Yes, I said, how’s your insurance?

It’s been twelve years since I’ve been a property and casualty insurance agent but when a client contacted me about replacing or repairing a damaged newly purchased laptop I found that my insurance cap still fit. In short, off site a staff person had somehow damaged the screen on a three week old laptop and my initial response was to contact the manufacturer and see if they would assess the damage and repair or replace the machine. Second, I suggested that she should see what her insurance company would cover for the damage.

I have no intention of going back into the insurance business but this incident got me thinking, my client with this latest purchase now has approximately 20 laptops assigned to various staff persons who work not only from home but also numerous other official and unofficial locations and the fact the only two machines have been damaged in the last 4 years is a miracle. Whether your company has 50 staff members or one, with the large number of laptops and mobile phones in circulation the possibility of damage, loss, or theft is inevitable. Beyond the loss of data and security risks from missing devises is the cost of replacing which is always a financial hit. For large companies this is the cost of doing business but for small companies the replacement of computers, time lost while recovering data and the loss of critical information can be devastating. An insurance policy that replaces the laptop or telephone can help easy that blow.

Not only for laptops, but as a business person when was the last time you reviewed your insurance policies, I’ve made a list of several areas that you should review for the New Year:

  • Warranties: I always purchase at least 3 year warranties and support packages on all servers I install; the primary issue for me is down time. I may be able to fix a certain computer issue but if I can save time then I’m also saving my client money with less aggravation. Personally, since my laptops are my business I initially purchase 3 year warranties as I buy new equipment it reduces the headaches.
  • Business Personal Property: Many of us now work from home either as consultants, Solopreneur, or just telecommuters. What’s covered by your home owners’ policy? Do you need a separate business policy? Not just your laptop but what about printers, furniture, etc. Although some things will be covered by your home owners’ policy, I suggest that you make a list of your business assets and talk with your homeowners/renter policy Insurance agent.
  • Business Liability: Are potential clients coming to your home or office (I’ve deliberately excluded coffee shops!). If they slip and fall are you liable? Is your homeowners/renters’ policy going cover a liability issue for a business meeting? Also, if you work on client property in your home or office, “care, custody, and control”, what is the extent of your responsibility and how you are covered?
  • Errors and Omissions: Whether you are installing networks, creating and maintaining web sites, organizing someone’s office or giving financial advice please check regarding you vulnerability when working with clients whose expectation about the completed project may differ from yours.
  • Loss of Use/loss of wages: This could be a big issue in the event of a major natural disaster or local catastrophe, if you have expectations for FEMA or some governmental agency rescuing you in this scenario, I think this is another item to discuss with your insurance broker. If you are truly doing disaster planning this should be incorporated in how fast you can recover and return to business.

As I said from the beginning, the New Year is a good time to look at how you will do business for the future and disaster planning is more than is your data backed up. Here’s wishing you a happy and prosperous New Year!

Share and Enjoy:
  • Print
  • Digg
  • Sphinn
  • del.icio.us
  • Facebook
  • Mixx
  • Google Bookmarks
  • Blogplay
  • Add to favorites
  • Fark
  • LinkedIn
  • RSS
  • Technorati
  • Twitter

Is your wireless naked? Last Post.

You can never be too serious about network security whether it is a wired or wireless network. Brian Posey makes a case in his last wireless security article that wired networks can be more vulnerable than secured wireless networks unless some form of network access control is employed.

On a wired network anyone who plugs into a network jack can have access not only to the internet but also open access to your network. With the ready availability of mobile storage devices (flash drives and pocket hard drives) not only is the copying of sensitive data easy but malware can also be introduced into your system. Initially, this seems like a digression regarding our discussion about wireless security but this is really only a different side of the same coin.

The question is what are you doing to secure your wireless networks? I generally discourage businesses that have high visitor traffic from setting up wireless network or, if visitors need to have wireless access, I set up a separate non-domain (separate addressing scheme and DHCP server) router/access point. On the other hand the accountant or compliance auditor expects to plug into your network as a mere sign of courtesy.

In his final post regarding general wireless network security, Brian Posey outlines some basic concerns regarding wired versus wireless security: http://www.windowsnetworking.com/articles_tutorials/Securing-Wireless-Network-Traffic-Part5.html?printversion.

