IBM Computer, Laptops and Servers

Recommendations Here are some steps you can take to protect your servers:

• Harden Operating Systems: Each server has an operating system and is therefore vulnerable to security breaches in operating systems. Since most out of the box operating systems are not configured for maximum security by default, it is important that you harden the operating systems you use on your servers. You should remove any unnecessary tools and utilities and update patches to your operating system as fixes to newly discovered security vulnerabilities are offered.
• Encrypt and Authenticate: Depending on the needs of your business, you may have several different types of servers. It is a good idea to allocate each server for a specific purpose, since web servers and email servers will be accessed from outside of your business, thereby making them public servers. File or database servers may contain data that is confidential and can be allocated as private servers. In fact, you may also want to consider installing access controls, including encryption of all login sessions. Encryption at the server level also allows for a more secure form of IM (instant messaging). By using a corporate IM server with encryption, you can render messages unreadable by hackers or anyone who intercepts a message during transmission.
• Restrict Access: Add another layer of security to your servers by allowing access only to select users who must log in with a username and password. By setting up authentication, you can monitor server access and restrict file access privileges to users you select. Monitoring logs regularly and maintaining log files can help detect unusual activity. You can also utilize vulnerability testing software to regularly scan your servers to determine if there has been any suspicious activity, and then take appropriate action to correct any problems.
• Protect Data and Backup Servers: Since servers store a great deal of information, protecting the servers as well as the data on them is important. You should keep your server equipment in a secure location and only allow designated persons access. In addition, you should have a backup plan for your servers to protect your data. By backing up server data to a remote location, you will be protected in case there is any physical damage to your servers. Continuous data protection is a backup option that protects your servers on an ongoing basis, so that you can recover from any data losses faster.
• Install Antivirus and Firewalls: Servers are vulnerable to the same viruses and threats as other machines since they are connected to a network and can be accessed by other computing devices. You should install antivirus software on each server to protect against viruses, worms, Trojan horses, and other malicious code. In addition, regularly updating antivirus software will help keep your servers protected. Firewalls limit network access and are an important security mechanism to have in place on your servers. By installing a combination of software and hardware firewalls to your server and network, you can help protect your private data from intruders.

Conclusion Servers play an important role in most small business daily operations, and they store important and often confidential data. Because most business operations rely on servers for a variety of resources including files, email, and applications, it is important to keep servers up and running and secure at all times. By taking precautionary methods now to protect your server, you can protect your business by creating a more secure computing environment.

• Symantec Backup Exec System Recovery Windows Small Business Server Edition
• Symantec Backup Exec Small Business Server
• Symantec Mail Security

Is VoIP Right for Your Business Article Library Is VoIP Right for Your Business March 26, 2007 Summary More and more businesses tired of racking up high telecommunications bills are turning to the Internet for their phone service. Introduction More and more businesses tired of racking up high telecommunications bills are turning to the Internet for their phone service. Voice over Internet Protocol (VoIP) services enable businesses to conduct calls across the same network to access the Internet and get email and at a fraction of the cost of traditional voice networks. However, VoIP developers have been focused on quality and reliability versus security. Therefore, if you choose to adopt VoIP, it is up to you to take the proper steps to secure it. Background and benefits The technology behind VoIP has been around for a few years; early incarnations of VoIP were plagued by spotty service, muddled and dropped calls. Only in the last few years has VoIP service improved enough to make it sufficiently reliable and stable for business use. In fact, businesses are finding that a well-planned and implemented VoIP system can provide call quality and reliability that rivals mobile phone or landline calls. The number one benefit of VoIP is its low cost. In the conventional telephony world, multiple phone lines, conference calling features, and long distance charges create many extra charges. However, most VoIP providers not only offer unlimited local and long-distance calling for a relatively low flat fee, the fee also includes most, if not all, of the additional features businesses need. In addition to lower phone bills, here are some other benefits of VoIP:

• Simplified infrastructure. Eliminating dedicated voice lines means you no longer need separate voice and data networks. Since each usually has its own equipment and vendors, you'll likely pay less for ongoing capital investments and support services.
• Easier management. Because a VoIP exchange is based on software rather than hardware, it is easier to alter and maintain.
• Better productivity. VoIP treats voice like any other kind of data, so users can attach documents to voice messages or participate in virtual meetings using shared data and videoconferencing.
• Scalable. Traditional PABX (Private Automatic Branch Exchange) based phone systems come in many size ranges and it may be necessary periodically to scrap existing systems and replace hardware. This is not the case with VoIP systems.
• Flexible connections. If your company has its own VPN and combines it with VoIP, you can set up a fully functioning office anywhere there is a broadband connection. With a VoIP phone, you can place or receive calls as if you were sitting at your desk. Moreover, since your phone number is mobile as well, you can make "local" calls back home or call around the globe without worrying about cell phone roaming or hotel surcharges.

