Wednesday, 28 December 2011
Sunday, 5 June 2011
Did You Leave the Back Door to Your Business Open? Remote Access and Network Security
In these days of frequent business travel, working from home, and outsourcing work to independent contractors, you probably have some sort of remote access to your business networks. If your network is not properly secured and you do not implement appropriate remote access controls, you could discover that you have left the back door to your business open and allowed the wrong people to walk in.
Remote network access can be a wonderful thing. No matter where you are, you can log onto your network and access all the information stored there. It gives a great sense of freedom to know that by installing some remote access software and having access to the internet, you can manage your business at any time from any place. Remote network access also gives you the freedom to provide telecommuters and independent contractors access to your business information, enabling them to work for you from a remote location. Doing this is probably both efficient and economical for your business.
Stop for a moment, and think about the number of people who have remote access to your network:
" Employees using laptops and other devices when traveling
" Employees using home computers
" People in branch offices or retail locations
" Sales representatives
" Telecommuting employees
" Independent contractors to whom you outsource work
" Suppliers or vendors
" Business partners
" Customers or clients
To be sure, you almost certainly grant some groups of people only limited access to your network or access to only certain data. But, let's face it, you could be opening hundreds or even thousands of doors to your business.
Now consider that many of your most valuable company assets are probably stored on your network:
" Product information
" Legal and financial information
" Competitive analysis
" Customer profiles and sales history
" Research and development data
" Employee data
Inadequate remote access security can leave your business and the personal information of hundreds of individuals and companies at risk.
Every person who has remote access to your network has the ability to open the door to your business using some device. Whether that device is a home computer accessing your network through a phone line, cable or DSL, the device can be used to open a door. If you don't know how secure the device and the connection are, you are essentially leaving that door to your business unlocked. Once you leave a door unlocked, you no longer have control of who walks in or of what they can see or take without adequate security.
Consider the possibilities:
" An employee's child downloads a game to her home computer without realizing spyware has also been installed. When your employee downloads a file on your new product to that same home computer, your competitive advantage could be gone.
" You, the chief executive of your company, often work from home early in the morning. To save time, you tell your computer to "remember" your log-on and password. Your house is robbed and your home computer is stolen. The thief has full access to both your personal information and your business.
" The head of R&D for your company regularly takes a company laptop home in order to work on weekends. Without his knowledge, his son has downloaded a game, complete with a worm. When the head of R&D logs on to work, he introduces the worm and all those critical research files disappear.
How do you protect your business? You protect your business by closing and locking all of the doors. You establish policies and procedures about use of company equipment and about remote access to files. You build security for your network, and you build additional security for sensitive data. You restrict access by employees to certain websites from company equipment, and you prohibit placement of cookies and spyware on your system or your equipment. Then you layer the protection provided by your security system. Finally, you engage IT people to constantly monitor and update the security of your network.
The bottom line is this: Remote Access can open a back door to your network, putting your business at risk. You can, however, give people remote access to business data they need, and, at the same time, protect your business and your business data.
Copyright (c) 2007 Thomas Burns
Thomas Burns, founder and CEO of Intelligent Networks Services (INS) has been an industry expert in computer network and technology for over 20 years. Under his careful supervision, INS has become a leading, full service IT support company servicing small to mid-sized businesses in Silicon Valley. INS's goal is to save their client's money by focusing on preventative maintenance and intelligent network designs. For more information go to: [http://www.intelligentns.com/subscribe] and receive your complimentary network evaluation.
Saturday, 4 June 2011
SSL Remote Access VPNs (Network Security)
SSL Remote Access VPNs
An introduction to designing and configuring SSL virtual private networks
Jazib Frahim, CCIE® No. 5459
Qiang Huang, CCIE No. 4937
Cisco® SSL VPN solutions (formerly known as Cisco WebVPN solutions) give you a flexible and secure way to extend networking resources to virtually any remote user with access to the Internet and a web browser. Remote access based on SSL VPN delivers secure access to network resources by establishing an encrypted tunnel across the Internet using a broadband (cable or DSL) or ISP dialup connection.
SSL Remote Access VPNs provides you with a basic working knowledge of SSL virtual private networks on Cisco SSL VPN-capable devices. Design guidance is provided to assist you in implementing SSL VPN in existing network infrastructures. This includes examining existing hardware and software to determine whether they are SSL VPN capable, providing design recommendations, and guiding you on setting up the Cisco SSL VPN devices. Common deployment scenarios are covered to assist you in deploying an SSL VPN in your network.
SSL Remote Access VPNs gives you everything you need to know to understand, design, install, configure, and troubleshoot all the components that make up an effective, secure SSL VPN solution.
Jazib Frahim, CCIE® No. 5459, is currently working as a technical leader in the Worldwide Security Services Practice of the Cisco Advanced Services for Network Security. He is responsible for guiding customers in the design and implementation of their networks, with a focus on network security. He holds two CCIEs, one in routing and switching and the other in security.
Qiang Huang, CCIE No. 4937, is a product manager in the Cisco Campus Switch System Technology Group, focusing on driving the security and intelligent services roadmap for market-leading modular Ethernet switching platforms. During his time at Cisco, Qiang has played an important role in a number of technology groups, including the Cisco TAC security and VPN team, where he was responsible for trouble-shooting complicated customer deployments in security and VPN solutions. Qiang has extensive knowledge of security and VPN technologies and experience in real-life customer deployments. Qiang holds CCIE certifications in routing and switching, security, and
ISP Dial.
- Understand remote access VPN technologies, such as Point-to-Point Tunneling Protocol (PPTP), Internet Protocol Security (IPsec), Layer 2 Forwarding (L2F), Layer 2 Tunneling (L2TP) over IPsec, and SSL VPN
- Learn about the building blocks of SSL VPN, including cryptographic algorithms and SSL and Transport Layer Security (TLS)
- Evaluate common design best practices for planning and designing an SSL VPN solution
- Gain insight into SSL VPN functionality on Cisco Adaptive Security Appliance (ASA) and Cisco IOS® routers
- Install and configure SSL VPNs on Cisco ASA and Cisco IOS routers
- Manage your SSL VPN deployment using Cisco Security Manager
This security book is part of the Cisco Press® Networking Technology Series. Security titles from Cisco Press help networking professionals secure critical data and resources, prevent and mitigate network attacks, and build end-to-end self-defending networks.
Category: Networking: Security
Covers: SSL VPNs
Price: $55.00