|
Certificates |
|
|
Public certificates are used by computers to verify the identity of a system and are necessary to implement secure connections (SSL). For instance, when you connect to Amazon.com and proceed to the checkout, a locked padlock shows up on the browser indicating that the communication between you and the website you are browsing is encrypted with Secure Sockets Layer (SSL). Two aspects of communication and security are being implemented here. One being the fact that all communication between you and the servers you are communicating with is encrypted, meaning that no one can intercept your communication and read it. Second it ensures that you are communicating with the server you believe you are communicating with. |
|
Read more...
|
|
|
Secure E-mail |
|
|
Internet e-mail is transmitted in clear text by default and therefore is insecure. As soon as a message leaves your internal network, it is possible for anyone to read that message while it is in transition from the sending system to the destination. The likelihood of an attack, such as this, is low, but when you are dealing with your sensitive data, any risk that can be avoided, should be. Transport Layer Security (TLS), built into Microsoft Exchange, is one method to protect this data stream. |
|
Read more...
|
|
|
Remote Access (Terminal Server vs SSL-VPN) |
|
|
Traditionally most companies with remote access today have used Microsoft Terminal Services to provide access to the local network and resources. Recent offerings now include other options for remote access. With today’s mobile workforce on the rise, we would like to review a few of the predominant methods used. |
|
Read more...
|
|
|
Password Best Practices |
|
Your password is your first line of defense to protecting your information. For this reason you should make sure it is secure. Best practices say the password should be at least 8 characters long and contain varying characters. It should contain at least one character from three of these categories: - Uppercase
- Lowercase
- Numbers
- Special Characters (i.e. ! @ # $ %)
|
|
Read more...
|
|
|
Policies |
|
|
Policies form the base for all security plans. A clearly defined policy allows everyone to know what is and is not allowed. Without a policy it is difficult for users to know what is proper, and it is impossible to correctly configure software and hardware to meet your requirements. Once a policy is defined we have a reference point to work from to achieve your goals. A policy is constantly evolving as new technology unveils itself, but by focusing on the concepts, not the specific technologies, a well written policy shouldn't need to be adjusted all the time. |
|
Read more...
|
|
|
|
News