Showing posts with label tips. Show all posts
Showing posts with label tips. Show all posts
Wednesday, February 27, 2013
Computer Network Security Tips
Security is very important for your computer networks. Security policies can cover hundreds of items. Here are some of the more common:
Notification What good is a security policy if no one knows about it? Give users a copy of the security policy when you give them their usernames and passwords. Computers should also display a shortened version of the policy when a user attempts to connect; for example, Unauthorized access is prohibited and will be prosecuted to the fullest extent of the law.” One hackerargued that since a computer did not tell him otherwise, anyone was free to connect to and usethe system.
Background Checks Do background checks on all network support staff. This may include calling their previous employers, verifying their college degrees, requiring a drug test, and
checking for any criminal background.
Equipment Access Disable all unused network ports so that nonemployees who happen to be n the building cannot connect a laptop to an unused port and gain access to the network. Also, place all network equipment under lock and key.
Wiring Network wires should not run along the floor where they can be easily accessed. Routers, switches, and concentrators should also not be hooked up in open office space. They should be in locked closets or rooms, with access to those rooms controlled by badge-swiping systems.
Door Locks/Swipe Mechanisms Be sure that only a few, key people know the combination to the cipher lock on data center doors or that only the appropriate people have badges that will allow access to the data center. Change lock combinations often, and never leave server room doors open or unlocked.
Accounts Each user should have their own, unique user account, and employees should not
share user accounts. Even temporary employees should have their own account. Otherwise, you
will not be able to isolate a security breach.
Badges Require everyone to wear an ID badge, including contractors and visitors, and assign
appropriate access levels to contractors, visitors, and employees.
Tracking Require badge access to all entrances to buildings and internal computer rooms.
Track and record all entry and exit to these rooms.
Passwords Reset passwords at least every month. Train everyone on how to create strong
passwords. Set BIOS passwords on every client and server computer to prevent BIOS changes.
Monitor Viewing Block computer monitors so that visitors or people looking through windows can’t see them. Be sure that unauthorized users/persons cannot see security guard stations and server monitors.
Cameras Cameras should cover all entrances to the building and the entire parking lot. Be sure
that cameras are in weather-proof and tamper-proof housings, and review the output at a security monitoring office. Record everything on extended-length tape recorders.
Mail Servers Provide each person with their own e-mail mailbox, and attach an individual
network account to each mailbox. If several people need to access a mailbox, do not give all of
them the password to a single network account. Assign privileges to each person’s network
account. You can then track activity to a single person, even with a generic address such as
info@mycompany.com.
DMZ Use a demilitarized zone for all publicly viewable servers, including web servers, FTP
servers, and e-mail relay servers. Do not put them outside the firewall. Servers outside the fire-
wall defeat the purpose of the firewall.
Mail Relay Use a mail-relay server for e-mail. E-mail traffic should not go straight to your
production servers. That would enable a hacker to directly access your server as well. Use a relay server in a DMZ.
Patches Make sure that the latest security updates are installed after being properly tested on
a nonproduction computer.
Backups Store backup tape cartridges securely, not on a shelf or table within reach of someone
working at the server. Lock tapes in a waterproof, fireproof safe, and keep at least some of your
backups off site.
Modems Do not allow desktop modems for any reason. They allow users to get to the Internet
without your knowledge. Restrict modem access to approved server-based modem pools.
ReadMore
Notification What good is a security policy if no one knows about it? Give users a copy of the security policy when you give them their usernames and passwords. Computers should also display a shortened version of the policy when a user attempts to connect; for example, Unauthorized access is prohibited and will be prosecuted to the fullest extent of the law.” One hackerargued that since a computer did not tell him otherwise, anyone was free to connect to and usethe system.
Background Checks Do background checks on all network support staff. This may include calling their previous employers, verifying their college degrees, requiring a drug test, and
checking for any criminal background.
Equipment Access Disable all unused network ports so that nonemployees who happen to be n the building cannot connect a laptop to an unused port and gain access to the network. Also, place all network equipment under lock and key.
Wiring Network wires should not run along the floor where they can be easily accessed. Routers, switches, and concentrators should also not be hooked up in open office space. They should be in locked closets or rooms, with access to those rooms controlled by badge-swiping systems.
Door Locks/Swipe Mechanisms Be sure that only a few, key people know the combination to the cipher lock on data center doors or that only the appropriate people have badges that will allow access to the data center. Change lock combinations often, and never leave server room doors open or unlocked.
Accounts Each user should have their own, unique user account, and employees should not
share user accounts. Even temporary employees should have their own account. Otherwise, you
will not be able to isolate a security breach.
Badges Require everyone to wear an ID badge, including contractors and visitors, and assign
appropriate access levels to contractors, visitors, and employees.
Tracking Require badge access to all entrances to buildings and internal computer rooms.
Track and record all entry and exit to these rooms.
