DSE security knowledge hub

Networks & Infrastructure
Knowledge

Page 156 of the DSE Networks & Infrastructure knowledge center, with source-backed guidance and practical next steps.

DSE-authoredOfficial sourcesReviewed guidance
Search the library
Explore this topic

Networks & Infrastructure knowledge center

Guidance for resilient networks, Wi-Fi, firewalls, cabling, power, exposure reduction, and connected-device planning.

Start with the cornerstone guide
DSE post stream

Networks & Infrastructure

1,594 articles
DSE visual briefNetworks & infrastructure

Test Path MTU across tunnels and cloud edges before applications stall

VPN, overlay, encapsulation, and cloud paths can carry less payload than an endpoint interface suggests. Validate bidirectional Path MTU, ICMP behavior, transport adaptation, and representative applications before intermittent stalls reach production.

Published Reviewed 3 min readBy DSE Security Editorial Team
Read the playbook
DSE visual briefNetworks & infrastructure

Govern IPv6 even when the network is called IPv4-only

IPv6 may be active on endpoints, servers, and network equipment before an organization intentionally deploys it. Unmanaged IPv6 creates a parallel path around inventories, filtering, monitoring, segmentation, and incident procedures designed only for IPv4.

Published Reviewed 4 min readBy Gavin Stewart
Read the checklist
DSE visual briefPhysical security

Measure live-video delay before operators must act

A stream can be clear and still arrive too late. Measure sensor-to-screen delay through the production camera, network, VMS, decoder, workstation, and display—under normal and stressed conditions—before live video supports a time-sensitive response.

Published Reviewed 3 min readBy DSE Security Editorial Team
Read the checklist
DSE visual briefPhysical security

Commission radar as a perimeter sensor, not a magic field

Radar can add reliable movement, position, and speed data where light, fog, shadows, or privacy limit video. Its blind spots, reflections, classification limits, zones, and response integrations still need real-scene acceptance testing.

Published Reviewed 3 min readBy DSE Security Editorial Team
Read the checklist
DSE visual briefPhysical security

Connect workplace alarm technology to the emergency action plan

An alarm device is useful only when people can perceive it, distinguish its meaning, report the emergency, take the planned action, and account for others. Test the technology and the workplace plan as one operating sequence.

Published Reviewed 3 min readBy DSE Security Editorial Team
Read the playbook
DSE visual briefContinuity & recovery

Prove Windows DHCP failover before the primary server is unavailable

A configured DHCP failover relationship is not proof of client continuity. Test both partner paths, relays, lease renewal, new leases, DNS updates, state transitions, scope replication, monitoring, and controlled recovery before relying on it.

Published Reviewed 3 min readBy DSE Security Editorial Team
Read the playbook
DSE visual briefNetworks & infrastructure

Accept new fiber with both Tier 1 loss evidence and Tier 2 event evidence

Tier 1 OLTS testing proves total insertion loss, length, and polarity against the selected limit. Tier 2 OTDR testing adds event location, loss, and reflectance. Specify both where needed, test correctly, and receive native traces—not just a pass/fail PDF.

Published Reviewed 4 min readBy DSE Security Editorial Team
Read the checklist
DSE visual briefVideo evidence & analytics

Make every security event tell the same time

Camera, recorder, access-control, identity, alarm, and network records become difficult to correlate when clocks disagree. Build a governed time hierarchy, measure offset, alert on drift, and prove behavior through outage and reboot tests.

Published Reviewed 3 min readBy DSE Security Editorial Team
Read the guide
DSE visual briefNetworks & infrastructure

Onboard connected security devices without lending trust first

NIST SP 1800-36 demonstrates how an IP network and IoT device can establish identity and posture before the device receives operational network credentials—and how that trust can be renewed across its lifecycle.

Published Reviewed 4 min readBy DSE Security Editorial Team
Read the explainer