Learn
LoginRegister
← All playbooks

Professional workflow · Network

Network security assessment

Objective

Map authorized network attack surface, identify weak segmentation/services, and produce a prioritized hardening plan.

Authorized scope

CIDR ranges and hosts explicitly listed. No DoS, no wireless attacks, no third-party networks.

Prerequisites

  • Networking fundamentals
  • Network Security course recommended
  • Approved scanning windows
Course →Roadmap L3 →

Step-by-step workflow

  1. Step 01

    Scope & baselines

    • Confirm IP ranges, exclusions, and rate limits
    • Collect expected service inventory from owners

  2. Step 02

    Discovery

    • Host/port discovery within rate limits
    • Service fingerprinting on allowed hosts
    • Note unexpected listeners

  3. Step 03

    Segmentation & exposure review

    • Compare findings to architecture diagram
    • Flag management ports on untrusted segments
    • Review firewall/NACL samples if provided

  4. Step 04

    Validate & report

    • Confirm false positives with owners
    • Prioritize by exposure and criticality
    • Deliver network risk memo + inventory

Expected evidence

  • Approved scope CIDRs
  • Scan configs + timestamps
  • Service inventory delta vs expected
  • Prioritized findings list

Checklist

  • Written scan approval
  • Rate limits observed
  • No out-of-scope hosts touched
  • Management interfaces reviewed

Reporting template

Title: Network assessment — [environment]
Scope CIDRs: […]
Method: [tools + intensity]
Findings table: asset | service | issue | priority | remediation
Architecture notes: [segmentation gaps]
Appendix: raw inventories (controlled share)

Remediation

  • Close unused ports; require VPN/bastion for admin
  • Segment crown-jewel systems; default-deny east-west where possible
  • Patch and inventory continuously

Related tools