topic security issue unde below environment in Network Security

security issue unde below environment

petercinvest — Sun, 22 Mar 2020 00:50:50 GMT

we set up a small company, no domain controllers, work mostly on Macs and Linux with some Windows, and utilize SaaS for application. nonetheless we still want to do our best to protect the security of our IT system, can you give me any name of tools (besides end point anti-virus, firewall, ips/ids) or suggestions how to protect security if no domain controller and under saas

Re: security issue unde below environment

Leo Laohoo — Sun, 22 Mar 2020 01:34:25 GMT

@petercinvest wrote:

work mostly on Macs and Linux with some Windows

Those computers, are their OS up-to-date? The applications in those computers, are they up-to-date?

The router/modem that connects the computers to the internet, is it up-to-date with firmware and patches? What is the "latest" patch/firmware release? >1 year?

Passwords - how complicated are they?

Re: security issue unde below environment

Marvin Rhoads — Sun, 22 Mar 2020 03:17:02 GMT

Even if you don't buy Cisco Umbrella to protect your endpoints with custom security policies, you can make your DNS resolver the Umbrella Anycast resolver addresses (208.67.222.222 and 208.67.220.220 for IPv4, IPv6 also available).

https://docs.umbrella.com/deployment-umbrella/docs/point-your-dns-to-cisco

Doing this will apply the default Umbrella policies to prevent known bad Malware and CnC sites from resolving.

Re: security issue unde below environment

petercinvest — Mon, 23 Mar 2020 02:45:46 GMT

every laptop and application are up to date patching,and also end point protection with symantic latest patch

my question is we use saas and don't use domain controller, what's the security issue here

Re: security issue unde below environment

Marvin Rhoads — Mon, 23 Mar 2020 03:06:45 GMT

Using SaaS generally implies you are accessing services via your browser on Internet, cloud-based servers.

Does no computer ever access any site that is less than fully secure?

Could even a legitimate site have used third party code to implement their SaaS solution? Code which could have had malware added into it unbeknownst to them or you?