Bryley Basics (getting you informed in 100 words or less)

by bryley 7. December 2011 20:20

Virus Warning!

We have become aware that there is a fraudulent email being sent that claims to be from the US Postal Service or the US Post Office.  Email subject heading include "USPS Shipment Status ID#######" or "USPS Delivery Problems NR#######".  The reader is directed to click on a link or open an attachment.  This link or email attachment contains a virus and we recommend you delete the email immediately.  We advise you open emails from trusted senders only since these viruses are not restricted to this current fake Postal Sender.  If you are waiting for something from the post office, please call them first or email customerservice@ups.com

Links:                                                                                                                                                                                                                                                                                            Bryley’s Secure Network reduces the risk of you Company ever seeing these types of suspicious emails           

 

            

 

 

Bryley Basics (getting you informed in 100 words or less)

by bryley 1. December 2011 19:05

Suspicious IRS Emails

The IRS receives thousands of reports from taxpayers who receive suspicious emails, phone calls, faxes or notices claiming to be from the IRS.  The goal of these devices is to trick you into revealing personal and financial information and use several tactics such as claiming a greater tax refund, the use of IRS logos, and even have emails with a .gov address.  These communications appear to be legitimate, but these scammers are out to steal your identity and assets. 

Here are five things the IRS wants you to know about phishing scams:

1.       The IRS doesn’t ask for detailed personal and financial information like PIN numbers, passwords or similar secret access information for credit card, bank or other financial accounts.

2.       The IRS does not initiate taxpayer communications through e-mail and won’t send a message about your tax account. If you receive an e-mail from someone claiming to be the IRS or directing you to an IRS site:

• Do not reply to the message.

• Do not open any attachments. Attachments may contain malicious code that will infect your computer.

• Do not click on any links. If you clicked on links in a suspicious e-mail or phishing website and entered confidential information, visit the IRS website and enter the search term 'identity theft' for more information and resources to help.
 

3.       The address of the official IRS website is http://www.irs.gov. Do not be confused or misled by sites claiming to be the IRS but ending in .com, .net, .org or other designations instead of .gov. If you discover a website that claims to be the IRS but you suspect it is bogus, do not provide any personal information on the suspicious site and report it to the IRS.

4.       If you receive a phone call, fax or letter in the mail from an individual claiming to be from the IRS but you suspect they are not an IRS employee, contact the IRS at 1-800-829-1040 to determine if the IRS has a legitimate need to contact you. Report any bogus correspondence.

5.       You can help shut down these schemes and prevent others from being victimized. Details on how to report specific types of scams and what to do if you’ve been victimized are available at http://www.irs.gov, keyword “phishing.”

 Links:

Bryley’s Secure Network reduces the risk of you Company ever seeing these types of suspicious emails

Bryley Basics(getting you informed in 100 words or less)

by bryley 11. October 2011 00:00

Tips for Creating a Strong Password

Passwords provide the first line of defense against unauthorized access to your computer. The stronger your password, the more protected your computer will be from hackers and malicious software. You should make sure you have strong passwords for all accounts on your computer.  If you're using a corporate network, your network administrator might require you to use a strong password.  For tips on how to create a strong password... http://windows.microsoft.com/en-US/windows-vista/Tips-for-creating-a-strong-password    

                                             

                   

Warning! This type of phone call is a scam!

by bryley 15. September 2011 22:23

According to Microsoft, cybercriminals are now turning to phone calls as a new method of attack.  They call victims pretending to be computer security personnel from legitimate companies (including Microsoft), warn you of a security threat that could potentially be on your computer and then ask if you want a free security scan.  If you say yes, they direct you to a website that allows them to remotely access your PC.  Again, this is a scam!  If you receive a call of this nature do not give the caller any valuable information or access to your PC!

People who have previously fallen for this scam have either had their computer tainted and their valuable information stolen - usernames, passwords and/or financial information - or have given away their credit card details as they were under the impression that they were paying for a legitimate service.       

