Loading ...

Category: Network Security

Setup Synology LDAP Server & Certificates

This is the forth in a series that documents the Tier 3 / Co-Managed IT work we did to setup a wireless test bed for a Linux based scientific device. The testing environment included two different wireless network hardware types (Ubiquiti and Cisco). There was also a Synology device used for various purposes including hosting the Ubiquiti controller inside a Kubernetes container, providing certificate services, providing LDAP authentication, and providing RADIUS authentication. Each article will detail a separate piece of the project. This article shows the setup Synology LDAP server & certificates.

Setup LDAP Server

  1. Login to Synology
  2. Open Package Center
  3. Install LDAP Server app
  4. Open LDAP Server package
    • Enable LDAP Server
    • Create FQDN (something like Test.local)
    • Create password
    • Enable Synology LDAP Server
    • Change Connection Settings
      1. Disallow anonymous binds
      1. Force clients to use encrypted connections
      1. Change timeout to 10 minutes
      2. Click OK
      3. Synology LDAP Server Connection Settings
    • Click Apply
    • Click on Manage Groups
      • Click on Create
      • Give the Group a name
      • Click Next
      • Click Done
      • Synology LDAP Server Add Group
    • Click on Manage Users
      • Click on Create
      • Give the User a name
      • Add user email if appropriate
      • Create password
      • Click Next
      • Check mark next to new group previously created
      • Click Next x2
      • Click Done

Connect Synology to LDAP Server

  1. Open Control Panel
  2. Click on Domain / LDAP on left hand side
  3. Click Join
    • Enter IP address of Synology
    • Synology Join LDAP Server
    • Enter Admin username / password
    • Choose STARTTLS encryption
    • Copy Base DN from LDAP Server app Settings tab
    • Click Next
    • Synology Join LDAP Server2
    • Connection parameters will be check (fix any issues)
    • Synology Join LDAP Server Checks

Configure LDAP Certificates

  1. Open Control Panel
  2. Click on External Access
  3. Click on DDNS tab
  4. Click Add
    • Choose Synology as service provider
    • Add hostname
    • Click Test Connection
    • Synology DDNS Setup
    • Click OK
  5. Click on Security on left hand side
  6. Click on the Certificate tab
  7. Click on Add
    • Add new certificate
    • Synology Add Certificate
    • Click Next
    • Create description
    • Get a certificate from Let’s Encrypt
    • Synology Add Certificate Lets Encrypt
    • Click Next
    • Add needed certificate information
    • Synology Add Certificate Lets Encrypt Info
    • Click Done
  8. Click Settings button and choose appropriate LDAP server certificate

If your company has highly customized setup requirements that you need consulting for, then contact us for assistance.

The Importance of Cyber Security Training

In today’s digital age, where technology has become an essential part of our lives, ensuring the security of our online information has become more crucial than ever before. With cyber threats and attacks on the rise, it is vital for individuals and organizations to invest in comprehensive cyber security training. In this blog article, we will explore the importance of cyber security training and why it should be a top priority for everyone.

Protecting Confidential Information

One of the main reasons why cyber security training is essential is to protect confidential information. In our increasingly connected world, we store sensitive data, such as financial information, personal details, and business data, online. Without proper training, individuals become vulnerable to malicious attacks, such as phishing scams, data breaches, and identity theft. Cyber security training equips individuals with the knowledge and skills necessary to identify and prevent such threats, ensuring the protection of confidential information.

Mitigating Financial Losses

Cyber attacks can have devastating financial consequences for individuals and organizations. The cost of recovering from a cyber attack, including restoring compromised systems, investigating the breach, and compensating affected parties, can be significant. By investing in cyber security training, individuals and organizations can minimize the risk of falling victim to cyber attacks, thereby avoiding potentially crippling financial losses.

Safeguarding Reputations

In today’s hyper-connected world, reputation is everything. A cyber attack not only compromises the security of your information but also tarnishes your reputation. News of a data breach or cyber attack can spread like wildfire, damaging the trust that customers, clients, and partners have in you. By taking proactive measures and investing in cyber security training, individuals and organizations can safeguard their reputations and maintain the trust of those they interact with.

Staying Ahead of Evolving Threats

Cyber threats are constantly evolving, with hackers employing new techniques and strategies to breach systems and access sensitive information. Cyber security training ensures that individuals and organizations stay up to date with the latest cyber security practices, emerging trends, and new vulnerabilities. By staying ahead of evolving threats, individuals can better defend themselves against attacks and organizations can maintain a robust cyber security posture.

Building a Culture of Cyber Awareness

Cyber security is not just the responsibility of IT professionals; it is everyone’s responsibility. By promoting cyber security training, organizations can build a culture of cyber awareness among their employees. Ensuring that employees are equipped with the necessary knowledge and skills to identify and report potential threats reduces the attack surface and strengthens the overall security posture of the organization.

