Common Threats to Router and Switch Physical & Mitigation

In Physical Installations, it basically involves four types of threat: Hardware, Electrical, Environmental and Maintenance.

Hardware Threats:

It refers to potential threats that will cause physical damage to the router or switch hardware. Therefore, it is essential to take note of the following requirements to reduce damage risks:

1.The physical hardware must be locked in a room and only authorized personnel can access to the room.

2.The room must be secured and cannot be accessed from any windows, dropped ceiling, or point of entry except for the secured access point.

3.Adopting biometric system where every access to and from the area will be logged by security systems and monitored by security personnel.

4.Security cameras with automatic recording should be installed and monitored by security personnel.

Electrical Threats:

It refers to irregular shift in voltage such as brownouts and voltage spikes. However, these threats, such as voltage spikes, brownout, power loss, can be limited by following these guidelines mentioned:

1.Install uninterrupted power supply (UPS) system for important network devices.

2.Install backup generators systems for important network devices.

3. Having regular UPS or generator testing and maintenance.

4.Install redundant power supplies on important devices.

5.Monitor and alarm power-related parameter at the power supply and device levels.

 

Environmental Threats:

Threats include extreme temperature, moisture, electrostatic and magnetic interference. In order to make sure that these threats do not affect or deal damage to the network devices, we have to make sure that:

1.The room is being kept in a recommended temperature and humidity by control systems according to the supplied product documentation.

2. Potential sources of electrostatic and magnetic inference should be removed from the room.

3.A monitor and alarm system should be installed in the room to alert about the environmental parameters in the room.

Maintenance Threats:

These threats include not having backup parts or components for critical network components; not labelling components and their cabling correctly. It also includes inappropriate handling of key electronic components, electrostatic discharge. Thus, maintenance-related threats are generally a broad topic as it includes many items. However, it can be prevented by following the general rules below:

1.Clearly label all equipment cabling and secure the cabling to the equipment racks to prevent accidental damage, disconnection, or incorrect termination.

2.Use cable runs, raceways or both to traverse rack-to-ceiling or rack-to-rack connections.

3.Always follow ESD procedures during replacement or working with internal router and switch device components.

4. Maintain a stock of critical spares for emergency use.

5. Do not leave a console connected to and logged into any console ports. Always log off administrative interfaces when leaving a station.

6.Do not depend solely on a locked room as the only protection for a device.

Resources:http://earnkori.blogspot.com/2012/02/network-security-mitigating-common.html