To comprehend the ubiquity of this new method of attack, Microsoft polled 7,000 PC users from North America and the U.K (the two locales currently exposed to the scam).  15 percent of those polled had received such a phone call and of that subset 22 percent fell for the scam.  79 percent of the time, the scam resulted in financial loss. Among those victims that incurred a monetary loss, 17 percent had money taken from their financial accounts, 19 percent had their passwords stolen, 17 percent were the victims of identity fraud and over 50 percent suffered from subsequent pricey computer problems. The amount of money stolen per victim spanned from $82 to $1,560 while the amount of money it took to fix each damaged PC ranged from $1,730 to $4,800.    

Although this phone scam has only been traced to the United States, Canada, England and Ireland, it was affecting Australians back in 2010 and has the likelihood of expanding its reach in 2011.

How do you protect yourself? Use common sense, and when in doubt follow this advice:

1.      Exercise caution and maintain suspicion when you receive an unsolicited calls for anything but especially for a security problem

2.      Never give any of your personal information – full name, date of birth, credit card number, social security number, bank account information – to an unsolicited caller

3.      Never go to a website or install software when an unsolicited caller tells you to

4.      If you happen to receive such a call, take down the caller’s information so as to pass it on to the police

5.      Keep all of your software updated, especially all security software

6.      Maximize password strength and mandate frequent changes

 

If you have any questions, concerns or problems regarding phone scams please contact Bryley today at 978.562.6077 or email Sales@Bryley.com.

 

Bryley Basics (getting you informed in 100 words or less)

by bryley 17. August 2011 22:30

Phishing\fish-ing\ , noun; the act of baiting computer users with important looking emails or links so as to infect computers with malware and steal valuable information especially bank accounts

Don’t

1.      Click on a link from an email (banks never ask you to confirm account details via email)

2.      Trust “dear valued customer” (banks know your name)

Do

1.      Look for spelling mistakes (unprofessional typically means scam)

2.      Rest your mouse over a link to see the real address

And now you’re informed in 96 words!

 

Tags: , , ,

Network Security

Defend your small business from the perils of modern cybercrime

by bryley 17. August 2011 00:10

 Two webinars occurred last month. Both were hosted by a Bryley business partner and both concerned data protection in this prolific era of technology and cybercrime. One was hosted by Websense - an industry leader in web, email and data protection – and the other by Kaseya – an industry leader in endpoint, malware and virus security. Both webinars came to the same conclusion: businesses the world over are experiencing the exponential growth in cybercrime, especially smaller businesses due to their lack of advanced security. Last month The Wall Street Journal cited that 761 cyber attacks had been reported in 2010 and of that number 482 were at companies that had less than 100 employees. What businesses need, especially smaller businesses, is a more advanced form of network protection that will ensure the security of mission-critical endpoints and data.

The latest threats

Advanced Persistent Threats or APTs are growing at an alarming rate, in the form of phishing scams, viruses, drive-bys and malware. Just this past July, FBI agents arrested 16 people involved with a recent Pay Pal attack, a strand of Zeus, the bank account hijacking Trojan, was discovered on Android Smartphones and a Charlie Sheen death hoax was spreading malware through Facebook.    

According to Websense, the most popular form of attack at the moment is malware on websites. Regarding the latter, Websense Security Labs identified a 111.4% increase in the number of malicious websites from 2009 to 2010.  Even worse, most of these malicious sites (79.9%) were found to be legitimate sites that had become infected: according to Symantec, the top 100 websites in the world have been infected. So even when you believe yourself to be exercising caution when working online you might still be vulnerable to attack. Not to mention the fact that sites tend to fluctuate between states of cleanliness and infection: in other words they can be cleaned up but in two days time be infected again. This makes perfect sense when you stop and think about it. Cybercriminals are like fishermen, going where all the fish are: these are the most popular sites in the world, and even after they are cleaned up they will always be targeted again.  