Conclusion

In a world increasingly reliant on technology and interconnectedness, the importance of cyber security training cannot be overstated. From protecting confidential information to mitigating financial losses and safeguarding reputations, cyber security training is crucial for individuals and organizations alike. By investing in comprehensive training programs, we can enhance our ability to identify and prevent cyber threats, ultimately creating a safer digital environment for all.

If your company is one of the 47% of companies that plan to add or change their cybersecurity solution this year, then contact us for assistance.

[Portland Tribune] What can hackers do with stolen DMV information?

Farmhouse Networking was recently approached by the Portland Tribune for comment on the hack of the DMV. We were quoted in their article published yesterday. Here is our full advice:

What to do post DMV hack?


The breach that effected the Oregon DMV was part of a larger hack of the software known as MOVEit. The exploit of the vulnerability in this software was used to gain access to over 3.5 million Oregonians information including:

  • Name
  • Home and mailing address
  • License or ID number
  • Last four digits of Social Security number

This information can be used by hackers and other darkweb criminals to assume the identity of those whose information has been compromised and perform identitiy theft activities like applying for credit cards or tax fraud. Anyone with an active Oregon ID card or driver’s license should begin monitoring their credit report and look for any suspicious activity. If suspicious activity is found they should immediately call the following to freeze their credit and take actions to reverse the damages done:

Equifax: equifax.com/personal/credit-report-services or 1-800-685-1111
Experian: experian.com/help or 1-888-397-3742
TransUnion: transunion.com/credit-help or 1-888-909-8872

If your company is concerned about the possibility of a similar breach, then contact us for assistance.

Our New Email Analysis and Education Tools Helps Keep Your Employees Safe

Phishing-Scams

As you know, we take cybersecurity and the protection of your accounts and data very seriously. That’s why we are always striving to provide you with tools and resources to help keep you and your employees safe from cybercrime.

The most common threat we are seeing is phishing messages delivering malware or stealing credentials. Even though your company might be protected with spam filtering, there are instances where these malicious messages could still appear in your employee’s inboxes. And it’s important we both arm them with as much education and resources as possible to understand and identify these phishes.

We have a new tool that we’d love to demonstrate for your or talk more about. It’s called Catch Phish, and it’s an email analysis and training tool. It connects right to your employee’s Outlook as a clickable application on every message. When clicked, the tool quickly, but safely, scans the important details of the message to find potential threats such as suspicious links or attachments, sender details, or message details such as threatening language or deactivation scares.

This tool is included in our cybersecurity training packages and can help provide the much needed cybersecurity education to all levels of staff.
 
Do you have 30 minutes to talk about reducing your risks with Catch Phish and our other cybersecurity awareness training tools, then contact us for assistance.

Cost of Insuring Your “Digital” Employees

We were discussing the price customers paid for their monthly maintenance of computers and the comparison was brought up about insurance costs. As a business owner with employees, it is necessary these days to offer health insurance as part of their compensation package. If the company has vehicles that are used for business, then the government mandates that they be covered by minimum amounts of insurance. These costs are then built into the price the business owner then charges their clients for products or services.

Insurance Statistics: 

  • According to Business.com, the average cost of health insurance for a single employee was $645 per month and $1,850 per month for a family.
  • According to NerdWallet.com, the average cost of car insurance was $179 per vehicle per month. 

Questions:

So what about the “digital” employees of the company, aka the computers and network equipment that make business possible. How much are business owners paying to “insure” these assets? What are businesses willing to pay to make sure that their computers and network don’t have a sick day? Does the cost of insuring them include preventative care? Who does the business call in case of an accident or breakdown in the middle of the day? Does the cost of insuring include on-site service or transport to a service center?

If your company wants to keep their digital employees healthy and insure them from accidents, then contact us for assistance.

What every business has in common?

Every modern business has one thing in common – the internet.

Businesses are using computers, smart phones, tablets, etc. to connect to the internet for research, shopping, advertising, or any number of things. With a connection to the internet comes the need for routers, switches, wireless, and other network hardware to distribute internet connectivity across the company. There are malicious people on the internet that are setting traps and trying to break into companies which necessitate the use of tools like antivirus, internet filtering, spam filtering, and other protective measures. There are also people who work from their homes and need to have a way of tunneling safely into the network to use the resources there. 

All of this has to be managed by someone in the company or you can contract with a managed IT service provider. 

If your company needs help managing all the things connected to your internet, then contact us for assistance.

Zero Trust – Cyber Security Audit

Security Audit - Grants Pass, OR

This is the tenth and finale in a series about the concept of Zero Trust, which means in the IT sense that you trust nothing and always verify everything surrounding and connected to your network. Today’s discussion will be on Cyber Security Audit. 
 

