Farewell Microsoft TMG! But What Do You Replace It With?

Microsoft have announced that they are no longer going to be supporting Microsoft Threat Management Gateway (TMG) from April 2015. So what should you do if you have been using Microsoft TMG as a firewall, proxy server or web filter?

In reality, TMG’s technology was starting to look a little “old hat” anyway. Filter lists can only ever know about a small percentage of the web sites on the internet, and it can be a hacked business site that can hurt you! 

 
Web security today needs be a little smarter to protect your networks:

Blocking Known Hacked Web Sites

If you end up with a Trojan or spyware on your PC, you have a 90+% chance that you got it from a malicious or hacked web site. These days, web security solutions refers to a constantly updated database of known hacked or malicious web sites to which access is blocked.

Control of Web Applications

Love them or hate them, web applications such as YouTube and Skype are here to stay. There is some great training / research material on YouTube, and Skype can be incredibly useful, but it gobbles up your internet connection if you aren’t careful. Today’s web protection products allow you to control the amount of your internet bandwidth that can be used by video and audio, so that you have at least some bandwidth reserved for home workers and email.

Facebook security

Facebook is probably an integral part of your marketing strategy, but it is also a great way to waste time playing games and a playground for malicious code that can infect your PC’s. You need a system that can allow you to update your company’s Facebook page but block downloads of malicious code and stop your users playing games. 

Different manufacturers approach web security in different ways. You can secure internet access on your employees’ PC’s, using a web proxy appliance, integrated into your firewall, or as a hosted web security service. 

If you are a UK company and need some help in deciding which approach is right for you, please do get in contact so that we can find out a little more about your IT installation and recommend some sensible options.

Web Security – How Do You Know If A Site Is Safe?

The Internet can be a dangerous place! We all love to scour the Internet for a bargain, but beware the bad stuff out there that can steal your credit card details, Paypal login, or turn your PC into a “zombie” that can be used by spammers and password thieves. Web sites that have been hacked and are being used to disseminate malicious software don’t advertise the fact .. in fact the web site owner probably won’t even know about it.

How Big A problem Is Web Security?

If you visit a compromised web site and your PC is missing the latest updates, you stand a good chance of ending up with software on your PC that you didn’t ask for. The problem is that it isn’t going to introduce itself and shake your hand! A bit like the neighbour you didn’t invite to your barbecue, it came along uninvited and it’s going to make a nuisance of itself.

How Do I Know If My PC Is Infected?

You are unlikely to recognise that your PC has been infected straight away. Internet malware can sit there silently waiting for you to connect to your online bank account so that it can steal your login details or send out so much traffic that it clogs up your entire network as we saw with one of our customers recently. Eventually though your PC will become unusable as more malware gets downloaded at which point you need to call your IT support company.

Which Are The Most Dangerous Web Sites

It's not just “Sex and Drugs and Rock and Roll”  web sites that are potentially dangerous. According to a Symantec study in 2012, 61% of malicious web sites are regular web sites that have been compromised and infected with malicious code.

The Top 5 Most Exploited Web Site Categories - % Of Total Number Of Infected Websites

1.       Blogs / Web Communications - 19.8%

2.       Hosting / Personal Hosted Sites – 15.6%

3.       Business / Economy – 10%

4.       Shopping – 7.7%

5.       Education / Reference – 6.9%

Whilst these figures are based on 2011 data, the percentages won’t have changed much, and new around 9,500 malicious web sites are being found by Google every day.

How To Protect Your Computers Against Internet Malware

Home users need to make sure that their security is kept up-to-date. Make sure that you enable automatic updates for Windows Updates and keep applications such as Java and Adobe Acrobat updated as well. Malware exploits bugs in software that is installed on your PC to upload malicious code to your system, and regular updates are your best defence. There is no  need to shell out large amounts of money for security software though. Microsoft Security Essentials is free and good enough for home use. 

If you are a business, the same principles apply, but you need to take your IT security a little more seriously:

• Make sure that all Windows / Java / Adobe updates are applied to your computers on a weekly basis.
• Make sure you run commercial security software.
• Monitor your PC’s for tell-tale signs of trouble.
• Use web security software to block access to known infected sites as well as pornographic / illegal / non-business material

A little common sense also goes a long way. If you are asked to click on a link in an email, or a Facebook / Twitter post, engage brain before clicking. Is the person that it came from likely to have sent you a link to ”Some hilarious pics of you”? If in doubt, don’t click! 

Dude - A virus ate my customer's internet connection!

Did you think that viruses were a thing of the past that you don't have to worry about any more? Well here is a story from one of our customers that shows that the Internet really can be a dangerous place even for the most security conscious companies. Understandably, businesses focus on making money rather than IT security. The problem is that when you get a malware infection (which many of you will understand better as viruses), you may not know about it, but that doesn’t mean that they can’t cause problems for your company.

Recently, one of our largest customers was having problems with a web security system that they had bought about a year ago. They have around 2,000 IT users and a sizable internet connection, but something was bringing their system to a grinding halt, and quite a lot of the web connections had very little to do with their line of business!

Since they have a support contract with us we held our hands up to do some investigation as to what was causing the problem, and it soon became obvious that 75% of their network traffic was coming from a single PC which had obviously been infected with malware and was generating huge amounts of network traffic which was clogging up their Internet connection.

The graphs below show you what happened as soon as the infected PC was removed from the network. It’s amazing what one infected PC can do!:

Web connections per hour dropped from 20,000 to 5000.

Blocked connections per hour dropped from 14,000 to 0.

Connections per hour to “malicious” sites dropped from 20,000 to 0.

We will never know how the malware ended up on our client’s PC. They were probably just unlucky and visited a hacked web site that took advantage of a missing security update to infect the PC. What it does demonstrate though is the importance of making sure that your PC’s are kept updated to minimise the likelihood of picking up a malware infection. 

Just imagine the devastating effect that a similar incident could have on your company if you rely on cloud services for your line of business applications. It just goes to show that as you grow more and more reliant on the Internet to run our businesses, you will need to make sure that your security is up to scratch.