How cybercriminals are getting in

Cybercriminals are attacking businesses for financial gain and they are using off-the-shelf methods to hack into networks, slow down systems, hijack usernames and passwords and steal valuable data.

According to Websense they are getting into your network in the following ways:

1.      Social networking – Many cybercriminals are using social networking sites such as Facebook to infect endpoints. Typically the scam invites you to view something by following a link on Facebook and that link takes you instead to a site infected with malware (ex: Charlie Sheen death hoax). Social networking sites are also frequently the targets of phishing scams.

2.      SQL injections – Cybercriminals use SQL injections to compromise business websites, thus allowing them to steal any client information held within the site’s databases

3.      Drive-by downloads - Cybercriminals utilize the drive-by download method of implementing malware onto endpoints as the users are completely unaware that the download is occurring.    

4.      0-day vulnerabilities – Cybercriminals often search for vulnerabilities in software before the developer has time to identify and rectify them with a security service pack. In other words, cybercriminals target new software hoping that they can detect as yet undetected vulnerabilities.   

5.      Windows of exposure – Cybercriminals will take advantage of windows of exposure when security pack updates are not yet available to exploit the known vulnerabilities that have not yet been rectified.  

Kaseya cited a few more points of entry in their webinar:  

1.      Email - According to Gartner Research email attacks went up 600% in 2009 alone. Cybercriminals use email to download malware, viruses, Trojans and worms onto endpoints usually through infected attachments. They also use email to run phishing scams often in the guise of correspondence from a bank with a counterfeit link to an account login page.  

2.      Scareware – This is another popular method of attack for cybercriminals looking to infect endpoints with malware. It looks like the following: a popup alerts users to the fact that their computers are running a virus scan and then asks them to download the latest version of their security software: only when they do this they are in fact downloading the virus. Sometimes the fake scan will even ask for credit card information as a means to pay for the removal of the fake virus.

3.      Application Vulnerabilities – Adobe Reader, Microsoft Word, Microsoft Excel and Microsoft PowerPoint are all common targets of attacks.  

The damage

No matter how they get in, cybercriminals are looking to enter your network and infect your endpoints: malware on your desktop, your laptop or your smartphone is their goal. This malware will then be used to steal valuable data such as usernames and passwords: anything that will allow access to personal and /or financial information such as bank accounts and social security numbers. 

 According to Kaseya, cybercriminals have stolen at least 100 million dollars from SMBs across America using these new forms of attack. These security breaches do not just result in stolen data and finances, they also lead to system slowdowns, system crashes, downtime, lost client information, broken compliance with privacy statutes, possible lawsuits and tarnished reputations.

How to protect yourself

As endpoints are the new targets of cybercriminals so too are endpoints the new border of defense. In order to protect your network you must devise a defense strategy that prioritizes the security of desktops, laptops and smartphones, tweak your security configurations and deploy advanced endpoint protection software.  

Creating a defense strategy

Protecting your network and its vulnerable endpoints begins with a robust strategy for defense. Here are a few ideas to get you started on your own strategy.   

1.       Educate yourself – Learn everything you can about modern cybercrime and protection

2.      Identify target data – Pinpoint information cybercriminals would want and secure it with enhanced access policies, passwords and encryption   

3.      Security software – Research and deploy the right security software for your business

4.      Learn and evolve – Learn from the past and constantly evolve your defense strategy   

Employing these top configuration tips from Websense

Websense offered the following configuration tips in their recent webinar to assist you in beefing up network security.

