Router Protection

---

Router Security Hardening Service   $156.00

Includes a 1-time (6-month) check in

Service Description:

• Starting SECURITY SCORE
• Secure router access including firmware updates
• Default credentials and passwords
• Change Existing SSID and Password to Secure Combination
• Attack surface review
• Network segmentation (subnet Masking)
• Harden router configuration
• 10-point check
• Speed performance
• WiFi Signal Strength Test
• Secure WiFi
• Device inventory
• Open ports and services
• Recommendations

Output and Deliverable

• Finding Report and Recommendations
• 10-point Router hardening changes
• Hardened SECURITY SCORE

Router Security Hardening

At the heart of every home network is the router. It's the gateway that connects all your devices to the Internet. Just as a sturdy door with multiple locks protects your home, a hardened router safeguards your digital space.

Router hardening involves a series of steps and best practices to enhance its security. By configuring it correctly, updating its firmware, and enabling specific security features, you can drastically reduce the vulnerabilities in your network.

In essence, router hardening is to your digital home what locking and reinforcing doors and windows is to your physical home. It's not just an added layer of security; it's the foundation upon which all other security measures are built.

Proposed Steps

Change ROUTER Default Login Credentials:

Change the default username (if available) and password. This is the first line of defense against unauthorized access. All too often the ISP installation of the Router retains the default credentials which make it all too easy to login to your router.

The Importance of Firmware Updates

What is Firmware? Think of firmware as the router's operating system. It manages all the router's functions. Why Update? Manufacturers release updates to fix security vulnerabilities, enhance performance, and add new features.

WiFi SSID and Password 

SSID (Service Set Identifier) protection is an important aspect of securing your Wi-Fi network. The SSID is the name of your wireless network that users see when they attempt to connect to it. Protecting the SSID helps ensure the security and privacy of your network.

Create a strong Wi-Fi password (also known as the pre-shared key) that is difficult to guess. Use a mix of upper and lower-case letters, numbers, and special characters. Avoid using common words or phrases

Hardening the Router configuration

There are a minimum of 10 key points to address for security hardening. 

• Enable highest encryption protocols on your router to protect your Wi-Fi network. Encryption ensures that data transmitted between devices and the router is secure and cannot be easily intercepted.
• Enable the built-in firewall on your router to filter incoming and outgoing network traffic. This helps block malicious connections and provides an additional layer of defense.
• Unless necessary, disable remote management of your router. This prevents unauthorized access to your router's settings from outside your home network. You can always enable on an adhoc basis.
• Verify for any Port Forwarding and validate the requirement of each. Port forwarding is a networking technique that allows incoming connections to reach a specific device or service on a private network, such as your home or office network.
• Universal Plug and Play (UPnP) can introduce security vulnerabilities. It's recommended to disable UPnP unless required for specific devices or applications.
• · Disable any unnecessary services or features on your router to minimize potential attack vectors. Only enable the services you actually need.
• · Enable router logging and configure alerts for suspicious activity. Regularly review logs for anomalies.
• · Wi-Fi Protected Setup (WPS) can be vulnerable to brute-force attacks. Disable WPS unless required by specific devices
• · Turn off (or Forget) any unused services and features on your router to reduce the attack surface.
• · Finally, setup a separate guest network for visitors. This isolates their devices from your main network, reducing the risk of unauthorized access to your personal devices and data.

Regular Backups

Backup your router's configuration settings. This helps in case you need to reset the router or restore it to a known good state.