Share and Enjoy:
  • Print
  • Digg
  • Sphinn
  • del.icio.us
  • Facebook
  • Mixx
  • Google Bookmarks
  • Blogplay
  • Add to favorites
  • Fark
  • LinkedIn
  • RSS
  • Technorati
  • Twitter

Brian Posey’s Wireless Security Continued

Brian Posey’s fourth wireless security article touches on the more technical aspects of routers and security.

Encryption is a standard for any SOHO deployment of a wireless access point, a fact which Posey explains. Furthermore, he briefly touches on UTM routers (Unified Threat Management) which have the capacity to provide additional security features such as gateway virus protection, gateway spam filtering, content blocking, website blocking, and RBL (Real-time Black Lists) for blocking unsecure email sites. I like the idea of UTM routers but I’m not clear on how effective these devices are for anti-virus and spam protection. (I prefer third party inbound email filtering.) More to the point, I would  prefer that Brian or someone else to provide us with a clear picture of UTM routers.

From a small office/home office point of view, we should note that not only are these routers more expensive but many of the additional security features are enabled only on a subscription basis; thus, adding to the overall budget picture. While we wait for Mr. Posey’s final article on wireless security, I will look for a more comprehensive discussion of UTM routers. Again, part of our focus is to familiarize business owners with sites that increase our overall knowledge on the issues of office networking.

Share and Enjoy:
  • Print
  • Digg
  • Sphinn
  • del.icio.us
  • Facebook
  • Mixx
  • Google Bookmarks
  • Blogplay
  • Add to favorites
  • Fark
  • LinkedIn
  • RSS
  • Technorati
  • Twitter

What is your Pain Quotient?

Several months ago I was approached about how to determine when a business owner should outsource their technology needs. Originally I wrote almost 900 words but decided it was pontifical and still hadn’t gotten closer to a true guideline. I’ve tried several other times to write this article but was challenged by my content editor that I sounded too much like a sales person.  During the post-Thanksgiving and pre-Christmas period I re-read Rework by Jason Fried & David Heinemeier Hansson of 37 Signals. I was reminded that businesses should hire to alleviate pain.

When you started your business you knew everything about the business and you wore many hats from product/service development, delivery of service, network administrator, and janitor. This not only saved you money but “it’s your baby”; you want to nourish every aspect of growth because it is YOURS. As a “solopreneur” some of these roles never change but whether you are a one person CEO or master of a 30 person company, as a small business owner there are several aspects of network administration that we think you should know or at least have documented at your site:

  • Know your passwords
  • Know how to properly start and restart your server
  • Know how to add or disable a network user
  • Know how to change a password
  • Know how to check to make sure your backup is running
  • Know how to restore a file from backup
  • Know how to check if your antivirus is up to date
  • Know how to run and schedule a virus scan.
  • Are your system security patches up to date? Are you only relying on MS/Apple updates?
  • Do you have a recovery plan? Could you start over again if you had to?
  • (See more…)

In the beginning, computer/networking was easy and you had time to learn not only about computers but you also learned about printers, routers, firewalls, Office software, QuickBooks, etc. Besides, how much trouble can one computer be? Yet as time marched on and things changed, you probably focused more and more on your marketing and providing good customer service.

You save money by being your own janitor or network administrator and this is a good practice as long as everything is housed in your second bedroom or garage. But when you move to an office suite the trash is sometimes forgotten and the office manager only vacuums the reception area and conference room. In short, it is no longer convenient and control has been relinquished. The same applies to your network; if you or someone isn’t checking on your daily/weekly backups, taking care of the printer that requires constant restarting, applying the security or product updates for your workstations, or monitoring your client/ inventory/business software then it’s time to seek assistance. In short, what is your pain quotient?

Many of us view our pain in a “break fix” fashion or better yet all problems are approached from the “If it ain’t broke don’t fix it” position.  For the occasional break down this is a workable philosophy, i.e., printer, router, or hard drive failure. On the other hand, how much time does a reoccurring problem cost you? How much is your time worth? Did you interrupt your business call to crawl on the floor because you lost your connection to the internet again? How long can you afford to be offline? If you no longer have time to maintain your list of network “should’s” and you’re still crawling around on the floor pulling wires instead of making a sales calls, then you’ve reached your network pain apex. Is it time to outsource your IT network support?