1.      Deploy proxies

2.      Inspect SSL

3.      Protect yourself everywhere: from endpoints to the cloud

4.      Lockdown outbound protocols

5.      Employ multi-layer inspections on email

6.      Monitor inbound and outbound traffic

7.      Log as much as possible with search tools

8.      Pen testing on SQL and Web servers

9.      Train on mitigation not prevention and perform continuous privileged user training

10.  Create and get disaster buy-in

11.  Patch

Deploying advanced protection software

You need security software that will defend your endpoints from all of the modern threats. And since those threats tend to be lurking on legitimate websites, you need software that is content aware, not just reputation aware, that reviews all of the inbound and outbound traffic of websites in real-time for malicious code. Luckily both Websense and Kaseya offer solutions that assist with everything endpoint: from viruses and malware to data loss prevention. Some of these solutions are mentioned below, complete with bulleted lists of their highlights.

1.      Websense Advanced Classification Engine (ACE)

 

·         Precise ID

·         Anti-spam

·         Reputation

·         Real-time content classification

·         URL classification

·         Antivirus

·         Real-time security classification

 

2.      Websense Data Loss Prevention (DLP)

 

·         Block HTTP Post to uncategorized destinations (WBSN destination awareness)

·         Create Content Classifiers and Policy

·         Fingerprints confidential documents

·         Monitors incidents

·         Expands coverage to additional enforcement channels

·         Set thresholds on suspicious number of transactions over a specified time

 

3.      Kaseya Antivirus (KAV)

 

·         Fastest response time to new threats (less than 2 hours from initial time of detection)

·         Powered by Kaspersky Labs antivirus engine

·         Real-time status updates and alerts

·          Easy-to-use administrator console

·         Offers your choice of either automatic or manual scanning scheduling

·         Offers complete integration with other Kaseya products

 

4.      Kaseya Antimalware (KAM)

 

·         Detects, destroys and prevents malware specifically

·         Real-time status updates and alerts

·         Powered by Malwarebytes

·         Easy-to-use administrator console

·         Automated scanning

·         Offers complete integration with other Kaseya products

 

5.      Kaseya Endpoint Security (KES)

 

·         A powerful add-on to KAV or KAM, KES again offers complete integration

·         Protection from viruses, worms and Trojans

·         Performs generic as well as known virus detection

·         Offers heuristic analysis  

·         User-defined reports

·         Easy-to-use administrator console

·         Real-time status updates and alerts and email notifications

·         On-access and on-demand scanning

·         Email scanner

·         Anti-spyware

·         Automated deployment

Helpful Hint: When further researching solution options, be sure to ask yourself the following questions.

1.      What are the overall detection rates for this product?

2.      Does this product provide holistic protection?

3.      Does this product affect system performance?

4.      Is this product easy to manage?

5.      What kind of support comes with this product?

6.      Does this product’s pricing fit into my budget?

How Bryley can help 

Bryley is business partners with both Websense and Kaseya and can help you locate the solutions that will best fit the needs of your business. Call us today at 978.562.6077 or email Sales@Bryley.com for more information.  

References

Websense www.websense.com

Kaseya www.kaseya.com

 Hackers shift attacks to small firms by Geoffrey A. Fowler for the The Wall Street Journal http://online.wsj.com/article_email/SB10001424052702304567604576454173706460768-lMyQjAxMTAxMDIwMjEyNDIyWj.html

10 steps to securing your network: part two

by bryley 15. June 2011 06:13

Network security should always be a top priority. Experienced downtime decreases productivity and profitability and tarnishes reputation and a total crash could result in major data loss or even business closure. In addition to the concerns of business functionality, certain federal and state regulations require compliance with specified network and data security standards for the purposes of privacy protection and e-Discovery.

Last month you learned the first five steps every enterprise should take in order to properly secure their valuable business network from all internal and external threats. To recap, these steps were as follows:    

1.      Create a network security policy

2.      Deploy a firewall

3.      Employ web content filtering

4.      Ensure endpoint security  

5.      Perform a multi-point security hardening procedure

To refresh your memory on the first five steps, please visit the Bryley Blog at http://www.bryley.com/blog/post/10-steps-to-securing-your-network-part-one.aspx.  

And so, without further ado, we present steps 6-10.  