Security concerns Unfortunately, the same types of attacks that affect data networks can affect VoIP networks. As a result, the content of VoIP communications is vulnerable to being attacked, hacked, altered, intercepted or re-routed. Worse yet, because voice and data communications are running on the same infrastructure, an attack on the VoIP system could compromise the entire availability of the IP network, risking a business ability to communicate via either voice or data. Here are just a few of the security risks to VoIP:

• Denial-of-Service Attacks

October 22, 2007 Microsoft Internet Explorer Script Error Handling Memor... October 9, 2007 Microsoft Windows Kodak Image Viewer Remote Code Execut... October 9, 2007 Microsoft Word Workspace Memory Corruption Remote Code ... October 9, 2007 Adobe Acrobat Mailto PDF File Command Execution Vulnera... September 20, 2007 laptop battery

BaoFeng Storm MPS.DLL ActiveX Control Multiple Remote B...

September 13, 2007 Microsoft Agent agentdpv.dll ActiveX Control Malformed ... September 11, 2007 Microsoft MSN Messenger Video Conversation Buffer Overf... September 11, 2007 Trend Micro ServerProtect SPNTSVC.EXE Multiple Stack Bu... August 24, 2007 Microsoft Internet Explorer Vector Markup Language VGX.... August 14, 2007 thinkpad

Microsoft XML Core Services Remote Code Execution Vulne...

August 14, 2007 Microsoft Excel Worksheet Index Value Remote Code Execu... August 14, 2007 Microsoft Excel Workspace Designation Remote Code Execu... July 10, 2007 Microsoft Office Publisher Invalid Memory Reference Rem... July 10, 2007 Microsoft Excel Worksheet Remote Code Execution Vulnera... July 10, 2007 microsoft

Microsoft Internet Explorer URLMON.DLL COM Object Insta...

June 12, 2007 Microsoft Win32 API Parameter Validation Remote Code Ex... June 12, 2007 Microsoft Word RTF Parsing Remote Code Execution Vulner... May 8, 2007 Microsoft Word Array Remote Code Execution Vulnerability May 8, 2007 Microsoft Internet Explorer Property Method Remote Code... May 8, 2007 laptop computers

Microsoft Agent URI Processing Remote Code Execution Vu...

April 10, 2007 Microsoft Windows Csrss HardError Messages Multiple Vul... April 10, 2007 Microsoft Windows Cursor And Icon ANI Format Handling R... March 29, 2007 Microsoft Word Malformed Drawing Object Arbitrary Code ... February 13, 2007 Microsoft MFC Embedded OLE Object Remote Code Execution... February 13, 2007 laptop computer

Microsoft Excel Opcode Handling Unspecified Remote Code...

January 9, 2007 Microsoft Windows Vector Markup Language Buffer Overrun... January 9, 2007 Microsoft Internet Explorer DHTML Script Function Remot... December 12, 2006 Windows Media Player Remote ASF File Buffer Overflow Vu... December 12, 2006 Windows Media Player ASX PlayList File Heap Overflow Vu... December 12, 2006 desktop computer

Microsoft XML Core Service XMLHTTP ActiveX Control Remo...

November 14, 2006 Microsoft Word Mail Merge Remote Code Execution Vulnera... October 10, 2006 Microsoft Excel Lotus 1-2-3 File Handling Remote Code E... October 10, 2006 Microsoft Excel DATETIME Remote Code Execution Vulnerab... October 10, 2006 Microsoft Office Smart Tag Remote Code Execution Vulner... October 10, 2006 notebooks

Microsoft Internet Explorer Vector Markup Language Buff...

September 19, 2006 Microsoft Publisher Font Parsing Remote Code Execution ... September 12, 2006 Microsoft Windows Server Service Remote Buffer Overflow... August 8, 2006 Microsoft Internet Explorer COM Object Instantiation Co... August 8, 2006 Microsoft Internet Explorer Chained Cascading Style She... August 8, 2006 lenovo

Microsoft Internet Explorer HTML Layout and Positioning...

