Share what you know with millions of people

Focus is the best place to turn what you know into remarkable content

×

Merv Young

Follow Following Unfollow

30 points

July 13, 2009

Merv Young and 1 other person answered this question

Is a firewall an adequate security measure for current IT environments? Or do I need to implement additional tools?

The short answer is, NO!
A Firewall is only one piece of a very complex puzzle. If you want defense in depth security, you need multiple layers of defense, not just a Firewall.
You need security policies, standards and procedures; Intrusion Detection/Protection, an Anti-Virus solution, ... more

Information Technology

July 10, 2009

Merv Young and 1 other person answered this question

How do I protect myself from VoIP eavesdropping? Does it pose a serious threat to my company?

Agree with Steve. SIPS (SIP over TLS to protect SIP signalling) and SRTP (to protect the media stream) are commonly used to mitigate the risk of eavesdropping, in addition to authenticating SIP requests and responses which includes integrity protection. more

Information Technology

July 9, 2009

Merv Young and 1 other person answered this question

I want to stop intrusion into our network. What security product do you use and like?

.... and what does your Vulnerability & Patch Management program look like at your organisation? Does one even exist? Without such a program in place, any solution you deploy will be a futile exercise if your workstations/servers/switches/routers are plagued with serious vulnerabilities.
Lots to consider! more

Information Technology

July 9, 2009

Merv Young and 5 other people answered this question

Email encryption--do you do it?

When sending confidential information to my vendors, I use PGP/GPG encryption. Cheap, effective solution.

Information Technology

July 9, 2009

Merv Young and 2 other people answered this question

I am going to start having employees work from home. I know a little bit about VPN, but have never used one. What are the cost/benefits between IP Sec and SSL?

At the end of the day, you can have the best VPN encryption, Patch and A/V Management, however, all of this is futile if the end user isn't educated about the different attack vectors crackers are using to compromise systems.
What about those 0-day attacks, ... more

Information Technology

Following 0 Topics

Following 0 People

Followed by 0 People

Knowledgeable in 2 Topics

Information Technology

#489 of 2263

#218 of 300