Server security is a major step in having a safe and secure company environment. You will need to consider server security, workstation and laptop security, and the company policy along with employee awareness.
Your servers "serve" information to employees, clients, and prospective clients.
There are two different types of servers:
Public servers such as web servers, email servers, DNS servers, media servers, and others can be seen by the world. These servers are the most vulnerable and maintenance is much more important. These servers are commonly attacked, usually on a daily basis, and should receive extreme attention. Hackers will try to gain access to these servers to either damage, or to use them as another hacking tool in order to hide themselves behind your server and cover their tracks.
Private servers can be seen only by those you wish to see them such as employees. These servers should be kept behind a well maintained firewall because they are usually holding critical data and company files. The security on these private servers needs to be implemented as well. Departmental data should be seen only by authorized employees and this is managed by implementing security permissions on files stored in the server. |
|
 Services
- Turning off unneeded services and daemons will free up RAM and can make your servers and/or workstation perform much better. In addition, a port that is not listening or a service that is turned off can not be attacked. All systems are installed by default with services running that are not needed on most machines.
Directory Protection
- There are a tremendous amount of reasons to have the proper directory protection in any company. Separate departments require secrecy due to their very own nature such as: human resources, executive level, research and development, information technology, management, and many more. By putting into place the proper security and protection, you can reduce or eliminate data theft.
System Administration
- System Administration is a vital part of maintaining a stable, secure, and up-to-date environment. By eliminating “dead” accounts, creating and maintaining current and structured Active Directories, and keeping the directory structures secure; you increase productivity and reduce the amount of “downtime”.
Patch Updates
- Software patches add risk to maintaining uptime but are required for securing your business. IT administrators live with this contradiction every day. How do you mitigate the risks to uptime imposed by patching while securing your systems? There is only one solution: find a way to reliably deploy patches that minimizes the threat to uptime.
AntiVirus
- The cost of a virus outbreak in a corporation could be extremely expensive to remove and repair the damage. Having a good Antivirus solution in place is the best defense against malicious attacks both from the Internet and internal networks.
|
|
