Each organization, no matter what industry they belong to or what their infrastructure size is, requires comprehensive network security solutions to protect it from various cyberthreats happening in the wild today.
Network security layers
When we talk about network security, we need to consider layers of protection:
Physical network security
Physical network security controls deal with preventing unauthorized persons from gaining physical access to the office and network devices, such as firewalls and routers. Physical locks, ID verification and biometric authentication are few measures in place to take care of such issues.
Technical network security
Technical security controls deal with the devices in the network and data stored and in transit. Also, technical security needs to protect data and systems from unauthorized personnel and malicious activities from employees.
Administrative network security
Administrative security controls deal with security policies and compliance processes on user behavior. It also includes user authentication, their privilege level and implementing changes to the existing infrastructure.
Network security best practices
Now we have a basic understanding and overview of network security, let’s focus on some of the network security best practices you should be following.
1. Perform a network audit
The first step to secure a network is to perform a thorough audit to identify the weakness in the network posture and design. Performing a network audit identifies and assesses:
Presence of security vulnerabilities Unused or unnecessary applications Open ports Anti-virus/anti-malware and malicious traffic detection software Backups
In addition, third-party vendor assessments should be conducted to identify additional security gaps.
2. Deploy network and security devices
Every organization should have a firewall and a web application firewall (WAF) for protecting their website from various web-based attacks and to ensure safe storage of their data. To maintain the optimum security of the organization and monitor traffic, various additional systems should be used, such as intrusion detection and prevention (IDS/IPS) systems, security information and event management (SIEM) systems and data loss prevention (DLP) software.
3. Disable file sharing features
Though file sharing sounds like a convenient method for exchanging files, it’s advisable to enable file sharing only on a few independent and private servers. File sharing should be disabled on all employee devices.
4. Update antivirus and anti-malware software
Businesses purchase desktop computers and laptops with the latest version of antivirus and anti-malware software but fail to keep it updated with new rules and updates. By ensuring that antivirus and anti-malware are up to date, one can be assured that the device is running antivirus with the latest bug fixes and security updates.
5. Secure your routers
A security breach or a security event can take place simply by hitting the reset button on the network router. Thus it is paramount to consider moving routers to a more secure location such as a locked room or closet. Also, video surveillance equipment and CCTV can be installed in the server or network room. In addition, the router should be configured to change default passwords and network names, which attackers can easily find online.
6. Use a private IP address
To avoid unauthorized users or devices from accessing the critical devices and servers in the network, private IP addresses should be assigned to them. This practice enables the IT administrator to easily tap on all unauthorized attempts by the users or devices connecting to your network for any suspicious activity.
7. Establish a network security maintenance system
A proper network security maintenance system should be established which involves processes such as :
Perform regular backups Updating the software Schedule change in network name and passwords
Once a network security maintenance system is established, document it and circulate it to your team.
8. Network segmentation and segregation
Segmenting and dividing the network into different trust zones keeps networks isolated when any security incident takes place, thus reducing the impact and risks of a network intrusion.
9. Create a security-centered culture
This involves educating and training the staff on the importance of network security to ensure they better understand the implications of lack of network security, how they can help secure corporate networks and other security issues. For more network security best practices, check out the Network Security Fundamentals Learning Path by Kevin Carter.
Sources
Network security best practices, Coxblue Network security best practices, Netwrix 12 network security best practices to secure your business, Infosec Insights What is network security?, Check Point What is network security?, Forcepoint
