Performance and manageability design in an enterprise network security system

Abstract

The design of an enterprise network security system presents a great challenge because of the complexity of networking environments and variation in design objectives. The design of a high performance and manageable enterprise network security system presents an even greater challenge. Such a system, however, would not only reduce the overall cost of system administration and user management, but also enhance the effectiveness of the security mechanisms due to the decrease in the number of mistakes that the security system administrators might make. Systems too complex and too cumbersome to manage achieves only part of the objectives for an enterprise network security system at best. We present the design of an enterprise network security system developed in MCI to protect network elements from user access in which performance and manageability are among the most important criteria that measure the success of the development. We describe the environment, the requirements and the design considerations as well as the mechanisms used in the design and development to achieve the objectives. A number of specific design decisions are discussed that help make the security system easier to manage and, at the same time, improve the performance of the security operations.