Protect from cyber crime and threats

Hello, friend!
It's nice to meet you in the community.
We're working on getting the right answer for you.

Hi friend,

I think we all can agree that the below headlines could help very well protecting network devices from cyber-attacks:


1- Next-Generation Firewall (NGFW): Using application firewall using in-line deep packet inspection (DPI), an intrusion prevention system (IPS).


2- Next-Generation Antivirus (NGAV): performing signature-based detection.


3- Securing DNS: virtual DNS caching layer throughout your network.


4- Network Access Control (NAC): networking solution that uses a set of protocols to define and implement a policy that describes how to secure access to network nodes by devices when they initially attempt to access the network.


5- Web Application Firewall (or WAF) filters, monitors, and blocks HTTP traffic to and from a web application.



6- Secure Web Gateway is a security solution that denies unsecured/suspicious web traffic from entering or leaving an internal corporate network of an organization.



7- Vulnerability Scanner is a computer program designed to assess computers, networks or applications for known weaknesses.


8- Virtual Private Network (VPN) extends a private network across a public network.

Hello,
As far as I know, there is no such standard that is adopted by all the countries.
Though there are no general standards, we can improve the devices' security with some general steps.
Before talking about the standards or techs that protect the devices from threat, it's necessary that simply introduce the potential attacks from the internet.
For all the devices, the OS, such as VRP, is run on it, and for every OS the software BUGs exist. Besides, the protocols, such as SSH, also have vulnerabilities. What's more, password leaking also should be considered.
Usually, to prevent the network devices from attacking, the suggestion below should be followed.
1. Update the firmware to the latest version to prevent the potential BUGs.
2. Adopt the security protocols, for example, use the SSH instead of the telnet.
3. Modify the password regularly, and the password should be complex enough.
4. Configure the security policies on the devices to limit the attacking traffic, or implement the professional security devices to harden your network.
5. Reinforce the staffs' network security training.