One of the aspects in which more effort and time must be
spent in server management is the configuration of a good security system . We
can have several servers on the network in a conveniently enabled space at our
company headquarters, but if we have not put a security system in place to keep
the server safe, everything you keep on them may be in danger.
Whether you own the hardware yourself in your business, or
you are managing one or more dedicated servers that you have rented from a
vendor yourself , security is especially important in computer maintenance .
Server security systems must consider various aspects, which we will see below.
Security system for a server
Once the server is created and it has been verified that
everything works well, it is advisable to install the entire security system
before starting to work with it. For that we will use several tools or programs
for servers.
•IDS: is the acronym for Intrusion Detection System. It is a
system to detect intruders on your server. A very useful tool for this is the
Snort software. In accordance with the security policy that you have
established in advance, it will perform certain actions. Example: you can sequencer
it so that if it detects that someone is connecting from a certain IP at a time
of day when you know that the person in charge of the server is not working, the
problem will send you an alert indicating the IP number of the computer from
where the connection occurred. Connection.
•IPS: the previous tool works in accordance with the IPS
(Intrusion Protection System. Once we know that the connection has taken place
and it was not authorized, the IPS can request the Firewall to prevent access
to all ports from the IP that they have registered.
•Firewall: firewalls are oriented to work by default; they
allow some actions and do not allow others. Its mission is to control access to
the network or the server, as well as the activity carried out with it. It is
also known as a firewall. It can be programmed so that it only allows access
from a certain static IP and no one can connect from other devices.
•Hardening: we can translate it as “hardening”. These are
practices to minimize server vulnerabilities. A clear example is if we use SSH
protocols to enter, which are on port 22, change that entry port to a different
one. We can also prevent root as a user at login or limit access to other
users.
Following good practices and subjecting your servers to
trials or tests to verify their security level may be necessary if you have
already had a security problem on any occasion. In any case, we recommend that
you contact our IT maintenance experts .
newyorkersblog cosmopolitansblog realsimpleblog nextwebblog theinformativeblog