Step 6: Email protection

Never forget that email is another potential entrance for hackers into your network. Spam and email attachments could be carrying malicious code designed to hack into your network, take over your endpoints, crash your system and steal your data.  In order to prevent hackers and malware from entering your system through email, you will need to implement email protection software.  

You are going to want to invest in an email defense system that includes spam filtering, virus and worm filtering, email attack protection, content and attachment filtering and built-in and continuous upgrades. For additional email security there are also automated, web-based message continuity services (for network outage damage control), message archiving solutions (for e-Discovery compliance), outbound filtering products (for reputation management) and email encryption devices (for personal information privacy regulations).   

Step 6 in a sentence

Use email filters for protection against spam, viruses, malware attachments and hackers.  

Step 7: Malware and intrusion detection and removal products

Despite all of your precautions – policy and access list creation, firewall deployment, endpoint security management – malware and intruders may still slip into your network. Fortunately companies such as SonicWALL and Cisco offer intrusion detection, removal and prevention software that will root out any network intrusions as well as add a second layer of intrusion protection over your firewall. Kaseya offers a comparative product for malware detection and removal.   

Step 7 in a sentence

Deploy malware and intrusion detection and removal solutions to rectify security breaches.

Step 8: Laptop encryption and secure VPN connections  

Your mobile employees depend on their business laptops to conduct their work on the go.  As a result you need to be certain that these laptops are encrypted and linked to your network through secure VPN connections as laptops are frequently targeted by cybercriminals due to their vulnerability.  

Step 8 in a sentence

Encrypt all work laptops and link them to your network through secure VPN connections.

Step 9: Deploy a BUDR solution (that doesn’t rely on tapes)

In the event that your system should crash, what would happen to your mission-critical data? You must protect your valuable and irreplaceable data by deploying a backup and disaster recovery (BUDR) plan, preferably one that does not rely on backup tapes as they will only backup files and are subject to human error.

Bryley’s Backup/Disaster Recovery solution creates an image of your entire system state (a tape cannot do this)— operating system, user settings, business applications and data—which is then replicated offsite and stored in a fireproof safe in a secure facility. Backup occurs in real-time and is automated and encrypted for complete security. Recovery happens immediately upon request and hardware is included for necessary bare-metal restore (a tape cannot do this).     

 Step 9 in a sentence

Backup and duplicate your data (do not rely on tapes), storing the replication securely off-site.

Step 10: Find a trusted managed technology partner  

Now that you have initially secured your network from all internal and external threats, you need to locate an experienced managed service provider that can become your trusted business partner.

Network security is not a one-time fix. Hackers are constantly thinking up new ways to enter your system and creating more and more advanced forms of malware that are harder to detect both due to their novelty and sophistication.  You need to adopt ongoing measures to ensure that network security endures in your organization. But network monitoring is both time-consuming and costly.  That is why you need a managed technology partner. Since their services are all proactive – catching threats before they can become problems – they are more cost-effective and reliable than traditional IT service providers and onsite teams.  

Step 10 in a sentence

Partner with a trusted managed service provider for continuous network monitoring.

Conclusion

By following these 10 steps you can guarantee total network security as well as optimize the speed, reliability and potential of your system.  

Want to learn more?

Contact Bryley today for a free business-technology consultation on how to properly secure your business network.

Call 978.562.6077 or email Gavin Livingstone at GLivingstone@Bryley.com to learn more.

 

Safe Social Networking

by bryley 15. June 2011 00:50

We are all familiar with how social media has been inducted into the business world as a relevant and valuable tool. With over 400 million users on Facebook alone, it is no wonder that businesses are now using social media sites to launch their content, promote their products and services and interact with clients and prospects. But businesses are not the only parties aware of the ever increasing popularity of social media sites.  Cybercriminals have also taken notice, and as more and more potential targets are on these sites so too are more and more site pages infected with malware and targeted in phishing schemes.