Share and Enjoy:
  • Print
  • Digg
  • Sphinn
  • del.icio.us
  • Facebook
  • Mixx
  • Google Bookmarks
  • Blogplay
  • Add to favorites
  • Fark
  • LinkedIn
  • RSS
  • Technorati
  • Twitter

Is your wireless still naked? #2

In my last wireless post I mentioned that Brian Posey was writing a series on wireless security and rather than duplicate effort I direct you to his latest blog postings on wireless security. Brian reiterates what we discussed in our article about simple security, i.e., most wireless appliances are configured through your web browser and the default user name and passwords are well known and used by everyone. Changing the default password is a simple security step which many techs either don’t configure or forget to configure. The excuses that access to the access point is infrequent and over time passwords may be forgotten only means that the network hasn’t been documented. As to default passwords, as Brian covers in his article,  the following chart is a case in point.

Common Wireless Device Browser Access Defaults
Device

Access Address

User-name

Password

Linksys

http://192.168.1.1/

“blank” or admin

admin

Netgear

http://192.168.0.1 or http://192.168.1

admin

password or 1234

Trendnet

http://192.168.1.1

admin

admin

DLink

http://192.168.0.1

admin

“blank” or admin

Now before you get upset that I’ve given up the farm, just think are you using the default passwords with your wireless access points; are you using the default IP address; did you know that this information is readily available from the manufacturers support site? Take a little time, read Brian’s article, and think about it. Are you going to make any changes?

Share and Enjoy:
  • Print
  • Digg
  • Sphinn
  • del.icio.us
  • Facebook
  • Mixx
  • Google Bookmarks
  • Blogplay
  • Add to favorites
  • Fark
  • LinkedIn
  • RSS
  • Technorati
  • Twitter

Is your wireless naked?

Over the years I have always been reluctant to endorse or install wireless networks for clients, but who am I fooling as I set in my neighborhood coffee shop and begin this post? Wireless networking is fact of life for all of us, so let’s be clear that the primary issue with wireless networks is always security. Wireless network security has two major points of vulnerability: 1. Laptop vulnerability in open networks and 2. Securing wireless access points (wireless routers).

Whether your workstation is wired or wireless it can always be a target for hackers or malicious malware (viruses, Trojans, worms, etc.). All networks should have a physical/hardware firewall separating the network computers from the Internet. Depending on the level of sophistication, the firewall can not only provide separate private addresses for the local network, thus separating the local network from internet, but more sophisticated firewalls can also control or limit the type of inbound and outbound traffic. In many coffee shops and open networks there is no access control except network address translation (NAT) to provide private addresses for multiple machines which allows them to access the internet using one internet connection. This is done to accommodate all wireless users that may come in wanting to use the wireless internet.  Some “hot spots” require a web interface logon which may require an additional paid access or some kind of acknowledgment (room number or agreement) which may mean that remote access is better controlled with increased security. In addition, some of these locations may limit remote access Virtual Private Networking (VPN) or remote desktop access (RDP) allowing only web based email or Remote Web Workplace connections. In that case, however, the security is increased.

On the other hand, you are at the local neighborhood coffee shop and what do you do?

Install a personal firewall! The following links provide a list of current personal firewalls including several that are free: http://www.firewallguide.com/software.htm#Top_Picks and http://personal-firewall-software-review.toptenreviews.com/. I don’t make any recommendations because other than intrusion defense the various models work differently. Some are configured automatically (my favorite) while others are more technical; if you don’t know what SMB or ICMP means, work with the more easily managed applications.

As stated earlier, I believe all sites whether office or home should always have a physical firewall in place and wireless routers can also serve that purpose. Note that the range can be varied both in function and cost; recently one of the professional magazines to which I subscribe gave a list of 5 quality WLAN (Wireless Local Access Network) adapters: http://www.channelpro-digital.com/channelpro/201009?folio=20#pg22. Take time to do a little research about the appliance you want to buy; besides being rated for bandwidth speed, I recommend that the appliance have a web interface that you can understand and if you are using virtual private networking to access a site make sure that its firewall can be configurable and that it allows VPN pass through. When I encounter a router that I’m not familiar with, I go to the manufacturer site and look at the user manual and view not only technical specs but also how to configure the router for my clients.

