Rna Installation Considerations; Rua Installation Considerations - Nortel 2050 Installation Manual

RNA installation considerations

RUA installation considerations

N TPS 3D S
ORTEL ENSOR AND
• Do you want to detect every attack on your network, or do you only want to
know about attacks that penetrate your firewall? Do you have specific
assets on your network such as financial, accounting, or personnel records,
production code, or other sensitive, protected information that requires
special security policies? See
for more information.
• Do you provide VPN or modem access for remote workers? Do you have
remote offices that also require an IPS deployment? Do you employ
contractors or other temporary employees? Are they restricted to specific
network segments? Do you integrate your network with the networks of
other organizations such as customers, suppliers, or business partners?
See "Other deployment options" on page 15
RNA is the Real-time Network Awareness component of the Nortel 3D System.
Before you install a 3D Sensor with RNA, you should first consider your goals in
deploying network discovery and vulnerability assessment sensors. Next,
consider deployment issues, such as which network segments you want to
monitor with RNA (and why), and how you will physically connect these
appliances to your network. Finally, you should take into account any special
network configuration factors, such as firewall placement, VPN deployments, and
how you will use a Nortel Defense Center to aggregate and correlate RNA events.
Monitoring network changes with RNA can help you realize a variety of goals.
Clarifying your network discovery and vulnerability assessment goals can guide
your deployment choices. This section examines some general goals that can
influence a deployment of 3D Sensors with RNA, such as:
• Gaining a more thorough understanding of your current network
infrastructure.
• Learning when network change occurs and how it affects your network's
susceptibility to compromise.
• Using RNA data to refine your intrusion rules and firewall rules.
RUA is the Real-time User Awareness component of the Nortel 3D System. RUA
allows your organization to correlate threat, endpoint, and network intelligence
with user identity information. 3D Sensors with RUA allow you to identify the
source of policy breaches, attacks, or network vulnerabilities. By linking network
behavior, traffic, and events directly to individual users, RUA helps to mitigate risk,
block users or user activity, and take action to protect others from disruption.
These capabilities also significantly improve audit controls and enhance
regulatory compliance.
3D Sensors with RUA use detection engines to passively analyze the traffic that
travels through your network. An RUA detection engine collects user login events
by passively monitoring traffic. Refer to "Setting up Nortel 3D Sensors with RUA"
in the Nortel TPS 3D System User Guide for more information.
D C I
EFENSE ENTER NSTALLATION
Chapter 1: Before you begin
"Typical 3D Sensor deployments" on page 8
for more information.
G R 4.7.0
UIDE ELEASE
7
PAGE