Enhancing REMOTE ACCESS security
During the last week of December 2018, 5 insurance defence firms received ransomware. At least one of them was a hack on their remote access services. The majority of such hacks are through remote functions. While there are many steps that can be taken to secure remote services, one of the best ones is to implement two-factor authentication known as 2FA.
Two-factor authentication means having two methods of proving who you are before you are granted access to the system. The first method is using a password. These days, passwords should be a minimum of 10 characters in length and changed twice a year, if not more. The second is some kind of token which can be your smartphone, a random number generator or some kind of an app to name a few options.
As with all security, adding 2FA makes it harder to gain access to the system – but that’s the point!
How Does it Work?
A user connected to the login screen of their remote access tool which can be as simple as a VPN or as complex as Citrix. The user enters their user name and password and the system accepts it. Once accepted, the 2FA system challenges the user for a unique code only available at the time of logging in. The user gets this from their smartphone and approves access. Once this is done, the user is granted access to the system.
Adding 2FA does not need to be expensive. For a few dollars a month per user, the firm can add security that is extremely difficult to hack. All it takes is one infection to show the true cost of not adequately protecting the system.
If you are interested in 2FA, please contact Triella at 647.426.1004
Charles Bennett is the Principal Consultant at Triella. We are a technology consulting company specializing in providing technology audits, planning advice, project management and other CIO-related services to small and medium-sized firms. Charles can be reached at 647.426.1004. For additional articles, go to our blog page. Triella is a VMware Professional Partner, Microsoft Certified Partner, Citrix Solution Advisor – Silver, Dell Preferred Partner, Authorized Worldox Reseller and a Webroot Reseller.
© 2019 by Triella Corp. All rights reserved. Reproduction with credit is permitted.