Tutorial: Protect Your Users From Malware and Other Cyber Threats
This tutorial shows the use of cyber shield domain filtering to protect your users from cyber threats without examining their internet traffic
Overview
In this document, we examine CloudConnexa being used to meet the needs of a fictitious scenario. Owen is in charge of IT and Networking for a technical college. Owen is looking for a solution that does not require him to manage, install, and maintain servers to achieve the following:
Provide staff and students Remote Access to the college’s campus Network
Ensure that the remote Users follow the college’s policies on appropriate content and activities while accessing the campus Network
Keep the Network safe from internet threats because research labs and students operate outside of strict IT security policies
Setup
Owen completed the signup process as shown here. Owen then followed the steps shown below to meet his objectives:
Configured a Network to represent the college’s campus Network and entered the IP subnets belonging to the campus Networks as the Subnets for the Network. See, How to add a Network
Clicked on the Deploy button next to the Connector created for the Network to reveal various options and selected Operating Systems - Linux from the options list. He completed the installation of the Connector on a computer, running Debian, connected to the campus Network. See, Installing Linux Connector
In order to prevent staff and students from accessing malicious websites while connected to the college’s Network and to follow college internet use policies, Owen turned ON Cyber Shield domain filtering capability and selected Adult Content, Hacking and Cracking, Malware and Ransomware categories to be blocked. See, Configuring Cyber Shield Domain Filtering
Owen added certain research website domain names in the Allow list so that those domains could always be accessible even if they could fall under the Adult Content Category. He also added specific domain names that led to heavy bandwidth usage in the Block list. See, Ensuring that specific domains are always accessible using the Allow List and Creating a custom domain filtering category using the Block List
To prevent threats from malware, ransomware, worms, trojan, and intrusion activity from or to remote User’s Devices, Owen turned ON Cyber Shield traffic filtering capability to act as an IDS/IPS and selected Malware and Ransomware, Intrusion Activity category to be blocked. See, Configuring Cyber Shield Traffic Filtering for Blocking Threats
Owen logged into the CloudConnexa administration Portal at least once a week to look at the Cyber Shield statistics. He noticed a spike in the blocked malware traffic one day and decided to investigate. He turned the Investigation Mode and drilled down to find the Device generating traffic identified as a worm. The IP address belonged to a computer in an R&D lab. Owen notified the lab Owner to take corrective action. See, the Analysis and Investigation section of Cyber Shield
Tutorial: Block All Internet Traffic Except To Trusted Internet Destinations
Tutorial: Learn About the Levels of Security Afforded by the Use of Various Internet Access Options
Tutorial: Protect Your Users From Malware and Other Cyber Threats
Tutorial: Secure All Internet Traffic by Configuring a Private Network as an Internet Gateway
Tutorial: Use Multiple Geographically Distributed Internet Gateways to Improve Internet Performance
Tutorial: Steer Traffic To Specific Internet Destinations Through CloudConnexa