Cyber Security Audit

Cyber Security Audit is a process where both internal and external systems are tested for their ability and susceptibility to being successfully attacked by hackers. This usually involves an inventory of current systems, research into known vulnerabilities, and testing of those found to see what information can be accessed. Once this process is complete a report is generated to detail both what is found and how those vulnerabilities can be addressed to protect the business’ most valuable commodity – information (intellectual property and client data). Here are some questions to ask:

  • Do you have an inventory of all assets in your organization? Is it up to date?
  • Have you tested your internal network for vulnerabilities?
  • Have you had a penetration test performed on your external network?
  • Do you know what compliance standards apply?
  • How do you document policies and procedures? Who oversees that?

If your company is wanting to have a free cyber security audit, then contact us for assistance.

Facts vs. Feelings in Online Scams

When you think of cybersecurity, love and emotions are likely some of the last words that come to mind. However, scammers regularly depend on emotional connection to achieve their devious goals. According to the FBI, romance scams are at an all-time high, and accounted for the third highest internet crime loss in 2021.

Here at Farmhouse Networking, we account for human nature, and specifically gear our trainings towards helping people separate facts from feelings. When it comes to online romances, here are our top 3 red flags to look out for:

  1. Things are intense: Online scammers want to act quickly before you suspect anything. They may profess their love for or even propose marriage after just a few months of talking.
  2. Promises are broken: Since there is often an element of catfishing in romance scams, scammers may make plans to meet over video or in-person, but come up with last minute excuses to cancel.
  3. They are far away: Similarly to #2, posing as a member of the military or international business person are common profiles of scammers, since they can easily avoid having to meet in-person.

Thanks to feelings of loneliness and isolation that often accompany winter, December through February is peak season for romance scams. Farmhouse Networking’s goal is for your employees to always feel confident and empowered to see through all kinds of phishing attempts. Thank you for being a valued customer, and know that we are always here to support you.

Protect Yourself from Social Media Scams: The Top 5 to Watch Out For

In today’s social media age, we are more interconnected than ever before. While this can be great for keeping up with loved ones and shedding light on current events, it also opens a new door for scammers.
Last year, annual reported losses from social media scams hit $1.1 billion. Here are the five most common types and our recommendations for protecting yourself, and your business, from them:

  1. Phishing Scams: Scammers attempt to trick you into revealing personal information by posing as a trustworthy source in an email or message. To avoid these scams, never click on links from unknown sources and always verify the sender’s identity.
  2. Impersonation Scams: Scammers create fake profiles and impersonate others to deceive and scam others. To avoid these scams, check profiles for authenticity by verifying their information, friends, and photos.
  3. Giveaway Scams: Scammers promise a prize or giveaway in exchange for personal information or a payment. To avoid these scams, never give out personal information, and only participate in giveaways from reputable sources.
  4. Investment Scams: Scammers promise high returns on investments, but it is just a trick to steal your money. To avoid these scams, do thorough research before investing, be cautious of unrealistic returns, and don’t fall for pressure tactics.
  5. Malware Scams: Scammers use social media to spread malicious software that can harm your device or steal personal information. To avoid these scams, don’t download anything from untrusted sources and keep your device’s security software up-to-date.
    Our goal at (Company Name) is to keep you safe while you’re scrolling. Speaking of social media, feel free to follow us @[handle] on Facebook and @[handle] on Instagram for more security tips and product updates.

Our goal at Farmhouse Networking is to keep you safe while you’re scrolling. Speaking of social media, feel free to follow us on LinkedIn for more security tips and product updates.

Zero Trust – Network Security

This is the ninth in a series about the concept of Zero Trust, which means in the IT sense that you trust nothing and always verify everything surrounding and connected to your network. Today’s discussion will be on Network Security. 

Network Security

Network Security is having the proper hardware and configuration of that hardware in place to protect the business network. This configuration includes segmenting network traffic to keep specific types of traffic, like guest devices, separate from traffic of business devices. It also includes keeping outsiders out of the network and detecting when they have breached security measures. Here are some questions to ask:

  • Do you have a business class router / firewall?
  • Do you have business class switches and access points that support segmentation?
  • Is your network configured to segment business traffic from guest traffic?
  • Are devices like VoIP phones and network cameras on their own network?
  • Is geo-location blocking turned on for non-essential countries?
  • Is network traffic being analyzed for suspicious activity?
  • Do you filter internet traffic?
  • Can your network detect and respond to a breach?

If your company is wanting to lock down network security, then contact us for assistance.

Archives

Categories

Plant a Seed @ 541-761-9549
233 Rogue River Hwy #873 Grants Pass, OR 97527
Mon-Fri: 9:00am-5:00pm
support@farmhousenetworking.com
© 2016-2024- Farmhouse Networking. All rights reserved
Terms and Conditions Privacy Policy

Evaluation Signup

[contact-form-7 id="452" title="Free Network Evaluation"]
And God will generously provide all you need. Then you will always have everything you need and plenty left over to share with others. As the Scriptures say,
“They share freely and give generously to the poor. Their good deeds will be remembered forever.”
For God is the one who provides seed for the farmer and then bread to eat. In the same way, he will provide and increase your resources and then produce a great harvest of generosity in you. - 2 Corinthians 9:8-10