[et_pb_section fb_built=”1″ _builder_version=”4.27.4″ background_color=”#009EBD” custom_margin=”0px||” custom_padding=”0px||0||false|false” hover_enabled=”0″ global_colors_info=”{}” background_enable_image=”off” sticky_enabled=”0″][et_pb_row _builder_version=”4.16″ custom_padding=”40px|0px|40px|0px|false|false” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.16″ custom_padding=”|||” global_colors_info=”{}” custom_padding__hover=”|||”][et_pb_post_title featured_image=”off” text_color=”light” _builder_version=”4.27.4″ text_orientation=”center” hover_enabled=”0″ global_colors_info=”{}” meta=”off” sticky_enabled=”0″][\/et_pb_post_title][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=”1″ _builder_version=”4.16″ custom_padding=”0px|0px|0px|0px|false|false” global_colors_info=”{}”][et_pb_row _builder_version=”4.16″ background_size=”initial” background_position=”top_left” background_repeat=”repeat” custom_padding=”40px||0px||false|false” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.16″ custom_padding=”|||” global_colors_info=”{}” custom_padding__hover=”|||”][et_pb_text _builder_version=”4.16″ global_colors_info=”{}”]<\/p>\n
CyberSecMonth is coming to an end,and we hope you have read a lot of relevant articles and interesting infographics. On our side, we still have a few CyberAdvice’s to share with you and we are counting on the most greedy of you to be present at our “meetings” (every Monday, Tuesday and Thursday)!<\/p>\n
[\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=”1″ _builder_version=”4.16″ custom_padding=”0|0px|0|0px” global_colors_info=”{}”][et_pb_row _builder_version=”4.16″ custom_padding=”40px|0px|0px|0px|false|false” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.16″ custom_padding=”|||” global_colors_info=”{}” custom_padding__hover=”|||”][et_pb_text _builder_version=”4.16″ global_colors_info=”{}”]<\/p>\n
As administrators, you must be particularly vigilant when performing administrative actions. To ensure the integrity of the park and the system it is essential to guarantee the safety of your actions. Poor management of administrative rights can have very serious repercussions for an entity.<\/p>\n
[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=”4.16″ custom_padding=”40px||0px” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.16″ custom_padding=”|||” global_colors_info=”{}” custom_padding__hover=”|||”][et_pb_image src=”https:\/\/www.tranquil.it\/wp-content\/uploads\/infographie_6_en-1.jpg” alt=”secure administration graphics” title_text=”secure administration graphics” align_tablet=”center” align_phone=”” align_last_edited=”on|desktop” _builder_version=”4.16″ global_colors_info=”{}”][\/et_pb_image][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=”4.16″ custom_padding=”40px|0px|1px|0px|false|false” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.16″ custom_padding=”|||” global_colors_info=”{}” custom_padding__hover=”|||”][et_pb_text _builder_version=”4.16″ global_colors_info=”{}” custom_padding=”||46px|||”]<\/p>\n
The security of the information system depends on the proper management of administrative rights<\/strong>. There are many good practices and solutions to ensure that you can act safely and without compromising the organization.<\/p>\n Workstations and servers used for administrative actions<\/strong> must not be able to access the Internet<\/strong>, as surfing the web can present risks in terms of cybersecurity. Administrators who need access to the Internet must do so from a different workstation<\/strong>. The use of office automation tools<\/strong> must be done via a remote virtualized machine<\/strong> to guarantee the integrity of the network<\/a>. The administration network allows to connect the administration workstations and servers and the equipment administration interfaces. It is necessary to partition the administration network<\/strong> of the employees’ office automation network to avoid compromise by bouncing<\/strong> from a user workstation. It is recommended to set up a physical partitioning of the networks<\/strong> or a cryptographic partitioning<\/strong> thanks to the installation of Ipsec tunnels<\/strong> to ensure the integrity and confidentiality of the information<\/strong>. If these actions prove impossible to implement, it is still important to create at least one partitioning by VLAN<\/strong>.<\/p>\n It is common for some employees in organizations to want additional privileges on their workstations (software installation, system configuration, etc.). A user<\/strong>, regardless of his or her hierarchical position, should not be granted these administrative privileges<\/strong> since he or she could be the source of malicious code execution<\/strong>. It is recommended to have an application store that meets security criteria defined by the entity<\/strong> to meet most employee needs. It is still possible to grant administrative privileges<\/strong> to a user, but this practice must be exceptional, tracked and limited in time<\/strong> (and therefore verified and updated later). In addition, these administrator accounts should only be used for administrative actions and not for daily use. It is therefore necessary to create registered administration accounts such as gbouchard-admin in order to keep a registered history of the park’s administration shares.<\/p>\n WAPT is a software deployment tool for Windows<\/strong> that automates fleet management<\/strong> through its centralized management console. Our solution allows you to install, update and uninstall software<\/strong> and configurations with reliable and instant feedback<\/strong>. This way, you can remotely schedule your software deployments<\/strong> without disturbing your users. WAPT also allows you to provide your users with a software store<\/strong> validated by you by following your security policies. Your users with restricted rights will therefore be able to install from a store<\/em> the software they want in complete security. WAPT’s security has been recognized by ANSSI<\/a>, which has awarded it the standard qualification for the Enterprise version<\/a> (1.5) of the software. As part of the security of the administration, WAPT is able to ensure the management of rights<\/strong>. Thanks to its package signing system<\/strong>, only the administrator can deploy packages on the park, it is impossible to take any administrative action without a signature key. It is also possible to differentiate the roles of console administrators<\/strong>, so those in charge of deploying packages will not be able to create them and risk compromising the infrastructure. Indeed, WAPT allows you to easily create your own packages<\/strong> thanks to the Wizard package. It is also possible to visit our store<\/a>, which has more than 1,000 packages<\/strong>, to download a package securely, edit it if necessary, test it on an isolated machine and finally deploy it throughout the park.<\/p>\n [\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=”4.16″ custom_padding=”0px||0px” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.16″ custom_padding=”|||” global_colors_info=”{}” custom_padding__hover=”|||”][et_pb_code _builder_version=”4.16″ text_orientation=”center” global_colors_info=”{}”]How to act without risk?<\/h3>\n
Isolate the administration from the rest of the system:<\/h4>\n
Restrict administration rights:<\/h4>\n
WAPT and Samba-AD, your strongest allies!<\/h3>\n
Application deployment with WAPT<\/h3>\n