Timeline for Islanding vs server lockdown
Current License: CC BY-SA 4.0
10 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| May 18, 2018 at 14:45 | comment | added | SomeGuy | Let us continue this discussion in chat. | |
| May 18, 2018 at 14:33 | comment | added | SomeGuy | That's a pretty wide question, and I wish I could give you an answer. The diversity in firewalls and appliances is because there are so many different business needs. I do a lot of small business consulting and get this asked a lot - the answer is vague but accurate: it really depends on the individual network and your business's mission needs. I will say that in most instances, I have a strong preference for ASA's over Sonicwalls but ASA's are more advanced to configure and more expensive assuming similar functionality. Also consider Juniper - they're not as big but they're solid. | |
| May 18, 2018 at 13:18 | comment | added | Cullub | All right -- I'll bring updates up with management (I'll be doing a report on this subject anyway, so that should fit in nicely ;)). Come to think of it, it's possible we already have a sonicwall appliance, but I'll do some research there as well. Is there a good read you can recommend for the differences between ASA's and Sonicwall appliances? Also, it looks like there are a million different versions of each (ranging from the $500 range to $4,000). What features should we be looking at? | |
| May 18, 2018 at 5:35 | comment | added | SomeGuy | Please remember most hacks are targets of opportunity. Unless you're a government or high profile target, they will not spend too much time on you unless you're easy. Make yourself difficult enough with multiple layers of protection (think: onions) and you're generally safe. Most IT budgets don't afford new gadgets every year and that's fine, but if you don't have any sort of firewall, you have a moral obligation to your company to talk the CIO into getting something - even converting an old computer to Ubuntu with OpenWRT - to put in front of your traffic. Check openwrt.org | |
| May 18, 2018 at 5:30 | comment | added | SomeGuy | You do not have to "put the firewall on a machine;" an ASA or Sonicwall appliance (ASA's are much better but come at a higher cost) sits on a rack (or even a desk) and doesn't need to be put on a computer. They're physical boxes just like a server and are WELL worth the investment. Many PCI/SOX/HIPAA laws require some sort of firewall anyway, depending on what you're doing. | |
| May 18, 2018 at 5:28 | comment | added | SomeGuy | Win7 and Win10 are much better than XP, but I would still encourage you to find a workflow that allows for better patching. As a penetration tester, I can testify that missed patches make for much easier targets. | |
| May 18, 2018 at 5:15 | comment | added | SomeGuy | I would start here security.stackexchange.com/questions/3667/… | |
| May 18, 2018 at 3:40 | comment | added | Cullub | Could you clarify what you mean by extra firewall and DMZ (third paragraph)? What machine would we put the extra firewall on? Also I'm really not familiar with the concept of DMZ -- I'll try to Google it, but if you had any suggested reading that would also be wonderful. | |
| May 18, 2018 at 3:35 | comment | added | Cullub | Note we no longer use XP computers. That was last year, and likely contributed to getting the virus, but we've upgraded to Win7 and Win10. We'd like to patch more, but realistically that's often how it works. | |
| May 17, 2018 at 17:54 | history | answered | SomeGuy | CC BY-SA 4.0 |