Internet Security System

In all business or the organizations, the owner or the manager of the network infrastructures should implement the Internet Security System to protect the private networks against any types of internet threats.

Internet connectivity is normally provided via a perimeter router (and a secure firewall) connecting via an Internet Service Provider (ISP). Some Internet connections may be provided via broadband solution (using xDSL or cable) using a VPN encrypted tunnel. Due to the high security risks associated with the Internet, an internet security system should be implemented by following a number of basic security procedures. Any business communications over the Internet must be securely encrypted (VPN), and any Internet connection must be fire-walled with a suitable security policy to protect internal assets.

In enterprise systems, the Information Technology managers typically implement an Internet security system by following five steps to get started with the security review:

1. Start by reviewing the current state of the business.
2. Analyze the technology currently being used.
3. Start a risk analysis process.
4. Create the plans.
5. Begin your security implementation process.

Each step will link into a succeeding step. Internet security system with this approach should be used for each process or department within the business, as well as for the holistic enterprise.

1. Reviewing the current state of the business

In most business or corporate networks, the Internet security system is already in place. Probably you need to start your security analysis from scratch by evaluating the current internet security system in place that is relevant to current security requirements.

Identifying the security requirements for the business commonly follows the steps below:

1. Identify the core business by reviewing such questions like What are you protecting against?; what business segments to protect?; how the business security is implemented? And so on.
2. Identify the stakeholders, can be the business owner, applications or process owner, or anyone who has any type of ownership in security.
3. Understanding the company from both an internal and external perspective. Identify the number of employees, the customer base, and the volume of sales. Identify the vendors and business partners.
4. Identify the vendors and business partners with which you do business. In many cases they connect directly to the network system that can also be a point of entry for unauthorized access.
5. Identify industry trends and standards.

2. Analyze the technology being used

The next step in reviewing the internet security system requirements is by analyzing the technology currently in used by the organization. This will include the private / corporate network, or by definition a secured network that typically support data processing systems, messaging systems, patching management system, corporate anti-virus system, and so on.

The third steps in reviewing the internet security system requirements is analyzing the risks based on the information collected from the above two steps. You need to be able to identify each point where security could be an issue or a concern. With this risks assessment, you can identify the threats to the business assets, and you can evaluate the vulnerability to and likelihood of the occurrence as well as estimate the potential impacts.

Read more detail about Risk security assessment here.

4. Create the Plans

The fourth step in reviewing the internet security system requirement is to create plans and policies. You need to check the existing environment to see if you have any existing management of information security, security policies, and/or procedures including physical security, LAN security standards, Internet access policy, and even business recovery and disaster recovery plans.

At this point, you have decided which threats pose an unacceptable risk to your computing environment and what level of action you are willing to take to defend against them. Studying the security plans that your company has and their implementation may help you decide which security measures are most important for your environment. Based on the security standard policies in place, you need to review how good the policies are implemented. Policies are only good if they are implemented.

5. Security implementation

The last step is to implement the internet security system. This project should address the design, structure, and configuration of an evolving secure business infrastructure. The technical infrastructure will ensure that an internet security system environment is in place to support the user community and keep the business running.

The minimum requirement with regards to the implementation of the Internet Security system is:

• All business / corporate data communications over the Internet must be encrypted using a secure tunneling – the VPN.
• Any Internet connection must be fire-walled.
• If using a perimeter screening router then it must have a suitable security policy to function to block non-authorized Internet originated traffic.
• The router itself must also be secure from common Internet hacking techniques.
• A suitable firewall must also be used to restrict inbound (from the Internet) Internet connections but allow authorized return (established) connections.

Check also business firewalls and firewall ports.

All business / corporate data traversing a public network such as the Internet must be encrypted. A strong encryption policy (VPN) must be used to protect network traffic from data manipulation and eves-dropping attacks.

The internal network must be protected with a firewall and if using a perimeter router (dual defenses) then it must also be configured to protect the internal network (and itself). This can be achieved by the use of a correctly configured extended access-list to block inbound (from the Internet) non-authorized traffic. Care must be taken not to block legitimate VPN traffic or valid established sessions.

The router should have SNMP disabled on the external Internet connection. It should be using strong SNMP and password security, with all TCP and UDP small-services (including http) disabled. Telnet restrictions should be enforced such that IP management is only allowed from authorized (internal) addresses. Refer to the Security standards on firewall protection.

By not adhering to this internet security system standard, the internal network is capable of being readily compromised from the Internet. This includes such security threats as information espionage, data manipulation, device tampering and message masquerading.

See also related posts:

• Internet security download
• tp-link tl-r4299g dual wan router
• Sample risk assessment
• Small business network security software

Ki Grinsing