NSA's Guide to Network Security

[Lemur]

This is kind of nifty -- the NSA has posted a PDF guide for n00bs learning how to secure their networks. Not bad stuff. I haven't had time to read it carefully, but it looks like ~60 minutes worth of work to improve your basic network.

Nice to see the security agencies doing something for the little guy. It's a lot of basic stuff, but I can think of two or twelve people I'm going to forward this to right away ...

Here's an HTML cached version, in case you need it.

[Xiahou]

Should be common sense stuff for people in the IT industry, but unfortunately for many- it isn't.

Definitely worth hanging onto though, if for no other reason than to say at my next job interview that I follow NSA network security guidelines.

[Husar]

Definitely worth hanging onto though, if for no other reason than to say at my next job interview that I follow NSA network security guidelines.

They will think you're 1337 and take you right away.

[sapi]

System administrators should crack passwords monthly to identify problems with weak passwords and to determine if the password policy is being followed.

That's very intersting, and, if you think about it, it makes a hell of a lot of sense. The best way to convince someone to change their password has to be to go up to them and say, "it only too me 26 seconds to gain access to your account"