Reply to thread

Message

<blockquote data-quote="Victor M" data-source="post: 1052074" data-attributes="member: 96560">Throw in a cheap box and run pfSense at the entrance to that IoT lan. pfSense is a linux firewall does firewall rules, supports DMZ, and it has intrusion prevention (IPS). That should filter out some attacks to your IoT devices.Make the IoT WiFi password long, like a passphrase. The length part will filter out some WiFi bruteforce attacks.But there are exploits for some China made devices, and router + modem residential attacks are on the rise. Security teams aren&#039;t raising alarms because they serve to protect corporations but there was a security news article mentioning that.&nbsp; For example, there&#039;s an exploit for my Bell modem+router, and there is a permanent attacker box sitting in my lan, nmap sees it, and I can&#039;t get rid of it no matter how many times I change the password. Lord only knows what he&#039;s doing. So I turn on my VPN even at home.I hope you are not only focusing on network security, because there is only so much network security can do, like throwing in an NGAV, enable network segmentation. Endpoints are the real end game. After all, attackers aim to get control of your machine. And your server, if you have one. Strong endpoint security is a must.If you trust Microsoft, their MS Defender for Biz is an EDR (endpoint detection &amp; response) It has a nice cloud console, and you can see your security score, current attack trends (with remediation) and current incidences. And they show a pretty diagram of attacks in progress. And it is cheaper than most AV suites. If you load MS Security Baseline for Windows 22H2, it will give you a device score of 100% secure, which is why I don&#039;t trust it that much - the score gives a false sense of security. It only works on Windows Pro.In the end, true security seems to require man power for monitoring. Which is why I choose an EDR - I have a browser tab open to the console at all times.</blockquote>

[QUOTE="Victor M, post: 1052074, member: 96560"] Throw in a cheap box and run pfSense at the entrance to that IoT lan. pfSense is a linux firewall does firewall rules, supports DMZ, and it has intrusion prevention (IPS). That should filter out some attacks to your IoT devices. Make the IoT WiFi password long, like a passphrase. The length part will filter out some WiFi bruteforce attacks. But there are exploits for some China made devices, and router + modem residential attacks are on the rise. Security teams aren't raising alarms because they serve to protect corporations but there was a security news article mentioning that. For example, there's an exploit for my Bell modem+router, and there is a permanent attacker box sitting in my lan, nmap sees it, and I can't get rid of it no matter how many times I change the password. Lord only knows what he's doing. So I turn on my VPN even at home. I hope you are not only focusing on network security, because there is only so much network security can do, like throwing in an NGAV, enable network segmentation. Endpoints are the real end game. After all, attackers aim to get control of your machine. And your server, if you have one. Strong endpoint security is a must. If you trust Microsoft, their MS Defender for Biz is an EDR (endpoint detection & response) It has a nice cloud console, and you can see your security score, current attack trends (with remediation) and current incidences. And they show a pretty diagram of attacks in progress. And it is cheaper than most AV suites. If you load MS Security Baseline for Windows 22H2, it will give you a device score of 100% secure, which is why I don't trust it that much - the score gives a false sense of security. It only works on Windows Pro. In the end, true security seems to require man power for monitoring. Which is why I choose an EDR - I have a browser tab open to the console at all times. [/QUOTE]

Verification