security issue unde below environment

[petercinvest]

we set up a small company, no domain controllers, work mostly on Macs and Linux with some Windows, and utilize SaaS for application.  nonetheless we still want to do our best to protect the security of our IT system, can you give me any name of tools (besides end point anti-virus, firewall, ips/ids) or suggestions how to protect security  if no domain controller and under saas

[Leo Laohoo]

---

@petercinvest wrote:

work mostly on Macs and Linux with some Windows

---

Those computers, are their OS up-to-date?  The applications in those computers, are they up-to-date? 

The router/modem that connects the computers to the internet, is it up-to-date with firmware and patches?  What is the "latest" patch/firmware release?  >1 year? 

Passwords - how complicated are they?  

[petercinvest]

every laptop and application are up to date patching,and also end point protection with symantic latest patch

my question is we use saas and don't use domain controller, what's the security issue here

[Marvin Rhoads]

Using SaaS generally implies you are accessing services via your browser on Internet, cloud-based servers.

Does no computer ever access any site that is less than fully secure?

Could even a legitimate site have used third party code to implement their SaaS solution? Code which could have had malware added into it unbeknownst to them or you?

[Marvin Rhoads]

Even if you don't buy Cisco Umbrella to protect your endpoints with custom security policies, you can make your DNS resolver the Umbrella Anycast resolver addresses (208.67.222.222 and 208.67.220.220 for IPv4, IPv6 also available).

https://docs.umbrella.com/deployment-umbrella/docs/point-your-dns-to-cisco

Doing this will apply the default Umbrella policies to prevent known bad Malware and CnC sites from resolving.