Every 10 Gotcha Know Technology Business Manager If
In today's e-connected world, we rely on technology to do the job. But, in this space, which can not hurt. With one click a disgruntled employee can send your confidential business information, bank account number and password, or intellectual property to millions of Internet users. One more click in a large part of their business data could be deleted. The list goes on. Read on to the 10's Gotcha Technology; the misconceptions and errors that are most prone to large and small businesses get into trouble, and some simple ways to avoid them and navigate around the wreckage.
1. Physical access is full access!
Without special precautions, anyone with physical access the system can access data stored on that computer. Most computer accounts can be cracked in under 30 seconds when you have physical access to the system, or accounts may be omitted altogether. Use passwords hard to block travel notebook systems. Maintain servers and computers with sensitive data physically sure.
2. Making the Security people, computers do not!
The biggest security threat to your business is people, whether simple errors or malicious intent. Creating a formal information security policy and ensure that their staff were signs it. Do not allow personal accounts participation in any system or software package. Delete general accounts or customer accounts, and always changing default passwords.
Only leadership or IT staff should have access to the admin account or root. These should not be shared with the staff in general or used for everyday tasks, and passwords should be changed frequently to control access.
3. E-mail is public!
Email access typical through the Internet or email client, transmitting not only their e-mail messages to the public, but the password too. Use secure authentication (SSL) to prevent your email password being broadcast to the public.
Email messages are never private (even when using SSL), unless you specifically encrypt the content. Omziff is a free utility to encrypt documents - using Blowfish encryption: it need 400 years to end desktop computer with today's best protection against password of your typical document 'that cracks within 30 seconds. Always give the encryption password separately and in person.
If you receive confidential information or confidential information requests by email, please remember that the sender of that email messages are publicized through the Internet, and anyone on the Internet can easily read them.
If someone does not transmit sensitive information insecurely, must request that the sender pays for identifying protection theft or credit monitoring for all involved for a year. If it's a vendor, make sure that management knows what has happened, many states now require businesses or government entities to notify all affected customers when they have suffered a violation of security.
4. FTP is not secure!
If you need to share confidential information over the Internet, using a secure protocol for doing so. File Transfer Protocol (FTP) is a very common way to share files Internet. However, it is safe, even if it requires an account and password, the password is transmitted to the public and can be easily compromised. Alternatives are Secure File Transfer Protocol (SFTP) or a secure website (HTTPS).
5. Windows ® are open!
All platforms have security vulnerabilities, but Windows ® is usually most concerned with security issues, probably because it has the majority of users. Three types of threats computer security with Windows ® are malware, viruses and hackers. Investing in hardware or software that stop at three. Most security programs are good to stop for only one of three categories of threats. Once infected these threats usually can control your system to obtain confidential information and forwarded to the Internet, they can not harm or disturb the system.
6. VPN is your best friend!
Virtual Private Networks (VPN) that the mobile staff to securely access their network of Internet businesses. Any messages or access files over a VPN as secure as the network that the VPN is connected.
7. Passwords are Key!
Using secure web pages (HTTPS) is like talking into a telephone booth in front of screaming in a room full of people no one else on the network can hear their conversation. But that still does not guarantee you are who you say - to your account and password are the only way that most websites can know who you are. (Banks and other financial sites are inventing more ingenious and annoying forms to verify your identity while speak.) Anyone can access a secure website and try to crack into your account. Create passwords that are harder nuts to crack: at least 8 characters, with at least one each of numbers, uppercase and lowercase letters and symbols.
Using a trick password to create unique passwords for each account you have. Sounds impossible to remember? One trick is a process to create a password. If you remember the trick, you will not have to remember each password you have, and will have a unique password for each of your accounts.
For example, a password can be created with an exclamation point, followed by the first and last letters of the account name, plus the number of vowels in the account name, plus the initials of the user. Using this trick you can generate a unique password for any account that has: "LinkedIn" would be "! Liin3seh" and "Google" would be "! Gole3seh. "Having a backup trick (a slight modification to your existing trick) prepared in case one of your accounts require a password change.
Never share passwords with anyone else. If an exception occurs, change your password, and then give to someone you trust, then change it back after are completed.