Passwords Reset passwords at least every month. Train everyone on how to create strong
passwords. Set BIOS passwords on every client and server computer to prevent BIOS changes.
Monitor Viewing Block computer monitors so that visitors or people looking through windows can’t see them. Be sure that unauthorized users/persons cannot see security guard stations and server monitors.
Cameras Cameras should cover all entrances to the building and the entire parking lot. Be sure
that cameras are in weather-proof and tamper-proof housings, and review the output at a security monitoring office. Record everything on extended-length tape recorders.
Mail Servers Provide each person with their own e-mail mailbox, and attach an individual
network account to each mailbox. If several people need to access a mailbox, do not give all of
them the password to a single network account. Assign privileges to each person’s network
account. You can then track activity to a single person, even with a generic address such as
info@mycompany.com.
DMZ Use a demilitarized zone for all publicly viewable servers, including web servers, FTP
servers, and e-mail relay servers. Do not put them outside the firewall. Servers outside the fire-
wall defeat the purpose of the firewall.
Mail Relay Use a mail-relay server for e-mail. E-mail traffic should not go straight to your
production servers. That would enable a hacker to directly access your server as well. Use a relay server in a DMZ.
Patches Make sure that the latest security updates are installed after being properly tested on
a nonproduction computer.
Backups Store backup tape cartridges securely, not on a shelf or table within reach of someone
working at the server. Lock tapes in a waterproof, fireproof safe, and keep at least some of your
backups off site.
Modems Do not allow desktop modems for any reason. They allow users to get to the Internet
without your knowledge. Restrict modem access to approved server-based modem pools.
Monday, February 4, 2013
All in One Multifunction Printer Tips
All in one multifunction printer have become very popular nowadays. It handles the issue of taking up all the office space with all sort of machines. In fact its combination of all regular office needs in one device. Multifunction printer can be offered in diverse functionalities and features depend on demands.Before invention of all in one multifunction printer, it was vital to have all of different functionality devices separately and was such a mess to configure and place them. But now you just sit and by pushing the button, do all send and receive documents process like a piece of cake.With all these advantages, there are some drawbacks. If you want to buy an All in one device, remembering following point may help you.
AIO for home users usually is not networked and connected with USB or parallel.
If youre planning to use it as a photocopier, its going to cost you considerably more than having copies made at your local print shop. Theyre great for convenience when you need a quick copy, but you wouldnt want to do any kind of volume on them.
Another thing to consider is the quality of the various components. For example, the scanner may not be as high resolution as some stand-alone models. If youre planning to scan old photographs or negatives and want the highest possible resolution, you probably wont get quite as good a result from a multifunction printer/scanner as you would from a dedicated scanner. The quality of the image depends on DPI or dots per inch. The standard (600x600) will suffice for printing but is unsuitable as regards quality of photo. Scanner resolutions must be noticed, as these are usually low in multifunction models. There is a wide gap as regards quality between interpolated and optimal resolution.
The same goes for the printing capabilities. You can get standalone printers that will print at higher resolutions or on larger paper than most multifunction units.
The final thing to consider is that if your printer breaks down it will affect your fax, scanner and copier too. This may cause problems if your office needs these machines to do business. Also, by using your printer for multiple functions you will go through a lot of ink cartridges and toner. The cost of using these forms of ink is much higher for making copies than using a regular copy machine.
Having separate units means you would only be without one of them if you ever need repairs done. If your needs are relatively basic, however, a multifunction is a great choice. You can get all the same functions as having 3 or 4 separate machines, for less money and in a lot less space.
AIO for home users usually is not networked and connected with USB or parallel.
If youre planning to use it as a photocopier, its going to cost you considerably more than having copies made at your local print shop. Theyre great for convenience when you need a quick copy, but you wouldnt want to do any kind of volume on them.
Another thing to consider is the quality of the various components. For example, the scanner may not be as high resolution as some stand-alone models. If youre planning to scan old photographs or negatives and want the highest possible resolution, you probably wont get quite as good a result from a multifunction printer/scanner as you would from a dedicated scanner. The quality of the image depends on DPI or dots per inch. The standard (600x600) will suffice for printing but is unsuitable as regards quality of photo. Scanner resolutions must be noticed, as these are usually low in multifunction models. There is a wide gap as regards quality between interpolated and optimal resolution.
The same goes for the printing capabilities. You can get standalone printers that will print at higher resolutions or on larger paper than most multifunction units.
The final thing to consider is that if your printer breaks down it will affect your fax, scanner and copier too. This may cause problems if your office needs these machines to do business. Also, by using your printer for multiple functions you will go through a lot of ink cartridges and toner. The cost of using these forms of ink is much higher for making copies than using a regular copy machine.
Having separate units means you would only be without one of them if you ever need repairs done. If your needs are relatively basic, however, a multifunction is a great choice. You can get all the same functions as having 3 or 4 separate machines, for less money and in a lot less space.
Subscribe to:
Posts (Atom)