was little challenging. Learning to read tracer RT's and make sense of the data that is provided was a challenge. I did learn a lot seeing the various companies researched by fellow students and seeing how many registrars are really out in the world. I think it is very interesting the amount of data and information that can be pulled from running a tracer RT. The amount of hops, timeouts that occur and the various IP address a simple search goes through is amazing.      The Whois provides key data on companies. Who is their registrar, office locations,  when domains were first acquired and when they will expire unless renewed, are all points of data that can be view on a whois report.