The perimeter.
WHAT TO ADDRESS FIRST
The router itself.
WHY
It is the device exposed to the internet, and it is attacked continuously.
WHAT TO DO
Change default credentials Apply firmware updates Disable services you do not use Restrict administration to the local network
WHAT SERVICES TO DISABLE
Remote administration from the internet Universal plug and play, unless required Any legacy protocol you do not use
WHY UNIVERSAL PLUG AND PLAY
It allows devices to open the firewall without your knowledge.
WHAT PORT FORWARDING DOES
Exposes a device inside your network to the internet.
WHEN IT IS NECESSARY
Rarely, for most businesses.
WHAT TO DO INSTEAD
Use outbound connections or a hosted service.
WHAT TO NEVER EXPOSE
Remote desktop Cameras and recorders Databases Administrative interfaces
WHY CAMERAS SPECIFICALLY
Exposed recorders are routinely found and compromised.
WHAT TO USE FOR REMOTE ACCESS
An encrypted tunnel, with authentication.
WHAT TO SEGMENT
Guest devices Payment systems Cameras and other connected devices
WHY CONNECTED DEVICES
They are rarely updated and frequently insecure.
WHAT TO MONITOR
Unusual outbound traffic Devices you do not recognise Configuration changes you did not make
WHAT TO KEEP
A record of the configuration.
WHAT TO REVIEW PERIODICALLY
What is exposed, and whether it still needs to be.
