Firewall management puts UK firms at risk

By Ron Coates, Silicon.com, 2 June, 2003 10:38

NEWS

Top UK corporates have cleaned up their security act but are still vulnerable because of their bad housekeeping, according to an auditor's report. High-risk vulnerabilities have dived to 6 percent from 19 percent in 2001, according to the Fifth Annual Security Audit from NTA Monitor, which analysed more than 600 of its perimeter tests carried out for government and financial clients last year. But at least a third of corporate networks were found to have 10 or more flaws leaving them open to attack by hackers. The most common security risks relate to basic mistakes in firewall management and the configuration of VPN services, allowing the VPN to be located and profiled, according to Kevin Foster, strategy manager at NTA Monitor. "A third of the companies we examined were guilty of bad security housekeeping, with unacceptable levels of basic flaws found, leaving them vulnerable to external attack. Companies seem to be getting complacent about lower-risk flaws that they previously had under control," he said. For example, companies with low level DNS vulnerabilities jumped from 70 per cent in 2000 to 83 per cent last year, he added. Most of the flaws detected were due to installing firewalls and VPNs with their default settings. This leaves custom-built loopholes for hackers. Stephen Titterington, analyst at Ovum, believes that vendors should make more of an effort to persuade customers to check their configurations. "Microsoft has gone a little way to help," he said. "In Windows 2003 the default setting is to turn it all off -- you then have to go around and turn on those services and functions that you actually need." NTA Monitor has issued a Good Practice Guide to securing a firewall VPN which can be downloaded from its Web site.

For all security-related news, including updates on the latest viruses, hacking exploits and patches, check out ZDNet UK's Security News Section. Let the editors know what you think in the Mailroom.

Post your comment

In order to post a comment you need to be registered and logged in.

You can also log in with Facebook. Log in or create your ZDNet UK account below

By signing up for this service, you indicate that you agree to our Terms and Conditions and have read and understood our Privacy Policy. Questions about membership? Find the answers in the Community FAQ

ZDNet UK Live

ike fuelband is great for every healthminded person ! to work out! theres this website called textme4free.com that you can use to text anywhere in...

21 minutes ago by bordero on Nike's FuelBand wristband gamifies exercise

> I'm told it's somewhat annoying when people have their Macs stolen > and Apple stores treat the thief as the owner, but there you go. Ouch,...

3 hours ago by BrownieBoy on AMD Ultrathins to challenge Intel Ultrabooks

@kevinmchapman. OK, I acknowledge that 'most' was a gratuitous throwaway comment as an afterthought and too presumptuous. As to proof, as you...

7 hours ago by Moley on A tale of two distros: Ubuntu and Linux Mint

@BrownieBoy > Works really well for thieves.... >> Nice attempt to deflect the argument by tossing in a point that's totally >> irrelevant, even...

8 hours ago by Jack Schofield on AMD Ultrathins to challenge Intel Ultrabooks

fantastic that the so called piracy bills have been withdrawn. however, these anti-democracy supporters are still in the shadows so lets be alert...

9 hours ago by raskolnikof on SOPA, Protect IP support wavers in face of online protest

Please God no; teach them anything you like - thinking rationally, the uses and misuses of data, what data is and what it's not - but leave the...

11 hours ago by Tony Douglas via Facebook on Kids are the future. Teach ’em to code.

@Jack, > Works really well for thieves.... Nice attempt to deflect the argument by tossing in a point that's totally irrelevant, even it were...

1 day ago by BrownieBoy on AMD Ultrathins to challenge Intel Ultrabooks

Make that 13 people now - I got refused today at Manchester airport. I thought I was up to date on this legislation - I knew of the EU ruling from...

1 day ago by bootlegger on UK airport body scans will not be opt out

Don't forget to check out apps like GoodReader or SlideShark either, they're indispensible for people on the go in presentation situations. Best...

1 day ago by tinycg on Four top iPad apps for people on the move

Well it seems there is something a number of us agree on. Why is the Ubuntu Unity launcher so ugly? I thought perhaps it was something to do with...

1 day ago by TerryRK on A tale of two distros: Ubuntu and Linux Mint

Duplicate comments are not made intentionally. Its very good to know that now you are keeping check on this problem because sometimes a commenter...

2 days ago by Freebies202 on Microsoft fixes blog comments, speeds up blogs with open source

"the very significant number of users" and "many (most) of us" - you have no evidence for these statements. It is a fact that most users are saying...

2 days ago by kevinmchapman on A tale of two distros: Ubuntu and Linux Mint