If, like me, you know a bit about computers and maybe a (very little) bit about security, you probably get asked by friends and family to help them with their computers.  Everything from "What AV should I use?" to "I think my computer has a virus--can you fix it for me?"

Well, last week, while I was on my unplanned, unfunded, government mandated "vacation", a friend of mine, Mike, threw me a new one:  "My small business network is not working and I'm not sure why. Can you help me? "  I've never been asked to help with a whole network (albeit a small one) before.  I told him I'd try--as long as he promised not to sue me if I screwed it up.  It's a lawn care service, with a router, 3 hosts, a web server, a multi-function printer, and some storage.

After a quick initial investigation I determined that he had lots of problems:  really bad design (as in not designed, more like just grew), no real security, lots of malware, including bot software, trojans, and key-loggers.  After cleaning the infections I wasn't sure what to do next, so of course, I went searching the internet.  And I found this...
          The Manageable Network Plan from these guys...

(I know, right!)

and I really, really like it.  It's a step-by-step guide on how to (re-)gain control of a network and and protect it, in easy to understand non-technical language.

Here it is in pictorial form:

So, Mike and I are implementing the plan.  We're on Milestone 3 and I'm researching some affordable options for improving the architecture.

Unfortunately, I have to go back to work tomorrow, so I won't be able to devote as much time as I'd like,  (can't believe I said that!) but Mike's pretty committed, so I'm optimistic that we will, eventually, finish all eight milestones.  I'll let you know.

"Good Luck and Good Night"!

v/r

Mark V2