Securing Networks with Security Infrastructure Design, Security Policies, Firewall Implementation, Intrusion Detection Sytems, Device Hardening and Endpoint Security.

Forward Networks provides best of breed Advanced Security Solutions enabling our clients to secure their network infrastructure, confidential data, business credibility and client confidence. Solutions on offer fall over a broad range of technologies within a range of budgets.

Perimeter Defense Firewall Solutions

Perimeter defense solutions are firewall appliances that sit on the border of the network, as barrier sitting between the internal systems and a gateway to the external world such as the internet. This solution will force all traffic to pass through the firewall or firewalls allowing full inspection of all traffic. This type of firewall solution is normally regarded as the most important in order to eliminate threats that originate from the outside world. This is also where a DMZ (less secure network) area will also sit on the network, on it will reside servers which will host communications with remote users on the internet, a web server would be a good example.

However a firewall purchased alone will not eliminate all threats. Experience of best practice firewall configuration, physical design, assessment of suitability, multiple deployments and advanced feature knowledge is required to ensure a truly secure firewall solution eliminating threats to the fullest potential.

In most cases we will recommend a Unified Threat Management capable firewall appliance. This type of firewall will be preferential for most businesses as it can consolidate statefull inspection at application level along with todays essential features like Intrusion Prevention System / Intrusion Detection System, Anti-Virus, Anti-Spam, Anti-Spyware, Web URL filtering and more. This reduces the overall total cost of ownership as todays important security features are consolidated into a single unit removing the need for additional stand alone units or servers.

The Forward Networks engineering department has a wealth of experience deploying advanced security solutions using and managing a wide range of firewalls including Cisco ASA, Checkpoint, Watchguard, Sonicwall, Juniper and more.

Please note that Cisco PIX firewalls are now no longer supported by Cisco and have come to their end of life cycle. We can provide assistance and support for Cisco PIX but we would always recommend an upgrade to a Cisco ASA or a firewall that is still currently supported by its manufacturer. This is recommended as hot fixes and emergency patches are no longer developed by Cisco for PIX firewalls.

Cisco PIX firewalls now represent a security vulnerability for businesses with them in production due to known exploits being openly available.

Hardening Existing Routers, Switches and Firewalls

Existing equipment can be further security enhanced or 'hardened' to minimise the risk of threats and allow businesses to protect from confidentiality, integrity and availability attacks. By analyzing the existing infrastructure, the LAN can be secured by disabling unrequired default services that represent points of possible expoitation aswell as strengthening the network by using Authentication, Authorisation and Accounting security modelling available on most equipment.

Endpoint Host and Server Security

As well as providing core network Infrastucture based security solutions we also ask our clients to consider their endpoint security. Workstations, Servers and Laptops should be protected with anti virus and anti spyware software. End user USB ports can be locked down to only allow company approved storage devices preventing users from internally introducing malware through infected personal flash drives and mp3 players. Laptops and company storage devices should encorporate disk encryption protecting the documents stored within should they become lost or stolen. Server based Host Intrusion Preventions Systems (HIPS) software is also available as a complementary protective layer for sensitive servers and front end applications.

Call 0161 428 0678 or email This e-mail address is being protected from spambots. You need JavaScript enabled to view it to further secure your business.