For information stolen credit card and theft of personal information is often updated. The popularity of e-commerce and online shopping is becoming more and more. People depend on the Internet for almost everything. They did not hesitate with their personal and banking information (credit card or account) of e-commerce sites. Therefore, it is the duty of e-commerce site owners for maximum safety for users.

Threats to security for servers and databases

Hackers and cyber criminals are becoming smarter day. For them, the resolution of any type of security only takes a few minutes, when the network is not properly secured. The potential threat is harmful to steal important data online server.

In recent years, several cases of breaches of internal security are staged, where employees are responsible for theft or data exchange with external organizations for their personal benefit. The result is that today, not only for external security is important, internal threats should not be neglected.

All other major security issues of protecting data from viruses, Trojans and malware. Protection of database servers or replace is a difficult but important for network administrators.

Security Solutions

Today, all manufacturers of attention to software security. Modern operating systems and systems management databases with built-in security features. Security features such as firewall and basic security against viruses are being built with all modern operating systems. Databases of the safety and integrity of characteristics of different types of security locks, access to the database.

To ensure maximum protection against all forms of risk, implementation of physical security and application security is necessary. Physical security can be ensured by limiting access to key areas for people who, on the clock to monitor, within one and personal safety. For security applications, the latest antivirus software, firewall software, intrusion detection and strict password.

However, nothing is enough for you security issues intelligent but destructive criminals. Therefore, regular evaluation of social security systems is very important, a complete protection of your important information and information.

In this article I will describe the configuration steps for installing a firewall Cisco ASA 5505 for connecting a small network to the Internet. We assume that our ISP has a static IP address (eg 200.200.200.1 for example), and our internal range is 192.168.1.0/24. We use Port Address Translation (PAT) to translate internal IP addresses to public opinion outside the interface. The difference between the models of the SAA in 5505, larger models, there is a 8-Port 10/100 Switch, Level 2. So you can not bear the physical layer 3-Port, as in the interface VLAN and the allocation of Layer 2 interfaces in different VLANs. By default, Ethernet0 / 0 for VLAN 2 and is outside the (Internet connection), and 7 other interfaces (Ethernet0 / 1 0 / 7), the default VLAN 1, and are for connection to the internal network. See the basic configuration of the main steps you need to configure.

Step 1: Configure the internal interface vlan
————————————————
ASA5505 (config) # interface vlan 1
ASA5505 (config-if) # nameif in
ASA5505 (config-if) # security-level 100
ASA5505 (config-if) # ip address 192.168.1.1 255.255.255.0
ASA5505 (config-if) # no shut

Step 2: Configuring the external interface vlan (with Internet access)
————————————————– ——————
ASA5505 (config) # interface vlan 2
ASA5505 (config-if) # nameif outside
ASA5505 (config-if) # security-level 0
ASA5505 (config-if) # ip address 200.200.200.1 255.255.255.0
ASA5505 (config-if) # no shut

Step 3: Assigning Ethernet 0 / 0 vlan 2
—————————————–
ASA5505 (config) # interface Ethernet0 / 0
ASA5505 (config-if) # switch port access vlan 2
ASA5505 (config-if) # no shut

Step 4: Enable the rest of the interface without
———————————————-
ASA5505 (config) # interface Ethernet0 / 1
ASA5505 (config-if) # no shut

Do the same for Ethernet0 / 1 0 / 7

Step 5: Configuring PAT interface to the outside
————————————————-
ASA5505 (config) # global (outside) 1 interface
ASA5505 (config) # nat (inside) 1 0.0.0.0 0.0.0.0

Step 6: Configuring default route on the ISP (provided that the default gateway is 200.200.200.2
————————————————– —————————————–
ASA5505 (config) # route 0.0.0.0 0.0.0.0 200.200.200.2 1

These measures are absolutely necessary, you must use the device to make effective. Of course, there are many more details on the configuration you need to improve security and functionality of the device, such as access control lists, Static NAT, DHCP, DMZ areas, the authentication, IPSEC VPN, etc.

Go to my site in my resource box below for more information on Cisco products and solutions. You can also teach a Cisco ASA 5500 Firewall model on my site, see below.

Then we will see a simple scenario, which helps us, the basic steps necessary for an SAA 5510th For example, in a static public IP address 100.100.100.1 of our ISPs. In addition, the internal network is located in the subnet 192.168.10.0/24. Interface Ethernet0 / 0 is outside (the ISP) and Ethernet0 / 1, with the internal LAN.