Finding the right wireless adapter/access point is only part of the issue when setting up a wireless network. Almost all of the consumer grade products come ready to go, just plug it in and you can reach the internet. Although this can make life simple, an open network is an invitation to trouble; therefore the next step, configure encrypted wireless access. Did you look at how to configure wireless security when you reviewed the user manual? Use WPA (Wi-Fi Protected Access) encrypted security. We aren’t a how to site but take a look at Brian Posey’s evolving discussion regarding Wi-Fi vulnerabilities and how to secure your home or office network: http://www.windowsnetworking.com/articles_tutorials/Securing-Wireless-Network-Traffic-Part1.html. Wireless networks are a fact of all of our lives but there are risks; please play heads up ball.

Share and Enjoy:
  • Print
  • Digg
  • Sphinn
  • del.icio.us
  • Facebook
  • Mixx
  • Google Bookmarks
  • Blogplay
  • Add to favorites
  • Fark
  • LinkedIn
  • RSS
  • Technorati
  • Twitter

Simple Security

Last month, shortly after finishing a telephone call with my friend “Lucy” I got an email from her saying that she was stranded in London, her suit cases and passport had been stolen and although she had found refuge at the US consulate she needed some money to tide her over until problems could be resolved there. I know spam when I see it so I deleted the message.

Later that day I got a panicked call from Lucy relating how her Hotmail account had been hacked, her account password had been changed, and the problems she encountered with Hotmail trying to regain control of her account to change her password and eventually delete the account. Lucy uses this account as one of her business email accounts and she was much chagrined when a spam/solicitation email was sent to all of the addresses in her email address book. Besides of the embarrassment, Lucy had to contact all of the people on her list to explain and apologize for some criminal’s actions.

I tell this story not to point a finger at Lucy but to illustrate that crooks and thieves use any method possible to gain control of your personal information though hacking, viruses, spam, and other malware. My message is to be careful. I’m often angered when I talk with clients who don’t get that point. Although nothing is fool proof, may I make the following suggestions?

  1. Change your user passwords several times a year (ideally change passwords every 90 days). More often than I’d like I’m confronted by a client who finds that passwords are too much of an inconvenience. Even if you only have one computer at least put a password on it to keep the kids out.
  2. Not using your computer? Log out or shut it down. Before we became so environmentally conscious it was customary to always leave business computers on to allow for operating system updates and remote access but in today’s world if your aren’t going to remote into your workstation over the weekend shut it down. If you are going to use the machine at least log out to break the direct link to the server and your user profile.
  3. When was the last time you updated and ran your antivirus or antimalware software? Yes I know that these applications are automated but other than just a maintenance check are they running properly?
  4. Do you have a personal software firewall installed on your computer? Many of us laptop users are at home sitting at the neighborhood coffee shop. Although the major coffee vendors include some sort of authentication and have monitored systems most local coffee houses do not; which gives rise to a concern for added hacking security. Most major personal antivirus and personal firewall vendors now offer Internet security products which include anti-virus, anti-spam, and firewall protection. I like the additional firewall protection but it requires that you learn how to use it as to not block you favorite programs. I’ll discuss this more next month.

With the convenience of the Internet comes added responsibility; quite often the most secure thing you can do is turn off your computer or change your passwords every several months.

Share and Enjoy:
  • Print
  • Digg
  • Sphinn
  • del.icio.us
  • Facebook
  • Mixx
  • Google Bookmarks
  • Blogplay
  • Add to favorites
  • Fark
  • LinkedIn
  • RSS
  • Technorati
  • Twitter

Now is the time for Windows 7

I’ve been using Windows 7 for over a year at this point and after Vista have been quite pleased. Standard practice for many independent IT pros has been to recommend delaying installing new operating systems until many of the kinks had been worked out. In addition, Windows XP does not have a natural migration path to Windows 7, i.e. clean install. My recommendation was for businesses to wait and replace existing Windows XP computers with new Windows 7 machines; but that was last year. What are we doing now?

Recently, I received several requests inquiring about the cost associated with “upgrading” Windows XP workstations to Windows 7. Well, my hourly rates stay fairly standard depending on the tasks but more importantly: Who am I talking to, what kind of business are we talking about, and what is the condition of the workstations and network? I understand the reluctance to exchange information with a stranger but I don’t proceed unless we can meet and those questions are answered. Given my position I thought I’d take the time to outline several issues about installing Windows 7 Business edition.

