Network Security Tip of the Week [5]

This week’s network security tip has to do with turning on logs for firewall rules. With complex network security environments, there is a lot of connectivity that is allowed/blocked by firewalls. When network traffic issues occur, having logging on the firewall rules can facilitate troubleshooting. Enrico, a senior security consultant from Italy embellishes on this and suggests the following…

“Always enable logging on Permit/Deny rules. This helps you to:

1. Have evidence in case of an intrusion
2. Troubleshoot routing (i.e.: asymmetric routing)
3. Troubleshoot application communication matrix
4. Make the best use of automated tools for optimization and analysis based on historical traffic.”

Have a network security tip? Share it with us! Comment on our blog, DM us at @AlgoSec or email us at [email protected].