The firewall is to provide the dynamic IP address (DHCP) to the internal host. All outgoing communication (from inside to outside) is not with the Port Address Translation (PAT) outside public interface. See an excerpt of the configuration steps required for this baseline scenario:

Step 1: Create a password favorites (activation password)

By default, there is no password to access the ASA firewall, so the first step before doing anything else is to put a privileged password are necessary to ensure that ‘ access to the device. Setting this configuration mode:

ASA5510 (config) # password for mysecretpassword

Step 2: Setting of public opinion outside the

ASA5510 (config) # interface Ethernet0 / 0
ASA5510 (config-if) # nameif outside
ASA5510 (config-if) # security-level 0
ASA5510 (config-if) # ip address 100.100.100.1 255,255,255,252
ASA5510 (config-if) # no shut

Step 3: Configuring the internal interface of confidence

ASA5510 (config) # interface Ethernet0 / 1
ASA5510 (config-if) # nameif in
ASA5510 (config-if) # security-level 100
ASA5510 (config-if) # ip address 192.168.10.1 255.255.255.0
ASA5510 (config-if) # no shut

Step 4: Configuring PAT on the outside interface

ASA5510 (config) # global (outside) 1 interface
ASA5510 (config) # nat (inside) 1 0.0.0.0 0.0.0.0

Step 5: Configure the default route on the ISP (provided that the default gateway is 100.100.100.2)

ASA5510 (config) # route 0.0.0.0 0.0.0.0 100.100.100.2 1

Step 6: Configure the firewall to the internal IP address and DNS for clients with DHCP

ASA5510 (config) # dhcpd dns 200.200.200.10
ASA5510 (config) # dhcpd address in 192.168.10.10-192.168.10.200
ASA5510 (config) # dhcpd a period

Basic configuration is only the beginning, to turn the unit ready for operation. There are many more features than you need to ensure greater security of your network, for example, static and dynamic NAT, ACL to the fluidity of movement in the DMZ, IPSEC VPN, etc.

It all started in the 6th Years ICQ, why I am in school at 50 kilometers per hour. It was the battle that we see on the computer. I gave up outside the ground and single, and decided that the only way to communicate with all my friends, is to sit before a computer social network (keep in mind, I had a day of school with them!). From now on, I can only imagine what my parents thought they found their daughter look at the computer screen, typing 300 words per minute and to express more than 25 characters of emotion, blink without a look or a lack of time. I was more than 25 interviews that we try, all messages and information. But this is not the end!

When I arrived at school, I had friendship with half the school before the foot within the first days of September. Half has been the source of my sister that my personal data and the other was in progress and I’m happy, who, in my school in their profile. If I, I still remember how important it is that the people in your contacts list. It was the largest, which has never ceased. In a sense, it was great because I could hardly anyone in another direction, I did not know that the personal information I have at the time hundreds of people, some of which I knew nothing more the name. Although there is a discussion, if a child is developing on the Internet and the ability to use social networks to communicate with their friends, you will see how important it is to be.

As I moved to school, in social networks has been my life. I was able to talk, people I can not say hello, on the premises and the relationship with them on a screen. I began to write in English, as the court attempts to “LOL”, including “Smiley’s” If I thought something funny (thank god spell checker Look up)! I now on the social gathering and distribution of teachers in schools from portals. The Internet was designed to swallow, and me because of my generation confusion. It is now more common, a conversation on a computer and people were even starting to discuss whether the gene Ys communicate face to face.

This was not the end. If I’m in college, Facebook now in the mainstream success. I quickly and is in social protection in less than an hour. I was able to add friends, I had not seen for more than school and was literally “snoop” on their lives and what they were. I could a conversation with almost everyone, under their profile and read the news and talk, the young of these discussions. When I finished school and shot away from home, the social network is my way, people that I really enjoy. At this point, I really go to social networks and, indeed, on my profile. I started to understand I did not want my personal data with the world and I wanted to talk, I really not easy to achieve in a different way. I started to believe that social networking has a social dimension of confusion and waste of my time. But to my surprise, it was not the end.

Social network in my life a few years later, when I made my first “real” work in marketing. I was in another marketing company, but now I am with you, what I am with the social and lead us to new heights. This is where I have all the things I have in my childhood and made myself, that social networks as a child, I was able, in our society a world of new customers. Are you ready to discover how? (At the signing of the social reading of confusion or a solution? Part II)