This presents enterprises with a real challenge.  On the one hand, social media is a must: for cutting-edge marketing initiatives, modern communicative prowess and enhanced networking reach. On the other hand, social media is a potential security risk: exposing your network to hacks, malicious code and data theft. The bottom line is that you will need to engage in social media to optimize your success in the ever changing business climate but you will need to proceed with caution.

A recent article by Websense, an information security leader specializing in web threat protection, discussed three measures that are absolutely essential to securing your business from the dangers of social media. These were 1) acceptable use policy control, 2) malware protection and 3) data loss prevention. While we completely agreed with the list, we have expanded on these three steps as well as added two of our own that we believe are just as important, creating a checklist of the top five security tips for safe social networking.   

Five tips for safe social networking

1.      Enhanced network policy

 

Your business should already have network policy in place: information access lists and limitations based on employee functionality, mandated password strength and changes, URL restrictions, et cetera.  But now that your employees need to use sites such as Facebook and Twitter for marketing and communication, you will need to update your network policy to include acceptable social media use. (According to Websense, 31% of Facebook applications contain mature content and 25% are games).

 

Your updated network policy should allow employees to access social networking URLs while simultaneously banning all gambling, pornography and gaming materials located on social media sites and limit personal use of such sites to lunch hours and breaks.  

 

2.      Web content blocking

 

 

 

Taking tip 1 a step further, your business should incorporate web content blocking software into your security strategy. (Websense refers to web content blocking in their article as real-time content classification, a technology that can decipher upon access whether or not content on a site should be blocked).

 

Far more sophisticated than traditional URL blockers, real-time content classification allows employees to access sites such as Facebook while preventing them from accessing inappropriate content and applications.  According to Websense, real-time content classification must be done at the Internet gateway for both HTTP and HTTPS protocols. This is due to the fact that many of the social media sites support SSL.  

 

3.      Updated malware protection

 

 

 

Just as businesses are utilizing social media in full force, so too are cybercriminals.  This means an increase in malware attacks on these sites designed to infiltrate your network, corrupt your workstations and steal your valuable data, and as social media sites and the latest forms of malware are both script-based and dynamic, businesses will now need updated, real-time malware protection with code scanning to ensure online security.

 

Traditional reputation-based malware scanning solutions are now all but obsolete since social media sites are reputable and according to Websense 80% of websites infected with malware in 2010 were legitimate sites that had been compromised. You will need updated protection that is familiar with new threats, has continuous updates, and modernized scanning that can scan the code of each page in real-time at the Internet gateway for both HTTP and HTTPS protocols for any malicious code, regardless of the site’s reputability.

 

4.      Employee training

 

 

 

Employee training on appropriate social media use is very important. Although this tip might seem redundant – after new policy creation and content blocking – it is still an important step in protecting your network and data from social media threats.  After all, it is important to cover all possible ground when delineating security measures.

 

Employee training should cover everything: from how to use social media effectively - for marketing, advertising, interactivity and networking -, to how to use social media responsibly - avoiding all potential security risks -, to recognizing phishing scams, to what to do in the instance of a security breach.  (Phishing scams generally prompt you to insert your personal information for one claimed reason or another).  Employees should be able to recognize the difference between a legitimate social media site request and an unexpected, suspicious one. All suspicious site behavior and requests should be reported both to the site’s administrators as well as to your IT team.

 

5.      Data theft prevention  

 

 

According to Websense, 39% of social media attacks include code created for the purposes of data theft.  And since social media’s primary purpose is information sharing, it is all the easier for such malware to spread through social networking, increasing the likelihood of data theft on such sites. According to Websense, data loss is four times more likely to occur in social media than in email.  

To combat these odds, you will need a superior data loss prevention strategy, one with accurate data detection and contextually aware controls for DLP. Using traditional data protection solutions that utilize basic keywords and regular expression-based detection can often lead to false positives and negatives and may lack the necessary workflow and reporting to effectively manage incidents. You need controls that can categorize all user, data and context combinations as either appropriate or hazardous.

