Evaluate

Evaluate

Weigh the pros and cons of technologies, products and projects you are considering.

• Midmarket security tutorials

  SearchMidmarketSecurity.com’s tutorials offer IT professionals in-depth lessons and technical advice on the hottest topics in the midmarket IT security industry. Through our tutorials we seek to provide site members with the foundational knowledge ... Continue Reading

• Outsourcing data center services: SMB security best practices

  Learn best practices for outsourcing data center services and about the security and compliance considerations that influence whether an SMB should outsource data center services. Continue Reading

• Windows 7 security guide: Best practices on security for Windows 7

  Are you preparing for a Windows 7 upgrade? Our latest learning guide reviews the new and improved security features of the new and improved operating system. Continue Reading

• Buying an IPS: Decide which applications and protocols your IPS will protect

  Application and protocol coverage varies in signature-, rate- and behavior-based intrusion prevention systems. Understanding the differences is crucial to your IPS investments. This is the third in a seven-part series. Continue Reading

• Learn Active Directory security basics: How to configure the management tool

  In this learning guide, various experts review how to use Active Directory to secure your organization. Continue Reading

• Security mergers and acquisitions strategy: Questions you need to ask

  Your security vendor has just been acquired. Learn the questions you need to ask and the answers you need to hear.Continue Reading

• Considering two-factor authentication? Do cost, risk analysis

  One-time passwords and other technologies are effective protection, but midmarket companies have to consider the expense and management overhead.Continue Reading

• PCI DSS checklist: Mistakes and problem areas to avoid

  Experts share lessons learned by midmarket companies trying to comply with PCI DSS in areas such as self assessment questionnaires, encryption, policy creation and application securityContinue Reading

• Take four steps toward Macbook security

  Your organization may primarily be a Windows shop, but Macbooks are becoming popular among executives and Macintosh computer security must be understood.Continue Reading

• Windows Firewall with Advanced Security beefs up Windows 7 security

  Windows Firewall with Advanced Security extends security to Windows 7 and Windows Server 2008 end users.Continue Reading

• Validate your perimeter network security devices are working

  Validation tests on your perimeter network security tools such as antimalware can help identify security gaps and misconfigurations.Continue Reading

• Should you disable IE ESC, or manage it in Windows servers?

  Internet Explorer Enhanced Security Configuration (IE ESC) locks down IE on Windows servers, but admins often disable it.Continue Reading

• How to choose full disk encryption for laptop security, compliance

  Full disk encryption is becoming a priority for laptop security in midmarket companies because of regulatory compliance and fear of data breaches. Consider central management, ease of deployment, user transparency, reporting, platform support and ...Continue Reading

• Understand the pros and cons of Microsoft Windows 7 DirectAccess

  Discover how Microsoft's Windows 7 DirectAccess can help midsized companies obtain secure remote end-to-edge and end-to-end access, tunneled through a Windows Server 2008 R2 DirectAccess Server. Plus, examine the advantages and limitations of this ...Continue Reading

• Microsoft SharePoint security hinges on authorization, external user management

  Management of external user access controls, authentication and authorization are important Microsoft SharePoint security best practices. This is the second of a two-part series of technical tips.Continue Reading

• Poor Microsoft SharePoint security permissions policies can derail deployments

  A strong Microsoft SharePoint security policy starts with proper permissions and access controls to internal resources, and to control external users. This is the first of a two-part technical tip.Continue Reading

• How to build the right managed security service level agreement

  Midmarket companies have little leverage in contractual negotiations with large managed security service providers, and should look toward smaller MSSPs for more flexibility in defining service level agreements.Continue Reading

• Three ways to prioritize endpoint security over perimeter defenses

  Midmarket organizations should prioritize endpoint security management over perimeter defenses.Continue Reading

• Web application firewall worth depends on developer efforts

  SMBs are buying Web application firewalls (WAF) for PCI DSS compliance, but if they are installed and forgotten, they won't be compliant or secure.Continue Reading

• Next version of Microsoft ISA Server brings Web security to midmarket

  Microsoft's Forefront Threat Management Gateway (TMG) adds HTTP and HTTPs antimalware inspection, application vulnerability and Web filtering. TMG will integrate tightly with other Microsoft Security products under the upcoming Forefront Security ...Continue Reading

• What are common (and uncommon) unified threat management features?

  Unified threat management products have gained popularity because they bring multiple security tools together into one appliance. In this SearchSecurity.com Q&A, Michael Cobb reviews just what those security tools are.Continue Reading

• Using 802.1X to control physical access to LANs

  802.1X, a port-based access control, is primarily used on WLANs to control which machines can connect to the network. However, 802.1X is gaining popularity as an access control method for wired networks. This tip outlines some stipulations for ...Continue Reading

• When filling out the PCI DSS questionnaire, is it important to provide documentation?

  It's time to fill out the PCI DSS questionnaire, but management has said that it's no big deal, there's no need to provide accompanying documentation. But what will happen when an auditor comes knocking? Security management expert Mike Rothman ...Continue Reading

• Best practices for purchasing an intrusion detection device

  In this SearchSecurity.com Q&A, security management expert Mike Rothman offers guidelines for buying an intrusion detection (IDS) device.Continue Reading

• The pros and cons of outsourcing antivirus services

  Learn the pros and cons of outsourcing antivirus services in this tip by Ed Skoudis.Continue Reading

• How to ensure the validity of Microsoft Windows updates

  Ever wonder if what you've downloaded from Windows Update is a complete scam? Michael Cobb explains how to check that the programs you have installed are actually from Microsoft.Continue Reading

• How to secure desktops as suites expand, network perimeters shrink

  Learn about desktop security software and policy options, and why deperimeterization may be the best approach for securing desktops.Continue Reading

• Windows Update attacks: Ensuring malware-free downloads

  Attackers recently discovered how to exploit the Windows Update service to push malware onto targeted systems. Is the new attack possible because of a flaw in Windows Update itself? Or is it because users just aren't being careful? Michael Cobb ...Continue Reading

• Should UTM and Web security filtering software be used together?

  Michael Cobb explains what is best for your business: either standalone security appliances or unified threat management devices.Continue Reading