Remote control from anywhere: Difference between revisions

Line 6: Line 6:


=== Risks ===
=== Risks ===
 
We always think more than twice about connecting lights, cameras and other Internet of Things (IoT) devices to our own network. So we understand your reluctance to it too. Search the Internet for more information regarding IoT risk management. James Andrew Lewis in his ''[https://csis-prod.s3.amazonaws.com/s3fs-public/legacy_files/files/publication/160217_Lewis_ManagingRiskIoT_Web_Redated.pdf Managing Risk for the Internet of Things]'', says, "Being risk averse makes us poorer, not safer. There is risk in every technology we use. Hold IoT captive to our fears and we will sacrifice opportunity."
The system requires user authentication before accepting commands from the remote control. This authentication process is only as strong as your user name and password that you have created in Management Suite. You should also lock the Management Suite host computer with a good password to prevent unauthorized users from changing the authorized users of the bell system.
 
Search the Internet for more information regarding IoT risk management. James Andrew Lewis in his ''[https://csis-prod.s3.amazonaws.com/s3fs-public/legacy_files/files/publication/160217_Lewis_ManagingRiskIoT_Web_Redated.pdf Managing Risk for the Internet of Things]'', says, "Being risk averse makes us poorer, not safer. There is risk in every technology we use. Hold IoT captive to our fears and we will sacrifice opportunity."


Chime Master continues to develop new products using the latest technologies that will balance ease of use with the highest security practices.
Chime Master continues to develop new products using the latest technologies that will balance ease of use with the highest security practices.


==== Best Practices ====
==== Best Practices ====
Keep your Windows, phones, tablets, software and firmware up to date. We are not fans of third party anti virus software. Windows 10 comes with all of the security you should reasonably need. Always add Microsoft Security Essentials to Windows 7. Don't use any other version of Windows than these two. Don't visit nasty websites. Don't respond to email asking for personal information or taking you to web pages that do the same. Don't run with scissors.
The system requires user authentication before accepting commands from the remote control. This authentication process is only as strong as your user name and password that you have created in Management Suite. You should also lock the Management Suite host computer with a good password to prevent unauthorized users from changing the authorized users of the bell system.


Modern routers have firewalls built in, but the most IT professionals will add a dedicated firewall appliance between the incoming internet router or modem and their internal network. In the absence of a dedicated firewall, install a router that includes as many of the items on this [http://routersecurity.org/checklist.php Router Security Checklist] as you can.
Modern routers have firewalls built in, but the most IT professionals will add a dedicated firewall appliance between the incoming internet router or modem and their internal network. In the absence of a dedicated firewall, install a router that includes as many of the items on this [http://routersecurity.org/checklist.php Router Security Checklist] as you can.


Putting any port of any device of your primary network on the public internet should always be done with planning, forethought and the wise advice of your IT professional. We recommend that all Internet of Things (IoT) devices you install in your facility be connected using a dedicated network (IP address subnet such as 192.168.120.''node'') apart form your file servers and database systems. Most newer routers and multi-port firewalls allow you to have more than one subnet for guests and devices (see Guest Networks in the Security Checklist linked above).
Putting any port of any device of your primary network on the public internet should always be done with planning, forethought and the wise advice of your IT professional. We recommend that all IoT devices you install in your facility be connected using a dedicated network (IP address subnet such as 192.168.120.''node'') apart form your file servers and database systems. Most newer routers and multi-port firewalls allow you to have more than one subnet for guests and devices (see Guest Networks in the Security Checklist linked above).


Another way of setting up a secure dedicated network for IoT devices if you have an older unused router available is to configure a [https://www.grc.com/nat/nats.htm Multi-NAT router network] as described by security guru Steve Gibson.
Another way of setting up a secure dedicated network for IoT devices if you have an older unused router available is to configure a [https://www.grc.com/nat/nats.htm Multi-NAT router network] as described by security guru Steve Gibson.