Kuldeep,
I'm not sure what you're expecting to gain from this discussion, but some answers have already been provided. I'll throw in my suggestions in hopes that it helps. As you said in your OP, you feel "safe" because you're using ssl. In reality, any software isn't safe and there are vulnerabilities out there for MITM attacks if someone can spoof a certificate. In reality, there's nothing that's safe per se. Defense-in-depth is the only way to protect yourself better than just a "here and there" approach. Your whole security model needs to start from the top down. As far as your network equipment goes, unless you're planning on putting an IDS/IPS in front of your router (which some people do) you won't catch people trying to compromise your routers, firewalls, etc. You should have your router and firewall logging to syslog servers all login attempts. Unfortunately, when you have equipment directly on the internet like routers and firewalls, there is absolutely nothing that will keep you from being attacked. It's going to happen and the more popular the site, the more attacks that you're going to have.
From a basic standpoint, if you really want to be secure, don't enable any lines on the outside interfaces of your routers. Have all login requests sent to a radius server so you can log those requests. If you're offering services, such as Web, make sure that you software on the server is patched. A lot of people think that they're "secure" because they have a firewall but what they don't remember is the port still has to be open for the service to be accessible which means your server is now the point of attack and not your firewall. Lock down your firewalls and routers to only a certain address that can manage it. In other words, if you have a workstation in a data center and 2 admins have access to it, lock down your routers/firewalls to only be managed by that workstation and no where else. Configure control plane policing for your routers to help with ddos attacks that could be directed at your router.
There is no magic bullet that anyone on this board can tell you. It all depends on the amount of experience that you have in securing your network, but in reality it also depends on the type of industry you're in. If you're in the banking or healthcare industry, in the US we have legislations that we have to abide by and they (SOX, HIPAA, GLBA) tell the company what security requirements need to be in place. If you're a small, privately-owned video store, then obviously you don't need to lock your site down according to CIA guidelines. Take security seriously, but also make sure that it makes sense.
HTH,
John
*** Please rate all useful posts ***
HTH,
John
*** Please rate all useful posts ***