8. Backups are critical historical!
The only way to recover from a failure user is backup. Historical backups are the key. If backups are simply a copy of the data that is overwritten each time - then, when you make a mistake, and you catch it tomorrow after it has been endorsed, the backups are now useless. The duplication of redundant hardware units and keeps systems available in the event of a hardware failure, but it is pretty useless against a "user error" that is quickly synchronized across systems.
Make sure your staff know where and how they should store their data so it is protected by backups. Mobile users must keep their data on the network (via VPN), so it is protected, or have additional backups in place.
9. Faxes and Messages are public voice!
Gone are the days of faxes and voice messages were safe. They are now grouped into attachments and flying through Internet to a cell phone or email inbox. It can be done safely, but it's rare these days, always ask when it comes to information confidential.
10. You can trust!
When you trust your data to an external system or provider, you are responsible for their staff and customers in case of error. Remember you get what you pay.
Hosted "Software as a Service (SAAS), systems can be very useful and accessible for small businesses, but beware! These vendors are not responsible if your data is stolen, lost or damaged - but it's true. Make sure you have backups and safety data if necessary. Hosting providers with many clients are "fat cats" targets for hackers serious, as all data is conveniently accumulated in one place, while those directed at an individual company may not be worth it.
Now you know ...
Why identity theft is so common! If your email password is the same as the stock market or password, bank account, will change both of them -- now!
There are simple solutions and low cost dealing with these issues for SMEs, many are simply a point of awareness and training. Now you are equipped (like it or not) with awareness and education to help keep yourself and your business afloat safely in our connected world.
About the Author
Sheila has 14 years experience in the information technology field, and is a founder of Psimetrix Inc. an IT firm serving the greater Denver metro area. She can be reached at 303-469-9763 or sheila@psimetrix.com
How to configure Cisco ASA 5500 security appliance to work with Apple iPhone 3G?
Apple or Cisco have step by step setup guides for Apple's iPhone. The only thing that Cisco says is that the iPhone is compatible with Cisco ASA 5500 Series and PIX firewalls. I have ASA 5500. It does not work outside the box. IPhone Client connected through appropriate VPN, you get the private IP address and then do not go beyond the successful completion of Phase 1.No remedies are available. Change is not accessible (though I use it through the same phone if I am connected directly to the private network via wifi). Thank you! Oleg
The configuration under test was today only works with either PC remote users and users with iPhones. The only thing that does not appear that work is SharePoint when connecting to ASA for VPN connection. If the iPhone is connected to the network through 802.11 corp SharePoint site works well for what is not a compatibility issue. Nonat-IP access list extended permit 10.0.0.0 255.0.0.0 10.226.248.0 255.255.254.0 access-list Split_Tunnel_List Observing the corporate network behind the access standard ASA Split_Tunnel_List list permit ip 10.0.0.0 255.0.0.0 local pool VPN_Client 10.226.248.1-10.226.249.254 mask 255.255.254.0! nat (Inside) 0 access-list Nonat! Policy Group test_VPN ingroup attributes test_VPN policy gains value 10.155.4.52 10.155.4.54 DNS server 10.155.4.51 10.155.4.52 server value divided disable password storage Tunnel tunnelspecified policy of divide-tunnel-network-list value Split_Tunnel_List! Crypto VPN1 ipsec transform-set esp-3des esp-sha-hmac Crypto ipsec transform-set VPN1 Crypto dynamic mode dyn1 map transform-set September 1 MYSET VPN1 IPSec VPN encryption map 1-isakmp dynamic dyn1! Crypto crypto map VPN interface outside Beyond the policy of allowing that 1 pre isakmp Crypto ISAKMP Encryption 3DES Authentication MD5 hash share group 2 life 86,400 Crypto ISAKMP policy 2 authentication pre-share encryption 3DES SHA hash group 2 crypto isakmp nat 86,400 life-20 tour! IPSec tunnel group test_VPN ra tunnel-group general attributes test_VPN - address authentication VPN_Client TACACS + server pool default group policy group test_VPN IPSec tunnel test_VPN group attributes pre-shared-key xxxxxxx