August 8, 2006 Microsoft Windows MHTML URI Buffer Overflow Vulnerability August 8, 2006 Microsoft Windows DHCP Client Service Remote Code Execu... July 11, 2006 Microsoft Windows Server Driver Mailslot Remote Heap Bu... July 11, 2006 Microsoft Windows Malformed ART Image Remote Code Execu... June 13, 2006 hard drive

Microsoft Internet Explorer COM Object Instantiation Co...

June 13, 2006 Microsoft Windows GDI WMF Handling Heap Overflow Vulner... June 13, 2006 Symantec Client Security and Symantec AntiVirus Elevati... May 25, 2006 Microsoft Exchange Server Calendar Remote Code Executio... May 9, 2006 Microsoft MDAC RDS.Dataspace ActiveX Control Remote Cod... April 11, 2006 travelstar

Microsoft Internet Explorer CreateTextRange Remote Code...

March 28, 2006 Microsoft Excel Malformed Range Memory Corruption Vulne... March 14, 2006 Apple Mac OS X Archive Metadata Command Execution Vulne... February 22, 2006 Microsoft Windows Media Player Bitmap Handling Buffer O... February 14, 2006 Microsoft Internet Explorer WMF Image Parsing Memory Co... February 14, 2006 gateway

Microsoft Outlook / Microsoft Exchange TNEF Decoding Re...

January 10, 2006 Microsoft Windows Embedded Web Font Buffer Overflow Vul... January 10, 2006 Microsoft Windows Graphics Rendering Engine WMF SetAbor... January 3, 2006 Microsoft Internet Explorer JavaScript OnLoad Handler R... December 13, 2005 Cisco IPSec Unspecified IKE Traffic Denial Of Service V... November 14, 2005 laptop parts

Microsoft Windows Graphics Rendering Engine WMF/EMF For...

November 8, 2005 Microsoft Windows Explorer Web View Script Injection Vu... October 11, 2005 Microsoft DirectX DirectShow AVI Processing Buffer Over... October 11, 2005 Cisco IOS Firewall Authentication Proxy Buffer Overflow... September 7, 2005 VERITAS Backup Exec for Windows Servers, VERITAS Backup... August 12, 2005 software

Microsoft Windows Print Spooler Buffer Overflow Vulnera...

August 9, 2005 Microsoft Windows Plug and Play Buffer Overflow Vulnera... August 9, 2005 Microsoft Internet Explorer Web Folder Behaviors Cross-... August 9, 2005 Microsoft Windows Color Management Module ICC Profile B... July 12, 2005 Microsoft Internet Explorer Javaprxy.DLL COM Object Ins... July 12, 2005 hard drives

Microsoft Windows HTML Help Remote Code Execution Vulne...

June 14, 2005 Microsoft Incoming SMB Packet Validation Remote Buffer ... June 14, 2005 Microsoft Internet Explorer PNG Image Rendering Buffer ... June 14, 2005 Microsoft Windows Shell Remote Code Execution Vulnerabi... April 12, 2005 Microsoft Exchange Server SMTP Extended Verb Buffer Ove... April 12, 2005 electronics

Microsoft Windows Internet Protocol Validation Remote C...

April 12, 2005 Microsoft MSN Messenger GIF Image Processing Remote Buf... April 12, 2005 Microsoft Office XP HTML Link Processing Remote Buffer ... February 8, 2005 Microsoft Windows Media Player Remote PNG Image Format ... February 8, 2005 Microsoft Windows Server Message Block Handlers Remote ... February 8, 2005 canon

Apple ITunes Playlist Buffer Overflow Vulnerability

January 11, 2005 Microsoft Windows HTML Help Control Cross-Zone Scriptin... January 11, 2005 Microsoft Windows LoadImage API Function Integer Overfl... January 11, 2005 Microsoft Windows DHCP Server Remote Buffer Overflow Vu... December 14, 2004 Microsoft Internet Explorer Malformed IFRAME Remote Buf... December 01, 2004 desktop pc

https://www-secure.symantec.com/custserv/cgi-bin/cs_privacy_dyn.cgi Postal Mail Symantec Corporation - Privacy Officer 555 International Way Springfield, OR. 97477 Telephone 541-335-5000 Email: privacy@symantec.com 1.10 Your California Privacy Rights Beginning on January 1, 2005, California Civil Code Section 1798.83 permits customers of Symantec who are California residents to request certain information regarding Symantec disclosure of personal information to third parties for their direct marketing purposes. To request such information, please contact us using one of the options listed above in section 1.9. Business: Welcome - Symantec Corp.

