Firewall
Tips
Best Practices When Using a Firewall
Eric Kasper - Chicago-Based IT Consultant / Technology Trend Contributor
Monday, August 2, 2010
1. Begin with the “most restrictive” access rules.
When working with a firewall, you should always begin with the most restrictive set of access rules, and then add rules one-by-one to allow the type of access you want. This systematic approach ensures a stronger firewall, so you can be more confident about your security.
2. Update your server software frequently.
Even though your firewall allows you to open and close the services you designate, it is very important that your server software has the most current security updates. When the firewall allows a certain service to be open, it is dependent on the server software to prevent a security intrusion. For example, let’s say that you enable public clients to download information using a file transfer protocol (FTP). Your firewall is set correctly to allow your clients to access the FTP server. If the FTP server does not have the current security updates, a hacker may be able to access the server and download files, or even upload junk onto your server until it fills up and crashes. Even though your firewall is working properly, your failure to update the server’s security can create an Achilles heel in your network.
3. Check your firewall logs on a regular basis.
Many firewall systems are set up and run without any follow-up or quality control. Reviewing your firewall logs regularly helps you to see activity patterns that may indicate irregularities or improper administration. This is of particular importance following the initial setup of your firewall system. Post-setup reviews can help you find unexpected log items that may indicate a flaw in your rules. |
|
