The problem is, however, that maintaining adequate web security can be very complex. There are many different types of machines and users with different needs hooked up to the average network. That's not all; a vast array of security packages clamor for our attention as the best solution to our web security problems.
There are a lot of tools that administrators can use. When choosing a web security strategy it pays to look for the following features or approaches:
- › The use of multiple antivirus scanners: This will make it harder for potential malware to ‘slip through’ since different scanners use different ‘search and destroy’ techniques and some may also be ahead of the curve in terms of response to specific threats. Using multiple AV scanners at the same time means that you can capitalize on all their strengths and greatly minimize the risk of some nasty zero-day virus slipping through.
- › Configurable scanning of specific file types and other threats: By exercising central control over what enters/leaves your network (e.g. disallowing .exe, scanning .zip files with multiple engines and selectively scanning files with little risk) you will be able to enjoy a much higher level of threat protection. Web filtering and monitoring systems will also scan inside seemingly innocuous files to ensure that they are safe.
- › The ability to set policies for individual machines, groups or IP addresses: Users obviously have different needs and ‘blanket blocking’ of specific files and/or activities are bound to hinder the work of users with legitimate needs. The ability to easily set up policies to ensure that security threats are minimized and no one is inconvenienced is a major benefit of this approach.
- › Limit attempts to bypass web security: Some viruses / malware might attempt to bypass standard security by channeling downloads through HTTPS connections – which typically mask the data being transmitted. A good web security solution will include analysis of HTTPS traffic as standard procedure and thus provide additional security.