6 Security settings you should Tweak When you First Setup your VPS

Whether you purchased VPS for web hosting, gaming or streaming, you should deploy stringent security measures. Even though the host will take care of most aspects of security, you can do a few tweaks to up the security level of your web server.

But before we embark on our special journey, we will quickly take your through the basics of Virtual private server so buckle up.

What is VPS Hosting?

Virtual private server hosting is a technology that enables providers to sell private space (partitions) on dedicated servers. The partitions are so coded that each behaves as an individual server, even though they have the same physical hardware to rely on. This ‘sharing’ brings down the cost as the overall expenses are distributed among several customers.

Now, coming on to the most pressing question, what are the security settings that you should tweak when you first set up your VPS server. This blog will help you answer that. We have tried to keep the content as crisp as possible, without overdoing anything, so stay tuned.

1. Create a new admin

With every VPS, you will receive an admin account with default login id and password. The default user is the most common target of brute force attacks. This is because the default password is mostly “admin”. Thus, one of the first things that you should do on your VPS is to create new users with an entirely new login id and password. This is your first (and important) step towards securing your server.

2. Configure firewall/antivirus

Once you are done creating a new admin account, it is time to enable/configure firewall and antivirus. Simply begin by enabling Security Essential suite and Firewall application. Install an antivirus if you haven’t already. Antivirus is your one-and-only line and defence. Though largely underrated, antivirus is often the last string to keep your cart pulling.

3. Only allow privileges that are needed

When you create new user accounts, do not give them unlimited privileges. Restrict access to a bare minimum and allow only those functionalities that are needed. For example, if three functions can get the job done, do not include a fourth. This will help you easily detect where an attack might have propagated, and also prevent your admin account getting compromised.

4. Always have a backup

Backup every file on your backup servers. Remember that you are on a new host so backing up should be the first thing on your list. The new host may have an entirely different control panel. Get used to the changed interface. Back up ensures that you can work freely on your server. If anyhow you lose data, you can quickly restore it using the already created backup.

5. Always have the latest update installed

Software companies don’t roll out updates so you can ignore them. Updates contain essential bug fixes, patches and the solutions to underlying loopholes. While Linux distros don’t usually release updates, Windows OS gets updated every now and then. If you are on Linux, wait for the next stable release, which might take years. On windows, update as frequently as possible, or at least every time there is a major update.

6. Audit regularly

Regularly audit your server. It is only by auditing that you would come across malicious programs that are otherwise overlooked by the firewall and antivirus application. When running a scan, do a deep check once every week. Though you may perform quick checks with your antivirus, some advanced malware are only detected with thorough and boot-time scan.

Takeaway

We hope you now know how to setup a VPS. If you need more help setting up your VPS Hosting, do not forget to call us. You can also drop an email and we’d help you figure out the problem, and also the solution for that purpose.

About Nishant Nath (36 Posts)