Your firewall and Wi-Fi need updates too

Why it matters

Firewalls, VPN equipment, switches and Wi-Fi access points run their own software, called firmware. Like any software, it has flaws, and makers release fixes.

Network equipment is an attractive target. It sits at the edge of the network, facing the internet, and it is often left alone for years. Government security agencies regularly warn about attacks on firewalls and remote access equipment, many using flaws that already had fixes.

What to do

• Know what you have: model, firmware version, and whether it still receives updates.
• Apply security updates promptly, especially for anything reachable from the internet, like the firewall and remote access.
• Schedule updates for quiet times, because network equipment often restarts and the office briefly loses connection.
• Replace equipment at end of life. Once a maker stops releasing fixes, new flaws stay open for good.
• Change default passwords and turn off management access from the internet unless it is needed.

The quiet risk

Network equipment rarely fails loudly. Out-of-date firmware just sits there until someone uses it. That is why it needs a schedule and someone responsible.