Internet Security Methods Offered

Last updated 9-11-2026

Listed in order of importance. Security and backup are the only two service offerings we provide that have require customer active participation. The notion of “we will handle everything” does not apply. It’s you data and Internet security threats are only increasing.

Have multiple data backups

Make sure all data, even cloud systems, are backed up to another location. We offer Immutable Data Backup & Instant Recovery

Second Factor Authentication

Your online banking and other applications must send a “second factor” authentication request to an authentication app or passkey. Don’t use a cell phone or email as a second factor.

DNS Filter (pick one)

Use dnsfilter.com to block malicious web sites. You use the free Windows anti-virus program that does NOT have this service.

Included with many advanced firewall routers.

Included with Microsoft Defender for Business and many MS 365 plans. If you already paying for this plan, this is the best value.

PC Security

Anti-Virus

  • Paid and centrally managed MS Defender for Business or Trend Micro
  • Free customer managed Windows Defender anti-virus which scores very well against paid products.

On your Windows PC, follow the pictured 3 step process to verify your anti-virus is “all green” or click on it to display the broken item and choose “Turn On” to clear the issue.

Admin account

  • is disabled
  • Your Infotel purchased PC is setup with limited authority and can not allow a program to be installed or we modified the PC you purchased.

Operating System (OS) Updates  – are set to automatic.

Email Security Safegaurds (#1 source of virus attacks. This is a partial list

  • Warnings of uncommon email senders. The feature reveals their true sending URL.
  • Spam and anti-phising filters
  •  Anti-virus scans emails
  • URL sandboxing that redirects user “clicks” to a filtering service.

Your purchased email package from Microsoft, Godaddy, Google, etc needs to have Internet security features.

Then train your employees to not click on email links from unknown / uncommon senders.

Implement DMARC registration of your email domain so others cannot spoof your domain identity.

Computer server security 

  • Operating System Patches are scheduled (patch Tuesday) and in some cases attended. Accept that 2% of patches will break something.
  • Virus protection software from a paid service with virus updates set to daily. Know how to test for correctly operating anti-virus.
  • Daily server health monitoring from our data center.

Penetration Testing and Domain controller testing

Use a 3rd party penetration testing tools to test a domain and then plug the detected holes. We use securityscorecard.com

A layer 7 firewall stops outbound traffic to bad web sites 

Install an advanced security router using professional install services from the manufacturer. You attend the session or answer a survey to lock things down to essential traffic.

  • May we lock out access to/from Russia, China and Iran IP addresses?
  • Who needs social media access at all or at what times
  • Can we restrict surfing to 100 web sites? Will you accept an open Internet research computer on its own network?
  • May we shut down Internet access and or Wi-Fi at certain times?
  • Restrict access to a current MAC list. A visitor’s laptop would not work with a hard-wired connection.
  • Only DNS, HTTP(S), DHCP and ICMP services for LAN and Wi-Fi interface.

Active Directory (AD) server controls your staff’s behavior 

A computer virus is a malicious software program that runs on your PC. Prevent virus installs and you prevent viruses.  An AD server is a guard that tells workstations what it can and cannot access or install, enforces complex passwords and password changes, restricts users to only the required network directories for them to do their job.

VPN connections for voice and data traffic

We use 256bit encryption VPN tunnels to connect to our customers. We started using encrypted voice back in 2004 before anyone else. Now, it’s a VoIP requirement for many industries.

Isolated voice and data networks

  • Physical separate voice and data cabling and Ethernet switches are provided.
  • Logically separated VLANs from the edge router are programmed.

Mobile Devices

We believe Apple IOS is more secure than Android. We can extend group security policies to these devices.

Train users to resist “spear phishing” attacks. Clicking on a “bad” email hyperlink is the #1 cybercrime point of entry.

  1. Require your users to study the NIST web site. This site explains phishing and methods to defend against phishing attacks.
  2. Have a meeting and ask your employees to quiz each other on phishing risks. Make it a game.
  3. Allowing us to implement a benevolent phishing service. When we catch a user failing our email test, we’ll alert you to train again.

Rehearse a prepared disaster recovery plan

… to recover clean offline data to fresh formatted workstations and servers on a backup network. For this, we offer:

Cyber Insurance

The cyber insurance industry is young and coverage has many gaps. Yet, it’s sometimes required by your business partners. Money spent on prevention via the above methods to include 3rd party audits increases your chance of being paid for a cyber claim.

Things we do at our own cost