You’re Been Audited: Please Close Port 443

PROBLEM:

Open Port 443 Enables Unacceptable Risk

The most common ports to carry out an attack are 22, 80, and 443.
Source: Alert Logic

A global adhesive manufacturer based in the US and Canada had just been acquired by a Japanese conglomerate. As part of the post-acquisition process, a $15,000 technology audit was conducted by the new parent company.

The result? The manufacturer was a long-time RD Web user utilizing Port 443 — the recommended method by Microsoft® for their RD Gateway implementation.

The problem? Leaving Port 443 open exposed the manufacturer to unacceptable risks by the Japanese conglomerate, which said that the port must be closed immediately.

Even with strong passwords and multi-factor authentication, the acquiring company felt the risk was too great with RDP being open to the Internet.

SOLUTION:

Port 443 is one of the ports that Cyber Terrorists Target

Every 30 seconds there is a new attack somewhere on the web.
Source: TechJury

The cybercrime world is evolving quickly. Using the same port scanning tools that an infosec auditing firm would use, cyber criminals can quickly discover what technology an organization is using over open Port 443. Once the solution is determined, cyber criminals will utilize available tools to attack it.

“An open Port 443 is one of the first places that cyber criminals will attack,” insisted the Japanese conglomerate.

If you think it won’t happen to us, think again. Every day, 300,000 new pieces of malware are created and available to cyber criminals, according to TechJury.

OUTCOME:

TruGrid SecureRDP: Easier, Safer, and Faster Than Microsoft RD Web

Through their managed service provider, the global adhesive manufacturer was able to close TCP Port 443, and replace their existing RDS with TruGrid in hours, not days like would have taken other technology stacks.

“I’m not a big fan of opening ports on the firewall for anything,” says Sean Jennings, CEO of C.I.S. Solutions, and managed service provider of the global adhesive manufacturer. “With TruGrid, we implemented a more secure remote connection that does not require any open ports, includes multifactor authentication, and GEO IP blocking. Let’s just say the Japanese conglomerate was more than happy that Port 443 was closed, without impacting the ability for employees to work remotely” the same level as before the pandemic, and with the same confidentiality.