Conclusion

While social media is a very beneficial business tool, it is now more important than ever to secure yourself from all of the new threats lurking about on Facebook, Twitter and LinkedIn.  By adhering to these 5 measures you can ensure the security of your business while utilizing all of the great benefits of social media.  

References

Facebook. www.facebook.com  

Three must-have’s to securing the social Web: how to embrace the social Web without putting your company at risk. Websense. www.websense.com/SocialWeb    

 

10 steps to securing your network: part one

by bryley 19. May 2011 01:47

    

Your network is a pivotal business tool: if it were to crash or experience downtime your productivity would suffer. If problems persist it could even result in loss of data, profit and client reputation. In addition to these concerns there are federal and state regulations that require you to secure and retain certain information within your network for the purposes of client protection and e-Discovery. If your network is not properly secured, you run the risk of compromising your system, losing your valuable business data and breaking compliance standards which could result in a lawsuit or substantial fine. It is therefore of the upmost importance to protect your network from all of the external and internal forces that threaten to slow down, disrupt or harm your system. For this reason, Bryley Systems has compiled a list of the 10 essential steps one must follow in order to secure their network from the likes of hackers, malware, spam and data loss. Here are the first five to get you started.    

Step 1: Create a network security policy

An effective network security policy is the first step in ensuring network security. A network security policy encompasses all network and web access rules including user authentication, optimized password strength, regulated password changes and an acceptable use list. An acceptable use list prevents employees from accessing websites most commonly infected with malware such as pornography, gambling, audio and video sharing and web email sites. An acceptable use list also prevents employees from accessing the confidential data within your network that they are not privy to.

Step 1 in a sentence

Create a network security policy that will limit network and web access.  

Step 2: Deploy a firewall

Your second step in network security is the deployment of a firewall. Your network policy has already established user authentication as a precaution against network intrusion and a firewall takes this security measure one step further, preventing all unauthorized users from accessing your network.  

Step 2 in a sentence

Block all potentially harmful users from your network with a firewall.  

Step 3: Employ web content filtering

Denying web access based on content analysis is the third step you should take towards securing your network. By filtering out compromised web content, you are proactively protecting your network from malware as it more often than not is embedded within inappropriate sites that experience high volumes of traffic such as gambling or audio sharing sites. However it is important to know that content filtering will not protect your network from a virus attack or hacks. You will require other tools to combat viruses and hackers.     

Step 3 in a sentence

Block all compromised web content from entering your network.

Step 4: Ensure endpoint security

The fourth step you should take in securing your network is to ensure that your endpoints are completely secure.  Protecting your desktops properly will require antivirus software, antispyware and email scanning.  

Step 4 in a sentence

Detect and remove all malware from your network with an endpoint security system.

Step 5: Perform a multi-point security hardening procedure

The fifth step towards securing your network is performing a periodic multi-point security hardening procedure. This procedure reviews all of your network policies and configurations, performing a complete security audit so as to detect any problems, threats, deficiencies or necessary changes. This audit should include workstation, server and network setting verifications and conclude with the implementation of improved security settings.     

Step 5 in a sentence

Harden network security by reviewing and updating policies and configurations.

 

Want to learn more?

Contact Bryley Systems today for a free business technology consultation. Call 978.562.6077 or email Sales@Bryley.com.  And be sure to check out part two of “10 steps to securing your network” that will be made available in the June 2011 issue of Bryley Tips and Information.

References

Bryley Systems Inc. www.Bryley.com/Solutions.html

 

 

 

 

Powered by BlogEngine.NET 1.6.1.0

Tag cloud

Calendar

<<  May 2012  >>
MoTuWeThFrSaSu
30123456
78910111213
14151617181920
21222324252627
28293031123
45678910

View posts in large calendar