• Articles Webcasts
• Events
• Security Industry News
• Newsletters

• Enterprise
• Small Mid-Sized Business
• Industries
• Endpoint Protection
• Windows Vista Resource Center
• Veritas Data Center Software
• Customer Success
• Internet Threat Report
• Articles Webcasts

• Products A-Z
• Trialware
• Buying Programs
• Licensing Activation
• Version Upgrades
• Renewal Policy
• License Transfer Policy
• Downloads

• Consulting Services
• Education Services
• Hosted Services
• Managed Services
• Remote Expert Services
• Security Response
• Support Services

• Product Training
• Certification Programs
• eCampus
• Classroom Locations
• Skills Assessments
• About Training

• Supported Products A to Z
• Terms of Services
• News Bulletins
• Customer Care

• Threat Explorer
• Removal Tools
• Virus Definitions Security Updates
• DeepSight Early Warning Services
• Security Response Weblogs (blogs)
• White Paper Listing
• Glossary

• Blogs
• Customer Success
• Articles Webcasts
• Podcasts
• Events
• Downloads

• Purchase Online
• Upgrades Renewals
• Contact Online Sales

Symantec.com Business Business Sales: 800-745-6054 Security Information Risk Compliance Storage Infrastructure Operations Business Continuity

---

New Release Top Products Backup Exec 12 for Windows Servers The gold standard in complete Windows data protection.

• Endpoint Protection
• Multi-tier Protection
• Backup Exec
• Enterprise Vault
• Ghost Solution Suite
• NetBackup

Solving Your Business Needs Small Mid-Sized Business Enterprise Industries Global Services Knowledge, expertise, and insight. More Contact Sales Speak with an expert sales consultant. Call 1-800-745-6054 What's New

---

Doing Business with Symantec Got questions Find answers in our Quick Guide. Download PDF Symantec AntiVirus Corporate Edition Enterprise Edition Upgrades Delivering the next generation of AntiVirus in a single, uniform endpoint security solution. Upgrading to Endpoint Protection Customers with valid support contracts for legacy Symantec AntiVirus products are entitled to free upgrades to Symantec Endpoint Protection 11.0 or Symantec Multi-tier Protection 11.0. More Info Products Eligible for Upgrades

• AntiVirus Corporate Edition
• AntiVirus Enterprise Edition
• Client Security
• Network Access Control
• Sygate Enterprise Protection
• Whole Security Confidence Online for Corporate PCs

Version Upgrade Resources

• Learn about Endpoint Protection
• AntiVirus Upgrades FAQ
• Installation, Migration Troubleshooting for Symantec Endpoint Protection v11.0
• Licensing Portal
• FileConnect

Support Locator

---

Trialware Licensing

• Trial versions
• Freeware
• License keys (License Portal)
• Product downloads (File Connect)

• Contact Sales
• Buying Programs
• Online purchasing
• Online renewal center
• Buy a Support Services plan
• Doing Business with Symantec

Support Downloads

• Technical Support
• Virus definitions security updates
• Virus removal tools
• Product downloads (File Connect)

Symantec Technology Network Connect, share, and learn with STN: Your IT Community. Learn more Product Forums

• AntiVirus/Endpoint Security Customers
• Backup Exec 11d
• NetBackup
• Enterprise Vault

• Blogging with CTO Mark Bregman
• Endpoint Security with Brian Foster
• Veritas Cluster Server
• Application Performance and Availability

Tech Articles

• Green Data Center Storage Part 1
• Security Information Manager
• Migrating PST Files into EV 2007

MySymantec Customer Portal Creating a single, convenient online point of contact for Symantec customers. Current Features MySymantec simplifies the process of enrolling in, managing, and tracking your Symantec Rewards program status. The Future of MySymantec As MySymantec evolves, we ll add many new features and capabilities, including:

• Online reporting
• A new MyProduct center
• Centralized licensing and support services

Symantec Rewards Program Symantec Rewards is a convenient buying program that offers mid-size and large organizations streamlined procurement.

• Learn about Symantec Rewards

Product Finder Products A-Z monebaggasse