03-21-2020 05:50 PM
we set up a small company, no domain controllers, work mostly on Macs and Linux with some Windows, and utilize SaaS for application. nonetheless we still want to do our best to protect the security of our IT system, can you give me any name of tools (besides end point anti-virus, firewall, ips/ids) or suggestions how to protect security if no domain controller and under saas
03-21-2020 06:34 PM
@petercinvest wrote:
work mostly on Macs and Linux with some Windows
Those computers, are their OS up-to-date? The applications in those computers, are they up-to-date?
The router/modem that connects the computers to the internet, is it up-to-date with firmware and patches? What is the "latest" patch/firmware release? >1 year?
Passwords - how complicated are they?
03-22-2020 07:45 PM
every laptop and application are up to date patching,and also end point protection with symantic latest patch
my question is we use saas and don't use domain controller, what's the security issue here
03-22-2020 08:06 PM
Using SaaS generally implies you are accessing services via your browser on Internet, cloud-based servers.
Does no computer ever access any site that is less than fully secure?
Could even a legitimate site have used third party code to implement their SaaS solution? Code which could have had malware added into it unbeknownst to them or you?
03-21-2020 08:17 PM
Even if you don't buy Cisco Umbrella to protect your endpoints with custom security policies, you can make your DNS resolver the Umbrella Anycast resolver addresses (208.67.222.222 and 208.67.220.220 for IPv4, IPv6 also available).
https://docs.umbrella.com/deployment-umbrella/docs/point-your-dns-to-cisco
Doing this will apply the default Umbrella policies to prevent known bad Malware and CnC sites from resolving.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide