Free Internet Security for Small Businesses

For Simple Protection Against Viruses and Spyware: Microsoft Security Essentials

free security downloads
If all you need are the security basics, consider installing Microsoft Security Essentials (MSE), which protects Windows systems against viruses, spyware, and other forms of malicious software. It's a free download for any PC that Microsoft confirms is running a verified genuine copy of Windows. Businesses, however, are not permitted to use it in conjunction with more than 10 computers--so larger businesses will have to use something else for their security software.

Microsoft Security Essentials is a much simpler program than Comodo Internet Security. When we tested it most recently, MSE did a reasonably good job of stopping malware. Nevertheless, businesses are well advised to seek something a little more advanced and feature-rich. On the other hand, if your small business lacks IT personnel who can understand and use a more complex product, MSE may serve as a viable alternative.

Beyond its basic real-time antivirus protection, Microsoft Security Essentials offers two significant features for safeguarding the PCs on your network. The first of these capabilities is Network Inspection System, which attempts to detect malware originating from the Internet or coming over your network before it reaches your computer. The second feature is Behavior Monitoring, which helps to identify and stop suspect activity or patterns that the monitoring software detects.

Microsoft Security Essentials (MSE)
Main screen of Microsoft Security Essentials (MSE).

If you want to give MSE a try, download it from the Microsoft site. Just prior to installing, make sure that you have completely uninstalled any existing antivirus program and rebooted Windows to prevent any conflicts. MSE doesn't include a firewall, so make sure that the Windows Firewall is turned on.

Security Essentials' default settings provide adequate protection for most environments. But if you use removable storage devices such as USB flash drives, you may want to enable scanning of removable drives. To do so, select the Settings tab, click the Advanced menu, and enable Scan removable drives.

Microsoft Security Essentials (MSE): removable drive scanning
Enabling scanning of removable drives in MSE.

For Content Filtering and Additional Malware Protection: OpenDNS

OpenDNS is a DNS-based content filtering tool that helps block inappropriate, dangerous, or malware-infested sites. It offers additional DNS security, similar to the SecureDNS service optionally included with Comodo Internet Security. Using OpenDNS may also speed up your Web browsing because of its smart, enhanced functionality. The basic services of OpenDNS are free; premium subscriptions add extra features.

DNS stands for Domain Name System. It's the background service that converts domain names into IP addresses, enabling users to enter human-friendly domain names into a Web browser instead of IP addresses. Typical DNS servers used by most Internet service providers (ISPs) provide only the basic domain name to IP address functionality. But because DNS operates in the browsing process, enhanced DNS servers can provide filtering and advanced functionality, as OpenDNS does.

Since it's DNS-based, you don't have to install any software to use OpenDNS. Instead, you just replace the DNS addresses on your router (to protect your entire network) or the addresses on specific computers (to protect those PCs only).

DNS address settings
Example of a router’s DNS address settings.

You can use OpenDNS in three ways, depending on what features or services you want.

The most basic option is to change the default DNS addresses on your router or computers to the main OpenDNS addressees: 208.67.222.222 and 208.67.220.220. Without an account, they provide phishing-site blocking to help protect your identity, and they include some additional DNS security features.

Setting DNS addresses in Windows
Example of setting DNS addresses in Windows.

Another option is to change the default DNS servers on your router or computers to the FamilyShield OpenDNS addressees: 208.67.222.123 and 208.67.220.123. Even without an account, they automatically block adult websites, proxy, and anonymizer sites to prevent filter bypassing, phishing, and some virus-spreading websites.

The third option is to sign up for an OpenDNS account and use the main addresses: 208.67.222.222 and 208.67.220.220. Then you can define which site types to block, customize the guide and block pages, and monitor Internet usage. You may want to start with a free account and then upgrade to a premium account later if you require more features.

The OpenDNS sign-up process offers some help on configuring your network or router. After logging in to the Dashboard, you'll need to add a network to your account. If you're currently on the network that you want to protect, press the Add this Network button to save the public Internet IP address to the account.

OpenDNS Dashboard and settings
The OpenDNS Dashboard and settings.

Bear in mind that, if you use an OpenDNS account and your Internet connection uses a dynamic (changing) IP address--which most home and small business accounts do--rather than a static address, you'll have to keep OpenDNS updated with IP changes.

You can either download a simple updater application to one of the computers or configure your router's dynamic DNS settings and have it do the updating. If you want to work through your router, you may have to use the free DNS-O-Matic service if the integrated DDNS client doesn't support HTTPS updates. You can use your OpenDNS username and password to log onto DNS-O-Matic, add OpenDNS as a service, and then configure your router to update your DNS-O-Matic account, which then updates OpenDNS.

Eric Geier is a freelance tech writer—become a Twitter follower to keep up with his writings. He’s also the founder of NoWiresSecurity, which helps small businesses easily protect their Wi-Fi network with Enterprise security.

Subscribe to the Security Watch Newsletter

Comments