Your remote team is at risk. What are the best network security services to protect them?

You can utilize a VPN with multi-factor authentication, in combination with NAC. Additionally, clients can access servers through PAM after establishing a VPN connection.

Without any second thought, VPNs must be used to ensure security, authentication and authorisation of workforce working remotely. With the help of VPN, a secure tunnel is created between source and destination to ensure data is transferred safely. Another advantage is configuring encryption mechanism within VPN. This will enable the data being transmitted be encrypted with the mechanism configured and in turn will ensure the confidentiality of the data. Organisation further enable MFA authentication on VPN softwares installed within corporate devices. This ensures that only authorised individuals access secured environment and laptop with active sessions are not used to create unauthorised connection with restricted environment.

VPN posturing, MFA authentication and least privileged has to be considered. Secure Access Service Edge (SASE) is Emerging technology that providing secure access to network resources from anywhere and is going to replace VPN.

VPN as a connectivity method has served us well. However in today's world where the threat landscape is considerably different to when VPN technology was first introduced (think VPN terminated in DMZ and given open access to internal resources due to lack of segmentation), it should no longer be considered secure on its own. Also, most organisations have their resources split across multiple locations, which could mean back-hauling all traffic to a central location and only to connect to resource that might be closer to the originator's location. Overall a better approach is needed... SASE anyone?

I would establish a VPN service with MFA in place. I would also do a Security Awareness Training with the users so they would be mindful of phishing and ransomware scenarios. The number one thing is user awareness, this process keeps your users from clicking on items that could potentially put your network at risk.

A melhor maneira de proteger o ambiente de diversas formas é um firewall avan?ado com regras claras e restritivas, que possa fornecer um servi?o de VPN seguro com base em SSL. O firewall deve ser integrado com um SSO baseado nas melhores práticas e ter um excelente sistema de MFA para autentica??o do cliente VPN. Outro item muito importante é um treinamento básico em seguran?a da informa??o para todos os colaboradores integrados, assim como preferencialmente usar dispositivos fornecidos pela empresa.

Um firewall para ter bons resultados, precisa estar sempre atualizado, com a maior quantidade possível de festures devidamente ativadas, como o antibot, ids, ips, filtro de navega??o, SD wan, além de interfaces de navega??o, servi?os e gerência segregadas por vlans de modo que servi?os importantes n?o tocados por usuários n?o permitidos.

Firewalls are essential for remote work, serving as the frontline defense against cyber threats. As a network engineer, I've deployed firewalls to block malicious traffic, securing remote access protocols. This safeguards sensitive data, ensuring network integrity and protecting against potential breaches.

Today’s network distribution have resulted to legacy firewall deployments acting as bottlenecks and negatively affecting user experience. Cloud firewall services with global presence ensure that users are protected with the same policy enforcement with the least possible latency and with high availability always in place. Connectivity upgrades are easier to be deployed since security services are enforced regardless of bandwidth availability. TLS, DLP, malware inspection and etc are enforced without impact to resources and performance penalties allowing security control activation depending on company policies rather than availability.

Em uma estrategia de prote??o de dispositivos para trabalhadores remotos, considero que as prote??es n?o devem ficar centralizadas em um firewall, pois seria necessário direcionar todo o tráfego do dispositivo para um ponto central utilizando VPN. Solu??es modernas de SASE combinam prote??es no Endpoint e em nuvem dispensando a utiliza??o firewalls e VPN tradicionais

An EDR solution is paramount in this day and age. If you don't have an in-house cyber team, then an MDR solution is a must so any manual detection and remediation can be taken care of in and outside of working hours.

Security involves People, Process, and Technology. The technology piece is an agent based EDR tool that uses machine learning to spot behavior based anomalies on the endpoint. The People and Process come from your in-house SOC or a MSP. The automated EDR tool will detect, block, and partially or fully remediate the threat on the endpoint. The SOC team will perform a more complete remediation process - detecting and eradicating the threat if it has spread within the enterprise. A skilled SOC team perhaps has a proactive threat hunting skillset.