First off, if you are a business please purchase Windows 7 Professional or Ultimate for your network. These versions allow for more network flexibility and improved network functionality, printing, and security. Yes, I know Costco, Best Buy, and Fry’s have good deals on various home versions on new computers but purchasing the appropriate version saves us all potential problems down the road when you decide to grow your network or install a server to your network. More specifically, let me highlight a few issues that need to be considered before you consider moving to Windows 7 (32 or 64 bit):

  1. There is no Windows 7 upgrade path for the following operating systems:
    1. Windows 95, Windows 98, Windows Millennium Edition, Windows XP, Windows Vista® RTM, Windows Vista Starter, Windows 7 M3, Windows 7 Beta, Windows 7 RC, or Windows 7 IDS.
    2. Windows NT® Server 4.0, Windows 2000 Server, Windows Server® 2003, Windows Server 2008, or Windows Server 2008 R2.
  2. Supported upgrade paths:
From Windows Vista (SP1, SP2) Upgrade to Windows 7
Business Professional, Enterprise, Ultimate
Enterprise Enterprise
Home Basic Home Basic, Home Premium, Ultimate
Home Premium Home Premium, Ultimate
Ultimate Ultimate

  1. Is your current computer hardware adequate to run Windows 7? I know that your computer is labeled Vista compatible but will all Windows 7 features work? Take time to explore the Windows 7 system requirements. Better yet Microsoft has supplied a tool, Windows 7 Upgrade Advisory tool, this can save you research time and point out hardware limitations and possible hardware upgrades if necessary.
  2. Included in the hardware requirements is driver support for network adapters and video cards. The advisory tool should inform you of this factor but if there is any doubt, check with the hardware vendor and download the appropriate driver before you begin you upgrade or installation. Believe me this will save you quite a lot of time and hassle.
  3. Whether you upgrade or perform a clean install, check to make sure that your favorite line of business software and other applications will work with Windows 7. This is particularly important if you move from 32 to 64 bit hardware. In addition to going to the vendor support website, use your favorite search engine, explore the experiences of other users, and call the vendor if there is any doubt. There is nothing more sad than listening to a client who has their major database in dos, Excel 2000, or FoxPro but doesn’t realize this until they upgraded their entire network and all of their business is dependent on this software. Do you buy the upgrade version of your software; migrate the database to new software; have new software built or start from scratch and manually re-input a lifetime of customer and inventory information?
  4. Whether you are doing a clean install or an upgrade it is essential that you backup your data before you begin. Note: backup will include all of your documents and data but not applications (programs). Also note, that Windows XP backup is not compatible with Windows 7. If you use third party backup tools make sure they are compatible with Windows 7. To facilitate the backup of data prior to moving to Windows 7, Microsoft provides the “Easy Transfer Tool”.
  5. For more complete information about “Upgrading from Windows XP to Windows 7“, see http://windows.microsoft.com/en-US/windows7/help/upgrading-from-windows-xp-to-windows-7.

I’ll talk about early adoption later but from here on out as businesses purchase new computers or look to upgrade their networks, Windows 7 is going to be the operating system of choice. Fear of change should not be a guideline as you move forward but advance planning should be your mantra.

Share and Enjoy:
  • Print
  • Digg
  • Sphinn
  • del.icio.us
  • Facebook
  • Mixx
  • Google Bookmarks
  • Blogplay
  • Add to favorites
  • Fark
  • LinkedIn
  • RSS
  • Technorati
  • Twitter

The Excitement of Uninterrupted Power Supplies: UPS

Summer is a time for lots of construction and road maintenance and my neighborhood is no exception. We were notified that there would be occasional power outages during the times they work on our street and initially, I blew this notice off and quipped, “No problem as long as they give advanced notice of specified times.”

Later a client called and wanted to know what to do when the power in their building was shut off briefly during a construction phase. My answer:  Shut down the server, computers, and other related devices during the power outage. I also noted that if this was to be for an extended period time it is a good idea to inform regular clients of the situation. Last weekend I received UPS, or uninterrupted power supply, failure notices via alerting software from a client with a notice that the server was to be shut down; the server stayed down the rest of the weekend. I informed my client and he went in early Monday morning and restarted the server with no problem and we continued business with no further incidents. Power outages and surges can play havoc with your server, computers and other office devices. This is why I always insist on a UPS (uninterrupted power supply) to provide surge protection and an orderly shutdown of the machine if needed.

