1. Install a hardware firewall on each of your broadband network connections — DSL, Cable Modem, T1, etc. This is the best defense against worms and hacker attempts, and if configured right it will stop them completely. Unknown to many users, a broadband connection is a two-way connection. Not only can you get out to the Internet, but other Internet users can use your connection to come into your network from the outside. A firewall helps to block incoming traffic and prevents automatic worms from connecting to your network. A properly configured firewall would have completely prevented the Blaster worm from hitting a network.
2. Update all of your systems with the latest software updates and security patches. There are hundreds of known bugs and security vulnerabilities known to exist, and patches available to fix these problems. However, you must manually apply and test these patches. All of your systems need to be protected. Look for security updates for popular software such as Windows (all versions), Exchange, SQL, Office, Linux and more. Almost all software has patches available for download on the web. A properly patched server would have prevented Blaster and SQL slammer.
3. Use an ISP that blocks viruses at their server level. Since many viruses such as SoBig rely on e-mail to spread, it is best practice to use an ISP that filters your incoming and outgoing mail messages for viruses. This way, should a virus be sent to your mailbox, it will be eliminated before it is even sent to your organization. Few ISPs offer this service — Excalibur Technology is one of them. In fact, we block over 8,000 virus attempts per server each week!
4. Install anti-virus software on all PCs and servers. Should something get through the levels of security, your anti-virus software should block most viruses. Make sure that if you have servers, you are running software that is compatible with servers. Most anti-virus software you buy off the shelf will not install on servers. Excalibur Technology recommends Norton Anti-Virus Corporate Edition. This will monitor all of your workstations and servers. Remember to keep your virus definitions updated continuously. If new viruses come out, they will not be stopped unless your have the latest anti-virus definitions.
5. Have your internal IT staff or outside consulting staff monitor for virus and hacker activity. Check security logs, check router activity and watch for signs that your network might have been infiltrated. If you do not have an internal security staff, purchase a few hours of support from a qualified and certified IT firm such as Excalibur Technology to help ensure that nothing is slipping through your defenses.
6. Keep employees informed about network security and best-practice safety procedures. Employees may unknowingly and unintentionally allow virus code or hacker programs into your network. Excalibur Technology offers a 2-hour class to help educate your entire staff on how to easily keep your network safe. It is also a good idea to have an acceptable use policy in place for company e-mail and network use. A sample policy will be sent with our newsletter next month.
7. Have a reliable backup system and disaster recovery plan in place. Should all else fail, you should have a quick and easy way of restoring your network systems from backup. A written policy and procedure manual should be in place, so when things go wrong and need to be addressed, there is a simple and well thought out plan to follow. We are including a past article entitled "Seven Tips About Your Tape Drive" with this newsletter.

Back to the TechBytes article listing...