Service · Information security

Infrastructure protection

We build protection so that getting into one point does not give access to everything at once. A flat network in which the accountant computer sees the servers directly is the most common reason ransomware takes the whole company within an hour.

Submit a request What is included

Segments

instead of a flat network

Perimeter

control of what goes in and out

Remote work

protected access

Monitoring

of anomalies

What is included

We work from the boundary inwards: first the perimeter, then internal segmentation, then the workplaces.

Discuss the scope

Firewalling

Configuring the rules at the network boundary: what may go out, what may come in, and to and from which addresses.

Network segmentation

Division into zones: servers, workplaces, guest Wi-Fi, equipment. Only what is permitted passes between zones.

Protection of remote access

A VPN with two factor authentication instead of a port forwarded to the internet.

Server protection

Updates, disabling unnecessary services, restricting administrative access.

Workplace protection

Antivirus, application control, restriction of local administrator rights.

Monitoring

Event collection and notifications about suspicious activity.

How the work runs

We start with a survey: there is almost always some forgotten access, and it is open to the internet.

Survey

A network diagram, a list of open ports, a list of remote access routes. This is often the first such document the company has ever had.

Closing the obvious

We remove ports forwarded to the internet, change default passwords and switch off what is not used.

Segmentation

We separate things into zones and configure the rules between them. Done in stages so as not to break the work.

Verification

We check the result by scanning from outside and inside and produce a report.

A remote desktop port forwarded to the internet is still cause number one. Automatic scanners find it within hours, and password guessing follows. Replacing it with a VPN and two factor authentication closes this route completely.

Frequently asked questions

Where do we start if nothing has been done?

With a perimeter survey: what of yours is exposed to the internet. It takes a day and almost always produces a list of several items that have to be closed immediately. After that you can plan calmly.

Will segmentation slow the work down?

Configured properly, no. Slowdowns appear when rules are written blindly and traffic travels through unnecessary points. We first build a map of the real interactions and only then write the rules.

Do we need new equipment?

Not necessarily. Segmentation can often be done on the managed switches and the router you already have. Replacement is needed if the equipment does not support the required functions or is no longer supported by the vendor.

Other services in this area

The whole area

We will check your infrastructure protection

We will look at what is exposed to the internet and how the network is arranged inside. The result is a list of what to close first.

Phone
+7 (495) 978-63-36

Email
office@apply.ru

Office
Moscow, 108 Profsoyuznaya St.

I consent to the processing of personal data