Network Security
Last response: in Networking
I don't have a background in networking and have a few questions. I am looking to start doing computer services as a side job, which I hope to expand into a good secondary income. I want to be able to service small businesses in addition to households. I will obviously be educating myself more over time on network topics, but for now:
I have a buddy who is a potential client and who is concerned primarily over protecting himself from illicit access to his files and/or theft of files. He works out of his house as a consultant and is also writing a book. Even he admits that he doubts anyone would be interested in an unwritten book, but apparently he services a number of large corporations and he has a concern over, essentially, corporate espionage. I'd laugh a little, but I have to take him seriously.
And so I have to ask you guys: what can / should be done to make a home network secure?
The extent of my experience in this regard has been use of cheap routers and firewalls with some open-source firmware or programs. That has always served me well for my home use, and also a few small offices I have run in the past. But I have never been concerned about people trying to actively hack me, so this brings a new perspective to the game.
The budget he has to spend on this can range up to high four digits or low five. I told him I'd research it and hope that most of what he needs can be accomplished with software / firmware, but that since the level of security he is thinking about (as airtight as possible - though I would presume nothing is impermeable) may involve some investment in hardware.
I also told him I'd share this post with him.![:hello:]( ":hello:")
Thanks for any information or suggestions you can offer.
If you also know some books you would suggest over others where I could begin to educate myself on networking, I'd appreciate that as well.![:whistle:]( ":whistle:")
I have a buddy who is a potential client and who is concerned primarily over protecting himself from illicit access to his files and/or theft of files. He works out of his house as a consultant and is also writing a book. Even he admits that he doubts anyone would be interested in an unwritten book, but apparently he services a number of large corporations and he has a concern over, essentially, corporate espionage. I'd laugh a little, but I have to take him seriously.
And so I have to ask you guys: what can / should be done to make a home network secure?
The extent of my experience in this regard has been use of cheap routers and firewalls with some open-source firmware or programs. That has always served me well for my home use, and also a few small offices I have run in the past. But I have never been concerned about people trying to actively hack me, so this brings a new perspective to the game.
The budget he has to spend on this can range up to high four digits or low five. I told him I'd research it and hope that most of what he needs can be accomplished with software / firmware, but that since the level of security he is thinking about (as airtight as possible - though I would presume nothing is impermeable) may involve some investment in hardware.
I also told him I'd share this post with him.
Thanks for any information or suggestions you can offer.
If you also know some books you would suggest over others where I could begin to educate myself on networking, I'd appreciate that as well.
More about : network security
Well... security is a pretty complex and deep subject. The <best> security is to simply not be connected to any network. If you're really as paranoid as it sounds like I'd recommend separate machines for surfing and writing books and have them separated on different network segments with fw rules defining what if any access is allowed between the two and defining what is allowed out (if anything).
With that being said, assuming only a single machine needs to be able to talk online and surf.... you probably want to take a multi tiered approach similar to most corporations which means you'll want an Intrusion Prevention System, an Antivirus setup as well as content filtering to help limit access to sites that may include malware. You can get all of this functionality into a single box with appliances know as UTM (Unified Threat Management) boxes. I like the IBM Proventia devices from a IPS standpoint, and probably worth looking at the Proventia MX series. I'd likely combine one of those in transparent mode with a Cisco ASA (in routing mode, and specifically the 5505 for your use) for pure firewalling. This gives you multiple vendors which helps to diversify your security posture and IMHO gives you best of breed firewall and IPS. Overall you could get extremely good security appliances with more than enough bandwidth / features for less than $2000. Other vendors worth reviewing are CheckPoint, Juniper, SonicWall, and Fortinet. Of course you'd then have to pay for SmartNet and other maintenance fees for these appliances, but those costs shouldn't be more than a few hundred per year. Keep in mind that the start of good security comes from the users themselves meaning your client. They need to be mindful of what the computer is used for / what emails are opened, etc. If your client needs to "freely surf" I'd insist on a separate machine on a separate network behind your firewall.
Regarding books, you I'd recommend any good CCNA book to get you started understanding networking and the general principles involved. If you really don't understand TCP vs UDP, subnetting, and general firewalling / routing concepts (don't have to be a BGP or RIP expert here... general understanding is good enough) then I'd say you may want to figure those out prior to offering a service.
Disclaimer: I do work for one of the above mentioned companies however I have nothing to gain (I'm not a sales guy, nor do I hold stock), and all opinions are based purely on my personal experience with many vendors products.
