Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

What is the most efficient way of protecting small online business from outside threats. Everything too much expensive is not a solution.

I've been looking for good web application firewall and at the same time not expensive, since the business is using applications, but other than WAF, I need hardware security.

share|improve this question
1  
Bit of a broad question tbh. but broadly speaking, in a small business, you've got to make sure you're not tempted to skip things like user education, security policy etc. You could have the best hardware layer in the world, and it could be for nothing if the CEO is plugs in a comprimised USB he found on his desk. –  Owen Dec 3 '13 at 17:46
    
I totally agree, but lets say that the employees are well educated and the only threat can come from outside attacks on network or web application. –  ttwis Dec 3 '13 at 17:49
add comment

closed as too broad by Adnan, Xander, Gilles, TildalWave, NULLZ Dec 3 '13 at 22:11

There are either too many possible answers, or good answers would be too long for this format. Please add details to narrow the answer set or to isolate an issue that can be answered in a few paragraphs.If this question can be reworded to fit the rules in the help center, please edit the question.

1 Answer

up vote 0 down vote accepted

You can use open source solutions for that and try to make it perfect based on your environment.

For IPS you can use Suricata engine.

For Firewall you can use PFSense or ClearOS.

For WAF you can use IronBee or wafw

For SIEM you can use AlieanVault OSSIM.

All the above products are free and open source, but some of them has missed feature and need to be paid to go with pro edition.

I hope this fits your requirements.

Rami,

share|improve this answer
add comment

Not the answer you're looking for? Browse other questions tagged or ask your own question.