Power outages, buildings with inadequate wiring, and lightning can result in significant power surges which can not only damage machines but can cause loss of data. Some people assume that a surge protector with a lot of Joules will suffice. There could be a discussion of how many Joules is adequate but the true advantage of surge protectors is that they are inexpensive. A UPS not only provides surge protection but in the event of a power loss  it also shuts down the computer in an orderly fashion, preventing damage not only to the machine but also the operating system. Many people forget to install the UPS software and connect the UPS to the computer, which doesn’t allow the UPS to perform its alerting or shutdown functions. The significance is to use the UPS for more than just surge protection.

APC, Tripp-Lite and Belkin (surge protection wizard) are major manufacturers of UPS batteries and surge protectors with a variety of 800+ Joules surge protectors for less than $50+. APC also offers a UPS selection tool to assist in determining the right backup battery for your office. APC will also take used batteries as a trade-in toward the purchase of a new battery or UPS.

I know talking about surge protectors and backup batteries is not as exciting as your new 4G smart phone but your computer/server should last longer than your smart phone.

Share and Enjoy:
  • Print
  • Digg
  • Sphinn
  • del.icio.us
  • Facebook
  • Mixx
  • Google Bookmarks
  • Blogplay
  • Add to favorites
  • Fark
  • LinkedIn
  • RSS
  • Technorati
  • Twitter

Has your antivirus subscription expired?

Security for computer networks comes in many forms.Often the most troublesome and frequently encountered are malware infections (viruses, worms, Trojans, spyware, etc.). Unfortunately, during my initial meetings with prospective clients I still find workstations with expired antivirus software or no protection at all. Malware, like hard drive failures, can make workstations inoperable but all data can also be lost. Many techs will only work so long on resolving infections before they suggest reformatting the hard drive and reinstalling the operating system. Maybe they are just giving up but if you are being paid by the hour, it is the better part of valor to start from scratch rather than keep charging your customer for a server when you don’t have or know the solution. On the other hand, there are technology firms that focus solely on virus eradication (at all costs) and data recovery, but be prepared to pay the price if you absolutely need your workstation and data intact. This might be a time to lecture about hard drive backups or imaging but that is not a good method for establishing a good working relationship.

In this day and age of growing security needs, the list of old and new malware removal companies is never ending so there is never a reason for a person to be without virus protection. Professionally, I don’t recommend free antivirus solutions (I don’t scold my mother-in-law for using AVG Free Edition) because most free versions of software offer no support or are only limited (restricted) versions. The most popular free antivirus programs are AVG Free Edition, Comodo Internet Security, and Avast Free AntiVirus. One exception to the premise, that free software provides no support or is a restricted version of the paid client, is Microsoft’s Security Essentials, http://www.microsoft.com/security_essentials/. Microsoft offers this antivirus client for standalone computers with support and the promise of offering a good stable product; if you are looking for an antivirus client this might be worth a try. If you are looking for these and other free or trial antivirus and other downloadable utilities, I suggest becoming familiar with CNET’s Download.com which offers a vast array of spyware free/trial utilities to try. In addition, CNET offers several good spyware removal tools including: Malwarebytes Anti-Malware, Spybot Search & Destroy, Ad-Aware Free Anti-Malware, and SuperAntispyware Free Edition.

Last note: Often, I’m asked to define the difference from viruses, spyware, Trojans, and other malware. I don’t always make a true distinction between the various types of malware other than, “Do I have a tool to remove it quickly to minimize client down time?” Sophos has published a paper, “A to Z of Computer Security Threats”, which gives a good definition of the various malware types which you may find interesting. For your convenience, we have posted the PDF file on our SkyDrive site for you to download. In addition, I’ve also included Trend Micro’s white paper on understanding and protecting against Fake (hoax) Antivirus infections.

Share and Enjoy:
  • Print
  • Digg
  • Sphinn
  • del.icio.us
  • Facebook
  • Mixx
  • Google Bookmarks
  • Blogplay
  • Add to favorites
  • Fark
  • LinkedIn
  • RSS
  • Technorati
  • Twitter