Top 10 Most Common Malware - How to Avoid Them

Transcription

1 Health check performed by: Jeremy Arndt My Company February 18 th, 2015 IT Health Check OVERALL SCORE 10 Users 3 Servers 1 Network 2 Backups 1 E mail 1 Antivirus 2 High Risk Risk Low Risk IT Health Check My Company Page 1 of 8

2 Inventory End User Devices: Total Count 23 Servers: Name Make Model Operating System P/V Total Used Space SRV DC 01 Dell 2900 Server 2003 Physical C:\ 100GB, D:\ 200GB Network: Make Model Managed Has IP Address HP ProCurve 2910 No Yes Linksys WRT54G (Wireless) No Yes Dell SonicWall TZ 105 No Yes Backup: Software and Version Destination Media Offsite Symantec BackupExec 2010R3 Tape Drive When they remember to pull tapes E mail: Number of mailboxes 25 Technology Hosted Encryption/Archiving Exchange 2007 No No (no antispam) Antivirus: Software and Version Managed Up to date Symantec Antivirus No Yes IT Health Check My Company Page 2 of 8

3 Other Devices: Toshiba Phone System Synology NAS Verizon FiOS ISP WinDSX Card Access System Users: MyDVR Video Recording Workstation Operating Systems Microsoft Windows XP is end of life and no longer receives security updates. This can put your organization at high risk for vulnerabilities from outside sources. LOW There were no instances of Windows XP in the organization Workstation Hardware Age As a computer gets older it is at an increased risk for hardware failure and performance degradation. This can reduced productivity and downtime for end users. LOW All end user computers were approximately 2 years old or newer which is not considered at risk. Workstation Administrative Access Non IT users with administrative access have a higher risk for viruses, malware and bloatware. Most malware uses the credentials of the infected user. Without administrative access, most malware cannot install itself. LOW No end users have administrative access IT Health Check My Company Page 3 of 8

4 Servers Server Operating Systems Microsoft Windows Server 2003 is end of life and no longer receives security updates. This can put your organization at high risk for vulnerabilities from outside sources. HIGH SRV DC 01 is running Microsoft Windows Server Recommend to upgrade to Microsoft Windows Server 2012 R2. Server Hardware Age As a computer gets older it is at an increased risk for hardware failure and performance degradation. If a server crashes it can potentially cause downtime for the entire organization. HIGH SRV DC 01 is a Dell 2900 which is approximately 7 years old. It is no longer under an active hardware support contract. Recommend to replace with a new server. Server Resource Utilization If a server s CPU or Memory is constantly over 75% usage, this can indicate an undersized server. The results can range from slow application performance to a full system crash. LOW CPU and Memory are in an acceptable range. IT Health Check My Company Page 4 of 8

5 Network Network Hardware Age As a device gets older it is at an increased risk for hardware failure and performance degradation. Network device failures almost always cause downtime for large amounts of users within an organization. HP ProCurve and Dell SonicWall are newer devices. Linksys wireless is very old. Recommend replacing Linksys wireless. Network Location Serviceability When wiring is tangled and disorganized it increases the total time to troubleshoot, replace or upgrade equipment. Wiring is mostly neat but a couple cables are potentially blocking access to remove the server if necessary. Recommend downtime and appropriate length cables to re cable without obstructing access to the server. Network Feature sets Low end equipment often lacks features, which prevent the ability to monitor or manage the device. Without monitoring all responses are reactive instead of proactive and can delay overall time to resolve issues. Low HP ProCurve and Dell SonicWall are enterprise class and manageable. Linksys wireless is consumer grade and unsuitable for corporate environment. Recommend replacing Linksys. IT Health Check My Company Page 5 of 8

6 Backup Time to Restore Backup If a server needs to be restored from backup, the process can be excessively long. During this period of restore time, end users are unable to receive whichever services were provided by that server. High My Company currently backs up data to a tape drive. This has one of the longest restore times of any backup media. Recommend replacing with managed backup. Backup Functionality Many companies do not actively check their backups for failures, or know what they are backing up. If data needed to be restored, and there are no backups, this data is not recoverable. High Backups have been failing for at least 2 months. Recommend replacing with managed backup. Backups Offsite If all on premise equipment is damaged or destroyed, such as a fire or natural disaster, and no backup of the data is located offsite, the company may face penalties, fines, lawsuits, or simply be unable to function. High My Company only occasionally takes tapes offsite to IT manager s house. Recommend replacing with managed backup. IT Health Check My Company Page 6 of 8

7 E mail E mail Platform/Features E mail integrates into a multitude of different technologies including lineof business applications and other inter office communication tools. Older platforms may not integrate and may prevent productivity. My Company is running Exchange 2007 which is the oldest supported version of e mail from Microsoft. Recommend migrating to newer platform sooner than later. End of life is April 11, E mail Redundancy Many companies consider e mail to be the primary means of communication. Without e mail there is possible loss of revenue and productivity. High My company feels e mail is a critical service. Current deployment is on an end of life server for hardware and operating system. Recommend migrating to hosted exchange. E mail Spam filter Spam e mails are both a productivity loss, when spending time to try identify real messages, and a security threat in the form of phishing scams and potentially dangerous links or attachments containing malware. My Company has no antispam solution. Recommend migrating to hosted exchange which includes antispam. IT Health Check My Company Page 7 of 8

8 Antivirus Antivirus Platform Viruses and malware are security threats and cause productivity loss. Without a centralized platform to manage, monitor and update anti virus in the organization a company is at a greater threat to infections from malware. My Company is running the latest version of Symantec Antivirus and because of policies on the server, all clients are up to date, however no one is managing this platform. Recommend migrating to a managed anti virus solution. IT Health Check My Company Page 8 of 8