 |
 Firebox SOHO 6  US $.99 |  XTM21 Watchguard WG021001 with 1 Yr LiveSecurity New in Box US $599.99 |  NEW Cisco ASA 5505 10 User US $219.50 |
 FortiWifi 60C US $550.00 |  MOTOROLA 2210 02 10NA 2210 2210 02 DSL HIGH SPEED MODEM FREE SHIPPING WARRANTY US $19.95 |  Fortinet FortiWiFi 50B Security Appliance US $300.00 |
 Netopia 4686 XL 4 Port 10 100 Wired Router Used US $15.00 |  SonicWall TZ 100 Original Box and Packaging US $100.00 |  Cisco PIX 506E Firewall US $100.00 |
 Fortinet Fortigate 400A Security Firewall Appliance US $495.95 |  Fortinet Fortigate 300A Security Firewall Appliance US $695.95 |  Juniper Networks Netscreen 5XT NS 5XT 105 SWIFT Firewalls VPN US $27.95 |
 NET10016 Juniper NetScreen 5XT Elite VPN Firewall US $49.50 |  NIB SonicWALL TZ 210 Network Security Appliance 01 SSC 8753 UTM AIC and SSL VPN US $599.99 |  Sonicwall TZ 170 Firewall 25 Node US $55.00 |
| Powered by phpBay Pro |
 | BUNN VPR Commercial 12-Cup Pour-Over Coffee Brewer, with 2 Warmers List Price:  |
DescriptionMaintenance-free stainless steel tank and copper tubing. Separately controlled porcelain finish warmers maintain coffee temperature. Low profile design fits on most countertops. Stainless steel hood and base with black accents cleans easily with a damp cloth... |
 | BUNN VPS 12-Cup Pourover Commercial Coffee Brewer, with 3 Warmers List Price: |
DescriptionMaintenance-free stainless steel tank and copper tubing. Separately controlled porcelain finish warmers maintain coffee temperature. Low profile design fits on most countertops. Stainless steel hood and base with black accents cleans easily with a damp cloth... |
 | Clothes Dryer Element Restring Kit - WE11X203 Sale Price: $12.95 |
DescriptionHeating element restring kit used on some GE brands electric clothes dryers This is a restring kit for the WE11x103 heating element Fits many newer style GE/Hotpoint Dryers Genuine Dryer Parts. Original part number: WHE1X203 |
 | Xtm 21-W Appliance List Price: |
DescriptionWatchGuard XTM 21 VPN firewall appliance delivers performance-driven security to small business and remote sites that need strong protection without the hefty price tag. Enterprise-grade security includes full HTTPS content inspection and VoIP support... |
 | dragon-fire FLIP TOP LIGHTER Sale Price: $15.00 |
DescriptionThis high quality metal chrome flip top lighter is a wick, flint and fluid fuel petrol lighter. (Wick and flint is included, the fluid fuel petrol is not included, you can easily buy from your local stores... |
 | Cisco RV042 4-port 10/100 VPN Router - Dual WAN List Price: |
DescriptionAllows users to connect into your work with secure access to your files and intraComes with dual Inter ports that can serve as a failsafe system for 24/7 work uptime or as a secondary connection to a separate Inter providerUp to five users connecting via a Point-to-Point Tunneling protocolSeparate Quality of Service (QoS) configurations for each of the individual LAN portsUp to 200Mbps of throughput per full-duplex LAN portDual Inter ports for load balancing and connection redundancySecure connections for up to 30 remote office or traveling users via VPNAdvanced SPI firewall |
 | Cisco RV110W-A-NA-K9 Small Business RV110W Wireless N VPN Firewall Router List Price: |
DescriptionThe Cisco RV110W Wireless-N VPN Firewall is preferred by those who work in small or home offices and remote workers. It combines wired and wireless connectivity with a high-speed, 802.11n wireless access point, a 4-port 10/100 Mbps Fast Ethernet switch, an intuitive, browser-based device manager, and support for the FindIT Network Discovery utility at an affordable price. |
Sonicwall 2040 Firewall VPN Appliance Overheating?
Tags: firewall, linux, network, opensource, security, vpn appliance cisco, vpn appliance review, vpn appliance small business, vpn appliance vmware, vpn appliances