The endpoint is the new battleground. It is where work is performed, data is used and productivity takes place. It is also the easiest place to see all of the files, script, etc. unencrypted. This is the first place to start with a really good product that protects and when protection fails, helps to detect as quick as possible to minimize the blast radius and remediate the problem.

Employ endpoint protection services to defend individual devices from malware, ransomware, and other cyber threats, mitigating the risk of endpoint compromise.

Yo creo que la utilización de la tecnología en la seguridad es fundamental pero no nos podemos olvidar de capacitar al usuario. Podemos instalar la herramienta mas sofisticada y mejor del mercado que siempre va a tener un zero day, un bug o lo que sea mediante el cual sea vulnerada, por eso creo que la constante capacitación al usuario sigue siendo muy importante para la protección de los endpoints.

I believe some ways to enhance the remote security is as below: 1: secure VPN configurations with RSA or Multi-factor authentications 2: BIOS pin and Bit-locker encryption or similar to secure the hard disk as well. This can be part of golden image as well. 3. Updated and robust HIDS/AV along with some Endpoint management tool adds another layer of security. 4. Getting all the logs at a centralised place to monitor any unusual logins or doing user behaviour analytics. 5. Seamless IT support to help users get their basic things done with single click like password resets/account unlock etc.

To add to above, we can use new ways and process to reduce the risk of remote users. 1. Starting with multi-factor authentication, which may include RSA or biometrics. 2. Using CIAM tools to monitor user behaviour to identify risks in early stages. 3. Providing right access at right time on right level.

In addition with all listed solutions, Conditional Access App Control is definitely important to consider with remote work. Enables user app access and sessions to be monitored and controlled in real time based on access and session policies. Taking a defense in depth approach with many of the solutions above is always ideal. One good example is Microsoft Defender for Cloud Apps which integrates with any identity provider (IdP) to deliver these capabilities with access and session controls. If you're using Microsoft Entra ID as your IDP, these controls are integrated and streamlined for a simpler and more tailored deployment built on.

Create strong passwords. ... Enforce security policies. ... Use firewalls. ... Monitor activity. Network security breaches can have severe consequences for businesses, including: Data loss. A network security breach can result in the loss of sensitive data, such as customer information or financial records. Damage to reputation. A breach can also damage a company’s reputation and make it difficult to regain the trust of customers and other stakeholders. Loss of revenue. In some cases, a network security breach can lead to a loss of revenue as customers take their business elsewhere. Increased costs. Breaches can also lead to increased costs, such as hiring new staff or upgrading security systems. Tracking logs most important part

Obviously a combination of all the above. It became a given that all organizations are constantly under attack. An up to do date VPN is crucial. Identify management systems such as IBM or Okta. Education is super important. The key is to make more interesting and engaging content with data and numbers and not just boring online courses. Endpoint is a powerful tool, but it can impact the employee laptop. It needs to be something very lightweight and stable. Password policies - change passwords. OTP. Long passwords. Network monitoring. Limit access to minimum required per employee and monitor once a month. Grant only specific and temporary accesses. Only to specific tables in the db or folders in the directory.

System backups play a crucial role in securing your environment, preserving data integrity and availability during disasters or breaches. It's vital to ensure that backup and recovery services are isolated from the network and offer true immutability, preventing modifications once created. Following the 3-2-1 model is key—maintain three copies on two different media forms, with one copy stored offsite and air-gapped for enhanced protection.

One of the last things you need is a breach and no backups. Even worse, you have backups but you don't test them routinely. Off-site storage and knowing exactly where that data is stored is key. As far as a Service I've never personally used one but if I needed to I would make sure I had a good set of requirements to make sure it's a success, and compare different vendors.

System backups are an essential part of securing your environment by helping to maintain data integrity and availability in the event of a disaster or breach of your environment. However, care should be taken to ensure that your backup and recovery services are isolated from your network and provide true immutability, ie the ability to NOT be modified once they are created. Likewise, backups should be kept in more than one location, ie, the 3-2-1 model of backups: 3 copies on 2 different forms of media, with 1 copy being offsite and air-gapped.

