Remote control from anywhere: Difference between revisions

Line 15:

==== Best Practices ====

Modern routers have firewalls built in, but the most IT professionals will add a dedicated firewall appliance between the incoming internet router or modem and their internal network. In the absence of a dedicated firewall, ~~try to understand and implement~~ as many of the items on this [http://routersecurity.org/checklist.php Router Security Checklist] as you can.

Modern routers have firewalls built in, but the most IT professionals will add a dedicated firewall appliance between the incoming internet router or modem and their internal network. In the absence of a dedicated firewall, install a router that includes as many of the items on this [http://routersecurity.org/checklist.php Router Security Checklist] as you can.

Putting any port of any device of your primary network on the public internet should always be done with planning, forethought and the wise advice of your IT professional. We recommend that all Internet of Things (IoT) devices you install in your facility be connected using a dedicated network (IP address subnet such as 192.168.120.''node'') apart form your file servers and database systems. Most newer routers and multi-port firewalls allow you to have more than one subnet for guests and devices (see Guest Networks in the Security Checklist linked above).

@@ Line 15: / Line 15: @@
 ==== Best Practices ====
-Modern routers have firewalls built in, but the most IT professionals will add a dedicated firewall appliance between the incoming internet router or modem and their internal network. In the absence of a dedicated firewall, try to understand and implement as many of the items on this [http://routersecurity.org/checklist.php Router Security Checklist] as you can.
+Modern routers have firewalls built in, but the most IT professionals will add a dedicated firewall appliance between the incoming internet router or modem and their internal network. In the absence of a dedicated firewall, install a router that includes as many of the items on this [http://routersecurity.org/checklist.php Router Security Checklist] as you can.
 Putting any port of any device of your primary network on the public internet should always be done with planning, forethought and the wise advice of your IT professional. We recommend that all Internet of Things (IoT) devices you install in your facility be connected using a dedicated network (IP address subnet such as 192.168.120.''node'') apart form your file servers and database systems. Most newer routers and multi-port firewalls allow you to have more than one subnet for guests and devices (see Guest Networks in the Security Checklist linked above).