Template:Security guidelines: Difference between revisions
m
→General Security Guidelines
| Line 8: | Line 8: | ||
==General Security Guidelines== | ==General Security Guidelines== | ||
* Keep Firmware Updated - Always ensure that firmware is up to date. | * '''Keep Firmware Updated''' - Always ensure that firmware is up to date. | ||
* Set Strong Passwords - Use strong, unique passwords for all services (WebUI, SSH, Post/Get). Passwords should include numbers, symbols, uppercase, and lowercase letters. Passwords should be between 15-20 characters long. | * '''Set Strong Passwords''' - Use strong, unique passwords for all services (WebUI, SSH, Post/Get). Passwords should include numbers, symbols, uppercase, and lowercase letters. Passwords should be between 15-20 characters long. | ||
* Install Trusted Packages - Only install packages from known and trusted sources. | * '''Install Trusted Packages''' - Only install packages from known and trusted sources. | ||
* Use Secure Configuration Protocols - Use SSH or HTTPS for device configuration. Avoid using insecure protocols like telnet or HTTP, especially for remote configuration. | * '''Use Secure Configuration Protocols''' - Use SSH or HTTPS for device configuration. Avoid using insecure protocols like telnet or HTTP, especially for remote configuration. | ||
* Disable unused services - Disable services that are not used, especially those that provide some sort of administrative capabilities (e.g.: WiFi, SMS Utilities, Web CLI). | * '''Disable unused services''' - Disable services that are not used, especially those that provide some sort of administrative capabilities (e.g.: WiFi, SMS Utilities, Web CLI). | ||
* Ensure WiFi Security - If WiFi is used, ensure it employs the latest encryption standards like WPA3 or WPA2 with AES. Avoid using TKIP. | * '''Ensure WiFi Security''' - If WiFi is used, ensure it employs the latest encryption standards like WPA3 or WPA2 with AES. Avoid using TKIP. | ||
* Assign Minimum Necessary Permissions - Make sure to provide the least amount of required permissions for any additionally created user account. | * '''Assign Minimum Necessary Permissions''' - Make sure to provide the least amount of required permissions for any additionally created user account. | ||
* Set SIM Card Limits - Set SMS and data limits for your SIM card to prevent misuse. | * '''Set SIM Card Limits''' - Set SMS and data limits for your SIM card to prevent misuse. | ||
==Security Hardening Guidelines== | ==Security Hardening Guidelines== | ||