Services

Network Security

Network security is a topic that receives a lot of attention these days. What is network security? To many people, security is putting up a firewall between their network and the Internet. A firewall is an important part of network security, but network security is more than just a firewall.

In addition to a properly configured firewall (did you know most security breaches are due to improperly configured firewalls?), your network also needs numerous other items in order to maintain security. Just consider some of the following items:

Anti-virus software: Your e-mail/groupware system, servers, and desktops all need virus protection and that protection needs to be updated regularly. Remember the Melissa, LoveBug, and SoBig.F viruses?
Patches and hotfixes: Microsoft releases new security patches almost daily, it seems. Some of these are minor, but some are critical. Remember SQL Slammer, Code Red, Nimda, or Blaster?
Proper configuration: Both servers and desktops need to be configured for secure operations. Unfortunately, the default settings are often the least secure. This means password restrictions, password histories, and regular password changes, among other things.
Network equipment: Your network equipment needs to be configured for security as well. Routers, firewalls, and managed switches all need to be configured against unauthorized access or configuration.
Physical security: Electronic security is no good unless there is some level of physical security as well. Are your server consoles unlocked? Do you know who has access to your core network switch?
Security policy: Finally, the human factor must be taken into consideration. Is there a security policy that defines acceptable and unacceptable computer usage? Does this policy provide password requirements? Like the electronic issues, policy issues play an important role in network security.

Mercurion Systems can help with all these aspects of security. We can configure your firewall to ensure that only appropriate traffic passes in and out of your network. (That's right--what goes out of your network is just as important as what comes in. Do you want to spread the latest Internet worm to other organizations, or to your business partners?)

We can help you install anti-virus software, configure it correctly, and make sure that it stays up-to-date with the latest definitions. This includes anti-virus protection on the desktops, file servers, and e-mail gateways, and configuring firewalls to assist in anti-virus efforts as well.

We can help you make sure all your systems are patched through Automatic Updates and Software Update Services (see this document for more information). Both of these technologies are free technologies, available from Microsoft, that can help with the patch management process.

We can use tools like HFNetChk, Microsoft Baseline Security Advisor, IIS Lockdown Wizard, URLScan, and other tools to make sure your servers are configured for secure operation, and then compare those configurations against published best practices from Microsoft and other vendors.

Finally, we can use tools like port scanners and vulnerability assessment tools to ferret out any potential security holes and close them before they become a problem. We can also make sure you know how to use some of these same tools, so that you can know what is happening on your network after we're done.

Do you have questions about the security of your network? Contact us so that we can help you secure your network today.