Our 75 pt. Network Audit Includes:
1) Inventory network switches, hubs
2) Verify speeds of network equipment
3) Verify that network equipment is connected properly and efficiently
4) Scan network for any malfunctioning devices or protocols
5) Verify internet connection bandwidth (http://www.2wire.com/bandwidth)
6) Wireless access - Is it encrypted?
1) Equipment make, model, firmware version
2) External firewall port scan. What services are allowed in from the internet,
and where do they go?
3) Remote access procedures. VPN connectivity, remote desktop, OWA.
1) System BIOS version
2) Operating system version
3) Service pack levels
4) Windows server licenses - Do they have enough?
5) Defragmentation of levels of partition
6) Hard drive usage / capacity
7) Hard drive redundancy. Is RAID implemented?
8) Processor usage
9) Memory usage
10) Missing Microsoft security patches & updates
11) Review event logs
12) Domain controller diagnostic (dcdiag) (http://technet2.microsoft.com/windowsserver/en/library/f7396ad6-0baa-4e66-8d18-17f83c5e4e6c1033.mspx?mfr=true)
13) Microsoft Baseline Security Analyzer (http://www.microsoft.com/technet/security/tools/mbsahome.mspx)
14) Group policy best practices (gpdbpa) (http://support.microsoft.com/kb/940122)
15) Permissions on shares & folders
16) Password procedures. (Are users required to change the password on a regular
basis? Do they all use the same generic password and can't change it?
17) Windows performance analyzer
18) Antivirus version, definition version
19) Virus scan
20) Verify that backup procedures are in place & running. Check any logs.
21) Test battery backup systems
22) Event monitoring (Procedure for detecting significant event triggers)
23) Storage management (Management of various media, such as backup media)
24) Software management (Location of master media, automated inventory scans, license
conformance verification).
25) Backup failures - Clearly defined procedures in the event of a backup failure.
26) Automated notification of application failures
1) Exchange service pack level
2) Exchange database integrity
3) Exchange database size. Default size is 18 GB. Does it need increased? (http://support.microsoft.com/kb/912375)
4) Exchange Best Practices Analyzer (http://www.microsoft.com/downloads/details.aspx?familyid=DBAB201F-4BEE-4943-AC22-E2DDBD258DF3&displaylang=en)
5) Mail antivirus version, definition
6) Mail anti-spam version, definition
7) Outlook web access. Is SSL encryption enforced?
1) SQL version & service pack level
2) Check backup / maintenance plans. (Ensure that they have one.)
1) Operating system version
2) Operating system service pack level
3) Basic hardware levels (Free hard drive space. Does the system have enough memory?)
4) Verify user security / group level on the desktop (Are they local administrators?)
5) Productivity suite (Office) version
6) Productivity suite service pack level
7) Productivity suite licensing - Do they have enough?
8) Antivirus application version, definition version
9) Spy-ware application version, definition version
10) Virus scan
11) Check battery backup systems or verify the presence of a surge protector.
1) How do users access them? Printer shares / queues on the server (managed) or
directly to the printer (unmanaged).
2) What protocols are enabled?
3) Job & print queue monitoring
1) Hosting provider
2) Expiration date
3) MX records
4) Perform DNS report against domain
1) Who is the client's ISP?
2) IP address reservations
1) Temperature of the server room / location
2) Humidity levels
3) Proximity to fire / sprinkler systems
4) Physical access to the equipment (Can users access the server?)
5) Cabling - Is it neat, easy to determine what goes where?
6) Racks
7) Process for selection & purchase of new software and/or hardware.
8) Equipment labeling (all equipment identified)
9) Power supply, power distribution, air conditioning
10) Physical maps of client location
11) Tech support & contact number