Backups created and stored redundantly in physically segmented locations is essential to maintaining the reliability of this disaster recovery mechanism. Care must be taken with the use of known vulnerable protocols for mirroring the backup.

As important as data backup, is developing services using modern deployment tools such as Terraform, Docker/Kubernetes, and Ansible/Salt Stack. Your data is useless unless you can replicate the virtualised infrastructure it was operating on. Backup and restore should be integrated into the deployment process, so backups are used when deploying new containers or redeploying services.

La tecnología es una excelente herramienta de apoyo para controlar y/o disminuir el riesgo, sin embargo esta es dise?ada, implementada y operada por personas, por lo tanto al ser conscientes de los riesgos que suponen nuestras acciones, podemos incrementar el nivel de eficiencia de las herramientas. Llenarnos de herramientas y plataformas, no nos dará una certeza de ir por el camino correcto sin ir acompa?ado de una cultura en pro de la seguridad de la información.

Security at user level is quintessential for any organisation. And to ensure they are never the weak link, security awareness trainings are pretty important.It could come in various forms like Phishing tests, security campaigns, videos or real-world tests. This would help an organisation to provide information to the end users/ employees about the emerging threats, maintaining security hygiene and reducing the chances of a potential security breach.

70% of the entry point in your network is based on an internal compromission. So internal training is key to protect your company. The more you will educate your people the safer you will be !

Security Awareness Training will probably have the biggest impact and, unfortunately, is the hardest one to get 100% right. You can have the best firewalls, IPS and security policies but one wrong click on an E-Mail does a lot of damage. When talking security with end users, I always frame it around their identity, credit report and banking accounts. End users have a vested interest in their own personal information. Instilling good practices in that will be translated to their security mindfulness at work. Also, routinely test users with services that try to do attacks like phishing. Learning from mistakes will tend to be better ingrained in their minds for next time.

Experience is a key for a person who is going to train N number of people and make them aware about do & don’t that considered for phishing, malware, password security, social engineering, and data privacy. In addition to security awareness training’s for people to avoid such incidents, there are lot of tools present in the market that monitor users and their behaviour on the system which reduces the human error and the risk of cyberattacks too.

Una estrategia de seguridad Zero Trust a nivel de toda la red corporativa para permitir acceso a los usuarios únicamente autorizados con minino privilegio. Dentro de la arquitectura contemplar IAM con autenticación contextual, basada en riesgo, SSO, MFA Adaptativo Integración con ZTNA, dejando detrás en concepto de la VPN y garantizando granularidad y chequeo de postura de seguridad recurrente Integración PAM para usuarios privilegios hacia las plataformas tanto administrados y soporte de terceros no gestionados Securizacion EndPoint para evitar el movimiento lateral, Security Email, un correcto monitoreo de todas las plataformas de seguridad al SIEM con un alto alertamiento efectivo Así también fortalecer la concienciación de los usuarios

Zero Trust Network approach introducing Security Service Edge (SSE) solutions with agent/agentless access integrated with an Identity Provider (IDP) of your choice.

The best solution is made up of the combination of different services as there is no single solution which can address everything in need. To secure remote workers and the devices, it is important to have a remote VPN service, firewall service, endpoint protection service and conducting a regular information security awareness creation programs - combining all these together can provide better security for the organization. Moreover, IAM solutions can also provide another layer of security if introduced. In general, what matters the most is understanding the maturity level of the organization and applying the required network security controls based on their priorities as one alone can't provide the required level of security.

One of the best ways to protect remote workforce is to utilize a Zero Trust Network Access ZTNA or a Secure Access Service Edge SASE solution. They are tied to the identity provider to provide enhanced context aware decisions on user access. These types of solutions provide better protection for remote users while protecting company critical data by identifying and preventing risky users.

Additionally, consider implementing multi-factor authentication, intrusion detection systems, and regular security audits to enhance overall network security posture and resilience against evolving cyber threats.