Home Security

Chimp Paradox · 25 Jan 2015 at 07:52

Hi everyone

What can I do to have a very "closed" and safe network at home?

Thanks

nutcase · 25 Jan 2015 at 08:27

Not connect it to the internet?

PfSense firewall is probably a good start if you don't want to spend the money on a commercial unit. Any Wifi shouldn't broadcast itself either.

Deleted member 77746 · 25 Jan 2015 at 08:30

A router, which you probably have and Microsoft Security essentials on all Windows PCs. Don't really need more than that apart from a bit common sense.

Unless this question is for homework..

Chimp Paradox · 25 Jan 2015 at 08:51

what are the benefits of the expensive hardware solutions? And how expensive are we talking? Thanks

Throrik · 25 Jan 2015 at 09:26

Chimp Paradox said:
what are the benefits of the expensive hardware solutions? And how expensive are we talking? Thanks

The benefits they offer are more options regarding security - for example pfSense is a good firewall, quite a few work environments use it.

Although, for a home user I wouldn't have thought you'd need more than your standard router - don't broadcast the SSID, have a decent password, set up MAC Address filtering etc.

Chimp Paradox · 25 Jan 2015 at 10:45

THanks man.

What is MAC Address filtering

I assume broadcast off means you cannot ever "see" the network you need to tell your devices exactly what name to look for?

Cadbury · 25 Jan 2015 at 10:46

MAC address filtering as a layer of security is pointless. It's easy to spoof a MAC and when a device broadcasts a packet, it contains the MAC of the device anyway.

You're far more likely to have a security issue originating from inside your network than someone breaking in from the outside.

KIA · 25 Jan 2015 at 17:59

Throrik said:
don't broadcast the SSID, set up MAC Address filtering etc.

Waste of time.

Ev0 · 25 Jan 2015 at 18:23

KIA said:
Waste of time.

Yup I'd echo that.

http://www.howtogeek.com/howto/2865...hiding-your-wireless-ssid-really-more-secure/

For home use then there's not really much needed, I do still use MAC filtering white list and WPA2 for wireless, other than that just really rely on my router for everything else.

Main thing I'd say is just make sure you're keeping software up to date.

Could potentially stick an IPS in there as I have access to the kit/software, but it's not needed (might do it sometime out of curiosity).