5 Tips for Network Security in 2017: Part 3
[img src=”/wp-content/uploads/sites/1214/2017/04/IRISSolutions_NetworkSecurity2017-blogpost.jpg” alt=”Network Security” class”aligncenter”]
If you skipped Part 2 → go back.
In our latest I HATE IT eblast, we asked the question “What is your internet usage policy for your business?”
Once you decide what you want to allow and what you would like to block, work with your IT Security Team to set up categories.
With our security solution, we have the following options.
- Block IP addresses from foreign countries that you do not recognize as a necessity.
- Stop applications, as well as websites. Someone who has a laptop can go home and download a BitTorrent client then come to work and get out to the internet. BitTorrent applications should never be allowed on a business network. Once installed, they don’t typically use a standard website and still need to be blocked.
- Use an ad blocker to stop the pop up ads, which often allow users to get thrown off track.
- Determine if you want an allowed internet usage time or bandwidth allocation limit. Once you are out, you are out.
- Use traffic shaping to limit the amount of bandwidth someone can use to watch Netflix at lunch.
- Setup website blocks for both secure sites with HTTPS and HTTP. Prevent these by category and get rid of the rest.
- Segment your network. Don’t allow a user with an iPhone to be on the same network as your data servers.
The firewall you use is very important to the protection of your network. A properly tuned firewall with all of these features goes a long way to stop the bad guys.