New Security Tools and VPN

To boil it down to one word, we were shocked when we looked at the alerts we saw for our Trend Micro customers. While your security is good, it can be a lot better. The same goes for our VPN customers. Start watching for the new tools.

Let’s look at overall security first. Three keys to good security – in our opinion – are: malware detection, phishing detection, and reliability. We have joined our colleagues in IT and security in finding that Trend Micro has fallen to average or below-average performance in these areas. We came to our conclusion by comparing the alerts we saw in your systems to industry-wide reports. The software was getting buggier and less effective in our opinion, and we found better tools from a number of other vendors. A key element for us is making sure we keep your system out of danger 24/7/365.

Our new security tools will be a combination of products instead of relying on one vendor. This will give us the ability to tailor stronger tools to your specific needs. We believe all of us will sleep better at night once we have the new tools installed. They will cost a little more, but they will be well worth the investment.

We’re also rolling out a new VPN. While we like ZTNA (Zero Trust Network Access) as a way of verifying access to a network, VPNs are ubiquitous and usually easier to administer. Our new VPN will be easier to maintain (which can help you keep it more secure), and it will create a more locked-down environment (which also keeps you more secure).

The feature I like most about the new VPN is that it allows me to connect to any Wi-Fi network in the world and trigger software to route traffic through a specific device. I have device called a Raspberry Pi, a computer the size of a credit card with the power to run a desktop. I use mine to route all my internet traffic through my home internet to home/office computer. The VPN removes worries about rerouting and who might see my traffic. That’s an important feature if you’re forced to use a public Wi-Fi network or even hotel network that’s supposed to be password-protected. You really can’t be assured one of those networks has been compromised.

If you travel and want access to all your home-based streaming accounts, our new VPN will see your home or office internet if you have it set up to do so.

While we’ll be contacting all of our clients to offer our new security tools and VPN, you can contact us for more information about how they can work for you. Call us – 973-433-6676 – or email us to discuss your objectives and your needs.

ZTNA: Your Security Escort Service

So, here’s the problem that starts at your firewall: Your security setup grants permission to a credentialed user to access your system. The credentials have been authenticated by several methods, and the user is free to move about your apps and files. It’s an everyday occurrence with our mobile, hybrid work systems. But what happens when someone either fools your authentication system or decides to go rogue? ZTNA gives you the ability to follow every user everywhere in your system.

ZTNA stands for Zero Trust Network Access, and it’s based on the premise that you can’t trust any user with unfettered access to your entire system. The rationale for a business to use ZTNA goes back to a security breach at Target more than 12 years ago, when the personal and credit card information for some 40 million customers was compromised. It’s become a classic case study for cybersecurity.

In short, hackers exploited a vulnerability in the system of a third-party contractor, a mechanical engineering firm. Using stolen credentials, the attackers gained access to Target’s systems, where they deployed malware on the company’s point-of-sale (POS) devices. This allowed them to capture sensitive customer information without being detected for several weeks.

Granted, firewall security systems have become much stronger over time, but for most of them, you can access any part of a system once you get past the firewall. ZTNA technology never stops tracking any user as long as they’re inside the network.

  • It grants access only to specific applications and files based on system admin’s determination of each user’s need to know.
  • It assumes every access attempt is risky (zero trust).
  • It continuously monitors a user’s activity and verifies it.

In operation, ZTNA sets up one-to-one connections between users and the resources they need. It’s similar to two people who need to contact each other by exchanging phone numbers. But unlike two people exchanging numbers, ZTNA connections need to be re-verified and recreated periodically.

The technology is also device-based, which is critical in our hybrid work world of BYOD (Bring Your Own Device). ZTNA can incorporate the risk and security posture of devices as factors in access decisions. It does this by running software on the device itself (sort of like a license plate reader) or by analyzing network traffic to and from the device.

While there are variations of ZTNA technology, the bottom line is that the protection of your data – and your clients’ and customers’ data – is priceless. This is where we can help. Call us – 973-433-6676 – or email us to talk about your security needs, your workforce’s access needs and your administrative needs.

Standard or Premium? The Answer to the Question

Microsoft 365 is the app suite of choice for businesses, governmental agencies and institutions all over the world. It comes in two versions: Business Standard and Business Premium. The cost difference is $10 to $15 per month per user, which can be significant for larger organizations. Here’s why we think it’s a good investment: SECURITY.

The Premium version has four security features that the Standard version does not:

  • Microsoft Defender for Business provides advanced threat protection, helping to safeguard against malware and phishing attacks.
  • Intune for Device Management allows organizations to manage and secure devices, ensuring that only compliant devices can access company resources.
  • Azure AD Premium with Conditional Access offers granular access controls based on user identity and device compliance, enhancing security for sensitive data.
  • Advanced Compliance Tools include data loss prevention and message encryption, which help protect sensitive information and ensure compliance with regulations.

Premium is recommended for businesses or organizations with up to 300 users that require enhanced security and device management for:

  • Protecting sensitive data against threats like ransomware and phishing
  • Managing devices, especially for remote work
  • Compliance with regulations

Microsoft 365 Business Premium incorporates some principles of Zero Trust Network Access (ZTNA) such as identity verification to control access to applications and resources and continuous verification to verify user identities and device compliance before granting access.

If you have Microsoft 365 Business Premium deployed in your organization, you can always scale up to a full ZTNA program. You and the people in your organization will already be familiar with its principles, and that should ease the migration.

If you’re thinking about moving more of your technology to the cloud or if you want to strengthen your security with measures such as access control and device management, you should talk to us about moving up to Microsoft 365 Business Premium. We can configure it to meet the needs of your organization. Call us – 973-433-6676 – or email us to set up a conference.

Is ‘Zero Trust’ in Your Future?

The words “zero trust” in Zero Trust Network Access (ZTNA) are probably appropriate in a time when it seems like we don’t trust anybody about anything. ZTNA is being touted as a replacement for VPNs (Virtual Private Networks), especially for remote business needs. It could be more effective, but small businesses will need to jump through hoops.

ZTNA is a technology designed to limit who can access a network and where in the network they can go. The limits are important. For example, anyone who can access a Microsoft 365 network as a global administrator can effectively play God; they can do ANYTHING.

The goal of a ZTNA is to keep out false gods. Its proponents tout the following benefits:

  • Invisible infrastructure: ZTNA allows users to access applications without connecting them to the corporate network, thereby eliminating risk to the network.
  • More control and visibility: Managing ZTNA solutions is easy with a centralized admin portal with granular controls. Managers can see everything and create access policies for user groups or individual users.
  • Simpler app segmentation: Because ZTNA isn’t tied to the network, organizations can segment access down to individual applications instead of complex network segmentation.

Proponents further contend ZTNA is faster and more convenient than VPNs, offer better security, and are easier to manage. Gartner, a technology and research consultancy for large corporations and government, predicts its client base will largely phase out VPNs for ZTNA.

If you’re a small business or nonprofit organization that deals with large companies and government agencies, you may need to learn how to live in the world of ZTNA at the very least. If you want to adopt for your own use, you’ll need to answer some risk/reward questions:

  • Do you need a Ft. Knox type of defense system?
  • Are you willing to build new access systems to maintain your current business process?
  • Are you willing to take on the learning-curve risks of implementing a new security system?

There are no cookie-cutter solutions to changing your security measures. Call us – 973-433-6676 – or email us to discuss the specifics of ZTNA, especially if you need to use it to comply with another organization’s directive. We can help you design and implement a plan that minimizes your risk as best as possible.