With that being said, assuming only a single machine needs to be able to talk online and surf.... you probably want to take a multi tiered approach similar to most corporations which means you'll want an Intrusion Prevention System, an Antivirus setup as well as content filtering to help limit access to sites that may include malware. You can get all of this functionality into a single box with appliances know as UTM (Unified Threat Management) boxes. I like the IBM Proventia devices from a IPS standpoint, and probably worth looking at the Proventia MX series. I'd likely combine one of those in transparent mode with a Cisco ASA (in routing mode, and specifically the 5505 for your use) for pure firewalling. This gives you multiple vendors which helps to diversify your security posture and IMHO gives you best of breed firewall and IPS. Overall you could get extremely good security appliances with more than enough bandwidth / features for less than $2000. Other vendors worth reviewing are CheckPoint, Juniper, SonicWall, and Fortinet. Of course you'd then have to pay for SmartNet and other maintenance fees for these appliances, but those costs shouldn't be more than a few hundred per year. Keep in mind that the start of good security comes from the users themselves meaning your client. They need to be mindful of what the computer is used for / what emails are opened, etc. If your client needs to "freely surf" I'd insist on a separate machine on a separate network behind your firewall.
Regarding books, you I'd recommend any good CCNA book to get you started understanding networking and the general principles involved. If you really don't understand TCP vs UDP, subnetting, and general firewalling / routing concepts (don't have to be a BGP or RIP expert here... general understanding is good enough) then I'd say you may want to figure those out prior to offering a service.
Disclaimer: I do work for one of the above mentioned companies however I have nothing to gain (I'm not a sales guy, nor do I hold stock), and all opinions are based purely on my personal experience with many vendors products.
I think it would be a bit overkill to buy some of these devices. Honestly, the biggest threat is him opening a connection and bypassing all that equipment. In a large corporation that equipment is ideal since you could have hundreds or thousands of computers moving across it. For a home user this overkill.
You can buy true firewall devices on NewEgg or TigerDirect for a couple hundred dollars. You can create your rules, access control lists, etc. This might be a bit of a headache because you'll need to figure out what he needs access to and what he doesn't.
I would recommend having your hardware firewall (research them to find out about brands and features) and a solid antivirus application. Windows 7 you could use Essentials which is great and free. At present, it out ranks any other antivirus application for Windows 7.
Another trick you may want to consider is running a virtual computer on his computer for web surfing. If he's researching something, etc, he can use the virtual system to access any website, even suspicious ones, without worrying about any access to his real computer. Though, downloading files and the like will not work (at least easily) but that's part of the security aspect of it.
Pick up a CCNA book. Expect to take around 6 months to get up to speed on it.
You can buy true firewall devices on NewEgg or TigerDirect for a couple hundred dollars. You can create your rules, access control lists, etc. This might be a bit of a headache because you'll need to figure out what he needs access to and what he doesn't.
I would recommend having your hardware firewall (research them to find out about brands and features) and a solid antivirus application. Windows 7 you could use Essentials which is great and free. At present, it out ranks any other antivirus application for Windows 7.
Another trick you may want to consider is running a virtual computer on his computer for web surfing. If he's researching something, etc, he can use the virtual system to access any website, even suspicious ones, without worrying about any access to his real computer. Though, downloading files and the like will not work (at least easily) but that's part of the security aspect of it.
Pick up a CCNA book. Expect to take around 6 months to get up to speed on it.
Agreed with your points and that it's absolutely an overkill. He said the customer was paranoid, and ready to spend like $10,000 for network gear to take every precaution. Otherwise I'd never have mentioned it.
I see his biggest threats being himself browsing / downloading malicious content unknowingly. It's not <just> porn and warez sites these days that gets you a copy of malware installed. Your virtual machine suggestion is a good one, and I'd highly recommend that as well.
I see his biggest threats being himself browsing / downloading malicious content unknowingly. It's not <just> porn and warez sites these days that gets you a copy of malware installed. Your virtual machine suggestion is a good one, and I'd highly recommend that as well.
Related ressources:
- ForumNetwork Security via Hardware Firewall
- ForumLinksys network security
- ForumNetwork security key wont it work for new windows 8 laptop
- ForumHow to hack wifi network security key
- ForumHow do i find a network security key on my computer
- ForumFinding network security key
- ForumI pad updated asking now network name and security what do I do
- ForumSsid wifi network security code
- ForumHow do i retrieve my d-link network security key
- ForumNetwork connections for microsoft security essentions
- ForumNetwork Security .
- ForumFind network security key after router already set up
- ForumHelp with DHCP-Static IP for Network Security
- ForumNetwork security key
- ForumNetwork security key
- ForumHow do i find a network security key on my computer
- ForumWhat is a wireless network security key?
- ForumHow do i find my network security key
- ForumWhere do i find my network security key on my computor
- ForumNetwork security recent research
- More resources
Read discussions in other Networking categories
!
