Re: What to do if Cisco router & switches got hacked ?

["Nilesh Burghate" <nileshb () nii co in>]

Hi,

In most of the cases, weak SNMP community strings on the routers and Swithes
results in trivail hacking. There are tools available to brute force the
SNMP community strings (Google for help)

The links below are standard practices for securing routers
http://www.nsa.gov/snac/cisco/guides/cis-1.pdf
http://www.nsa.gov/snac/cisco/guides/cis-2.pdf

THH,

Nilesh P. Burghate,
Systems Security Analyst,
Network Intelligence India Pvt Ltd.
Web: www.nii.co.in
Tel: 91-22-22001530, 91-22-22006019
===============================
AuditPro for SQL Server
http://www.nii.co.in/software/apsql.html
===============================

----- Original Message ----- 
From: "yfs us" <yfs_168us () yahoo com>
To: <security-basics () securityfocus com>
Sent: Wednesday, December 31, 2003 7:24 AM
Subject: What to do if Cisco router & switches got hacked ?


> Hi All,
>
>        Just want to find out does anyone here came
> across
> the cisco switches & router got hacked. I'm not sure
> which
> one actually got hacked coz I'm not a security expert.
> I do
> notice that sometime my switches & router refuse to
> accept
> connection. But when I change to a new want every
> things
> work fine.
>        I do ask the IBM technical support & they told
> me that
> it was hacked. So now once a week I need to call the
> IBM
> support to fix it. They usually replace it. I'm
> wondering
> how do I prevent these in the future.
>       Besides these I too like to know how do I track
> the
> hacker ? I had mail my ISP & they reply please go &
> hire a security expert with a good qualification. Is
> these
> what one usually get if they need help from the ISP ?
> It looks
> like the ISP suck or they r the one who did it. Or
> time to change
> ISP.
>      Does one really need to have a good qualification
> to hunt
> the hacker ? As far as I know everyone is a hacker the
> only
> different is some is good & some is lousy coz hacker r
> not
> born they too go thru a pain in the ass experince b4
> they
> really call them self a elite haxor.
>
>     All help r welcome.
>
> Cheers
>
> __________________________________
> Do you Yahoo!?
> Find out what made the Top Yahoo! Searches of 2003
> http://search.yahoo.com/top2003
>
> --------------------------------------------------------------------------
-
> --------------------------------------------------------------------------
--
>


---------------------------------------------------------------------------
----------------------------------------------------------------------------