Source: CNSSI 4009
Related Terms: Intrusion Detection, Intrusion Prevention, Network Segmentation
What should you do as a SMB?
As an SMB, it is important that you have a firewall in place for all Internet connected locations. A firewall is minimum essential security solution that prevents attackers from from breaching your systems and network. Just as important as having a firewall is enabling the many security features they contain to protect your infrastructure.
Network segmentation is also an important capability that should be leveraged with a firewall to create unique and distinct networks based upon work function in your internal network to limit the spread of malware or hackers who might breach one area but not all areas of your network.
Firewalls are commonly deployed in SMB’s with Wireless Network capabilities that allow you to physically and logically segregate guest WiFi networks from trusted WiFi networks. Make sure you tie your Trusted WiFi network into your Active Directory user accounts (using Radius) instead of a static password. This eliminates a common risk of terminated employees sitting on your trusted WiFI network in the Parking lot to siphon off sensitive data or cause additional harm to your company.