Security measures to protect your servers

Most businesses find data security just as important as physical security. Would you leave critical business information, intellectual property and client data that you store on your servers, sitting on your desk with the door unlocked? No, you would not, and that’s why you shouldn’t leave it stored on your servers without putting adequate measures in place. Most people know how to use firewalls and antivirus software but lack the knowledge to protect their servers. This blog is here to help keep your server clean and in the best working condition.

Here are some of the security measures:

• Don’t install packages/applications you don’t need

By running a high number of applications, you expose the system to more threats. This means the vulnerability exploitation ratio may rise, as the attack surface grows. Also, remove applications that have been installed “by default” and which you don’t even use.

• Keep everything up to date

Hackers work round the clock to find and exploit vulnerabilities. Find time for regular updates.

• Monitor applications you use for updates

Subscribe to as many security feeds as you need to and keep a close watch on vulnerabilities.

• Firewall

Use iptables and close every port that you don’t use. Never leave gaps.

• Pentest

Test for vulnerabilities and fix everything you can. If you find them, then your system is exposed, and someone else might find them as well if they haven’t so far.

• Log everything

Constantly monitor all logs and set a date for doing this. Monitoring logs should be respected rigorously.

• Document system changes

You are only human, and humans forget. For safety reasons, everything you do should be documented.

• Back up everything

Disaster recovery should be the top priority on your list. Always be prepared for the worst.

• Remove all compilers and network scanning tools

Especially network scanning tools. In case a breach occurs, you don’t want to help the hacker map your network.

• Set strong passwords

Strong passwords should have at least 16-20 characters, in which uppercase, lowercase, special characters and digits are included. Of course, a great password is nothing if it’s not changed from time to time, for example, once every 3 months at least.

• Carefully manage user privileges

Great systems are used with care, so each user should be limited only to what they need.

• Accept connections from trusted IP Addresses only

This is another limitation for attackers who will never know your trusted IP Addresses.

To find out more about our security services, as well as our antivirus security, contact us today at support@techtron.co.za.