Nothing says there's a hole in your security like someone walking off with your servers. You could spend millions of dollars on access lists, firewalls, USB tokens, virus scanners, VPNs, passwords and patches to secure your network from online invasions, but none of those will protect you from offline attacks.
Physical security is essential. It prevents your machines from being stolen, damaged or taken offline by someone flipping the power switch, and it restricts physical access by an adversary who might want to attack your network.
We examined two ways of monitoring and restricting physical access: networked cameras and door locks. As you decide which devices are best for your environment, keep in mind that there are a hundred ways into a location. You need to consider every angle, just as an intruder would do.
The Eye Sees All
Gotta love the production value on Webcams--small, grainy live videos that run 24/7. Networked cameras are essentially the talented offspring of Webcams, and their video quality can vary enormously. Features include remote pan, tilt or zoom capabilities; programming to let you take monitoring or still shots; and add-ons that can capture many types of activity and conditions. Networked cameras not only deter criminals, they also monitor changes to your environment that can make or break you (see a review of NetBotz's Wallbotz monitoring device).
Indoor cameras may be mounted on the wall, off the ceiling, in an equipment rack or outdoors. Outdoor cameras are designed to be waterproof and withstand a wide range of temperatures. Most cameras need a power line. Be wary of those that work off battery, as they have a very short power life. Unless you buy a wireless-enabled camera, you'll have to run a network cable. Long cable runs (greater than 100 meters) may call for coax or fiber.
If image quality is important to you, use high-resolution cameras. And we've found that color cameras produce sharper images. Cameras supporting color correction are worth considering, since low-sodium and fluorescent lamps can cast a yellow tint and wash out all color. Some cameras also may support low light or night vision. Cameras near light fixtures may become oversaturated and wash out the picture, so it's a good idea to look for a camera that adjusts to ambient light levels automatically.
Many cameras feature a built-in Web server, which can be accessed from any browser. Other cameras may require you to upload still photos to an external FTP or Web server. This method makes it easy to archive old snapshots, and is limited only by the amount of disk space you can buy. If you plan to deploy a large number of cameras, look for a vendor that offers some form of centralized management or software that lets you display multiple cameras in one window.
You should also consider units that let you limit users based on IP address range or passwords. If you don't limit access, an attacker could use the images generated by the camera to reconnoiter your room.
Environmental monitors are an excellent add-on to any camera. These probes and sensors, which are easily attached to the camera's system, can often be programmed to alert you to changes. Add-ons monitor conditions such as temperature, airflow, humidity, power draw, doors and sound levels.
REPORTS
Analyize In-Line NAC strategies and products.
ANALYTICS Plan and design your enterprise blade server deployments
InformationWeek U.S. IT Salary Survey 2008
Salaries for business technology professionals are falling. Here's what you need to know in order to make good hiring decisions and personal career choices. Purchase Today: $299