Centuries ago, security professionals may have debated the merits of new technologies, like moats
or drawbridges for example. Today, the equipment may have changed, but the debate remains the same. Today, your network has become the castle; and instead of invading armies, the security professional is constantly besieged by twelve year olds with downloaded cracker suites and thirty-year-old entrepreneurs looking to host a new warez site.
While 100% security is hardly a possibility, there are several things that you can do to make your network more secure.
1. Ensure that your firewalls are up-to-date and properly configured.
Yes, that is firewalls, as in more than one. The most secure configuration will include, at a minimum, two firewalls between any network client and the wild, wild Web. This includes a software firewall on the system, as well as a hardware firewall in the network path.
Although it is an excellent tool, most hardware firewalls have one fatal flaw: they are designed to trust all outgoing traffic. Unfortunately, this traffic may include captured keystrokes or other unwanted data. A software firewall, properly configured, is able to distinguish unsafe traffic from benign.
Your firewall manual will go into greater detail, but as a general rule of thumb, you should start by manually allowing all inbound and outbound traffic, and setting policies to allow only the desired packets. Network security checklist
From around the Web
- Windows Vista Service Pack 2 Latest Release Schedule
- Vista SP2: What is inside?
- NetWitness releases free version of security software
- Three Reasons Why Users Won’t Buy Into Security
- Automated security testing & its limitations
- Google Wants to Preinstall Chrome Browser on PCs
- Mozilla warns of Firefox China add on
- Firefox No Longer an Automatic Defense Against Browser Drive Bys
- Google patches Chrome file stealing bug
- Apple plays catch up, adds anti fraud safeguard to Safari
- Researchers find vulnerability in Windows Vista
- How to Use Network Behavior Analysis Tools
- The insider security threat in IT and financial services
- Windows 7 security: An overall improvement?
- Windows 7 UAC could be less of a nag