Currently, most companies deploy virtualization technologies on their network without involving the network and system security teams in the planning stages. Thus, the majority of companies are, therefore, content to modernize virtual networks by applying existing physical network security policies. This lack of preparation and perspective considerably weakens network security, the latter being the essential element for the successful implementation of cloud computing in huge companies.
1 - Consolidate identities:
The need for employees to connect to multiple applications and services is inherent in any cloud-like environment. The possibility of ensuring strong authentication of the user who risks escaping companies, therefore, represents a considerable security threat. To reduce this risk, companies must implement Single Sign-On technologies that allow users to access, via a single login, multiple applications, and services, including those located outside of society, in the public cloud.
2 - Ensure permanent connectivity:
When most of the sensitive data of a company are stored in the cloud, the slightest network failure risks interrupting commercial operations. Cloud services must always be accessible, even during maintenance operations. High availability features such as active/active clustering, a dynamic load balancing server, and an ISP loader dispatcher must, therefore, be implemented within the network infrastructure. Companies should choose technologies already integrated into the network infrastructure rather than investing in stand-alone versions of solutions to ensure efficiency, ease of administration but also reduce costs.
3 - Set up a multi-layer inspection:
The increase in the number of cloud computing environments and the multiplication of ever more advanced threats results in the need to create layer-by-layer protection, including perimeter protection, prevention, and detection of intrusions on the network. Instead of installing first-generation firewalls to protect the cloud and its perimeter, Stonesoft advocates the deployment of new generation virtual firewall appliances that integrate a firewall and IPS for an in-depth inspection of traffic. In this way, companies will be able to analyze all types of traffic: from web browsing to peer-to-peer applications via encrypted web traffic.
4 - Require a centralized administration:
human error always remains the most considerable threat weighing on both virtual and physical networks. As companies deploy additional network devices to secure their virtual network, the risk becomes more significant. Indeed, device management, monitoring, and configuration become more complex and utterly disorganized. It is for this reason that Stonesoft recommends to companies the use of a single administration console to manage to supervise and configure all the network devices, whether physical, virtual, or third party.
5 - Protect virtual workstations:
More and more companies decide to deploy virtual workstations to benefit from the advantages of this new technology, in particular about administration and costs. However, these workstations are just as, if not more, vulnerable than their physical counterparts. To adequately protect virtual desktops, companies will need to isolate them from other network segments and put in place deep inspection processes to prevent internal and external attacks. These companies will have to adopt a multi-level approach to security, in particular by implementing IPS technology which will prevent unauthorized internal access.
6 - Best practices for network security
We have seen that well thought out security policies can significantly increase the security of a network. While plans can be both complex and cumbersome, it is often the simple things that prove most useful. Consider the combination of a centrally managed anti-virus update system and a host scanner to detect new or date systems. Although this system would involve configuration, administration, and software for central deployment capabilities, they are all generally available with today's operating systems. In general, ideally automatic application policies and tools help to reduce visible holes in system security so that then we can focus on more complex issues. The following would typically be part of a corporate network security policy:
The controlled and deployed version of firewall rule sets
External resources are placed in the double firewall
All network hosts lock unnecessary network ports
All hosts on the network include centralized management
All hosts on the web use central security updates
Secure primary authentication
User management managed centrally with the password policy
Proactive network scanning of new hosts, date systems
Network monitoring to detect suspicious behavior
Incident response mechanisms
With the increasing number of threats to networks such as worms, viruses, and hackers, security can no longer be considered an option, even within "private" networks. Securing all equipment is essential to maintain availability and transparent access to services. Providing and maintaining security in the business usually means increased administration. Historically, this has been the biggest obstacle to large security implementations. Today, the amount of time spent repairing a network due to a worm or virus can easily be higher than the time in advance to more adequately secure a business. Fortunately, there are many options in systems and software to increase network security while reducing the overhead costs of managing these systems. Even basic practices such as periodic software updates, locking down all devices using centralized authentication and secure access methods can lead a long way but reduce the risks. The establishment of appropriate security policies and various network checks further increase overall network protection.
http://https://www.avanturebytes.com/
22.243.201.42-static-fiberlink.net.pk (42.201.243.22)
Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36
|
|