How to configure MikroTik for a small business: a secure baseline step by step
Update RouterOS, replace the admin user, close management services, set up the firewall and a guest network — with ready-to-use commands.
Read articleProxmox VE is a popular free virtualization platform for small and medium companies. Because one host runs many virtual machines, its security matters more than that of any single server. Menu names below are for Proxmox VE 8.
Before you start: make sure you have console access (IPMI/iDRAC/iLO or a monitor) before changing firewall rules, and a recent backup of all virtual machines.
Step 1. Keep management on a separate network
The web interface (port 8006) and SSH must never be reachable from the internet. Put management on its own VLAN and reach it from the office or through VPN.
Step 2. Turn on two-factor authentication
In Datacenter → Permissions → Two Factor add TOTP or a security key for every administrator. Use personal accounts with only the roles they need instead of sharing root@pam.
Step 3. Enable the Proxmox firewall carefully
In Datacenter → Firewall first add rules that allow 8006 and 22 from the management network, then enable the firewall in Options. Use per-VM firewall rules to limit traffic between virtual machines.
Step 4. Back up to a separate system
Schedule backups in Datacenter → Backup, preferably to Proxmox Backup Server on separate hardware, with an additional copy off-site. Test restores regularly.
Step 5. Install updates
Configure the appropriate package repository and update the host regularly; plan reboots for kernel updates by migrating or shutting down VMs.
apt update && apt full-upgradeProtect the host first — every virtual machine depends on it.
Need help with this? Contact CySec for a free consultation.