---
title: 3 Ways to Use Security Policies to Control Network Traffic
description: Organizations can mitigate their risk of a data breach with a solid network security policy and the right security protections.
image: https://www.resilientiq.com/hubfs/3_Ways_to_Use_Security_Policies_to_Control_Network_Traffic-1.jpg
---

[![NEW_ResilientLogoShadow_FINALwhite.png](https://www.resilientiq.com/hs-fs/hubfs/Resilient_Logos/NEW_ResilientLogoShadow_FINALwhite.png?width=1210&height=254&name=NEW_ResilientLogoShadow_FINALwhite.png "NEW_ResilientLogoShadow_FINALwhite.png")](http://resilientiq.com)

![Resilient-Advanced-Network-Solutions 4.jpg](https://www.resilientiq.com/hs-fs/hubfs/Blog_Images/Resilient-Advanced-Network-Solutions%204.jpg?width=1920&name=Resilient-Advanced-Network-Solutions%204.jpg "Resilient-Advanced-Network-Solutions 4.jpg")

# Networking Intelligence

October 24, 2015

# 3 Ways to Use Security Policies to Control Network Traffic

![authorIcon](http://www.sparkreaction.com/hubfs/Oceania%20Theme%202016/Images/authorIcon.png) By [Resilient Intelligent Networks](https://www.resilientiq.com/blog/author/resilient-intelligent-networks) ![topicIcon](http://www.sparkreaction.com/hubfs/Oceania%20Theme%202016/Images/topicIcon.png) [acceptable use policy](https://www.resilientiq.com/blog/topic/acceptable-use-policy), [employee it policy](https://www.resilientiq.com/blog/topic/employee-it-policy), [Control network traffic](https://www.resilientiq.com/blog/topic/control-network-traffic)

[![](https://www.resilientiq.com/hubfs/3_Ways_to_Use_Security_Policies_to_Control_Network_Traffic-1.jpg) ](https://www.resilientiq.com/blog/3-ways-to-use-security-policies-to-control-network-traffic)

![3_Ways_to_Use_Security_Policies_to_Control_Network_Traffic-1.jpg](https://www.resilientiq.com/hubfs/3_Ways_to_Use_Security_Policies_to_Control_Network_Traffic-1.jpg "3_Ways_to_Use_Security_Policies_to_Control_Network_Traffic-1.jpg")Security breaches are a concern for all organizations, large or small. A [2014 Ponemon Institute study](http://www.ponemon.org/library/2014-global-report-on-the-cost-of-cyber-crime) stated that 43 percent of all businesses have had a data breach within the previous 12 months. This means organizations do not have to worry if they will experience a breach; they need to worry about when. However, organizations can mitigate their risk of a data breach with solid network security policies and the right security protections.

### The Need for a Data Security Policy

 A Network Security Policy is a set of rules developed by organization to ensure that all employees and systems in the IT infrastructure are working under the same set of guidelines. The purpose of setting policy is to prevent and detect misuse of data, networks, computer systems and applications; to protect the organization's reputation; and to meet industry compliance standards.  
When your organization lacks a detailed and up-to-date security policy, your data is left vulnerable. A data security policy is a company’s best defense against a possible breach and best resource in restoring the network in the case of a breach. Failure to have [adequate information security policies](https://www.resilientiq.com/FirewallUTM.aspx) will significantly increase the risk an organization faces.

### Using Security Policies and Firewall Objects to Control Network Traffic

 The main purpose of security policy is to control all network traffic attempting to pass through. It is important to control access between the Internet and a network, allowing users on the network to connect to the Internet while protecting the network from unwanted intrusions from the Internet. Your firewall has to know what access should be allowed and what should be blocked. No traffic should pass through the firewall unless specifically allowed by a security policy.  The following are examples of a few policies that should be instituted.

**1. Limit Internet Access**

 Set a policy that uses firewall to restrict access to certain sites. Implementing this policy will reduce the opportunity for malware and spyware to enter your server and computers. Restrict Internet access to specific IP addresses. This ensures only employees who need internet access at specific times may access the Internet through the firewall.

Limiting employees to accessing social media sites between specific hours of the day will reduce the chance of accidentally sharing confidential information via social media.

Set a policy that limits Internet access to guarantee a set amount of bandwidth for VoIP services. A dedicated amount of space for VoIP services can prevent other employees from engaging in potentially harmful internet activity.

**2. Block Harmful Internet Source Addresses**

 Block known sites that contain material that is not safe for work (NSFW) and should not be allowed in the workplace. Publish a specific source address block to be located above general security policies. This ensures all users have this source blocked, regardless of their allotted time frames for Internet access.

**3. Educate Employees **

 

Employees are your weakest link, from opening email from unknown senders and clicking on suspicious links, to insider threats. [Employee education on policies and best practices](https://www.resilientiq.com/blog/make-a-choice-employee-privacy-or-cyber-security) is a key factor in keeping your organization safe. Employees can only become active participants in security policy implementation through ongoing education.

### Work with Experts

 Experts who understand the technology choices that will best fit your business policies are critical to setting security policy that meets your unique requirements and protects your organization. Resilient Intelligent Networks is a system integrator that has the proven expertise to provide policy guidance for [comprehensive secured network services](https://www.resilientiq.com/Network-Security-Solutions.aspx) that enable real-time system analysis of devices, network behavior, and users, and protect against sophisticated internal and external threats.

 SHARE THIS STORY [**](https://www.facebook.com/sharer/sharer.php?u=https://www.resilientiq.com/blog/3-ways-to-use-security-policies-to-control-network-traffic&title=3%20Ways%20to%20Use%20Security%20Policies%20to%20Control%20Network%20Traffic&picture=http://cdn2.hubspot.net/hubfs/703198/3_Ways_to_Use_Security_Policies_to_Control_Network_Traffic-1.jpg&description=Organizations%20can%20mitigate%20their%20risk%20of%20a%20data%20breach%20with%20a%20solid%20network%20security%20policy%20and%20the%20right%20security%20protections.) | [**](https://twitter.com/intent/tweet?source=https://www.resilientiq.com/blog/3-ways-to-use-security-policies-to-control-network-traffic&text=3%20Ways%20to%20Use%20Security%20Policies%20to%20Control%20Network%20Traffic) | [**](http://www.linkedin.com/shareArticle?mini=true&url=https://www.resilientiq.com/blog/3-ways-to-use-security-policies-to-control-network-traffic&title=3%20Ways%20to%20Use%20Security%20Policies%20to%20Control%20Network%20Traffic&summary=Organizations%20can%20mitigate%20their%20risk%20of%20a%20data%20breach%20with%20a%20solid%20network%20security%20policy%20and%20the%20right%20security%20protections.)

[NEXT POST **](https://www.resilientiq.com/blog/cyberattacks-against-healthcare-organizations)

### Search



### Recent Posts

### Posts by Topic

- [network security (29)](https://www.resilientiq.com/blog/topic/network-security)
- [employee it policy (15)](https://www.resilientiq.com/blog/topic/employee-it-policy)
- [security fabric (13)](https://www.resilientiq.com/blog/topic/security-fabric)
- [ransomware (11)](https://www.resilientiq.com/blog/topic/ransomware)
- [acceptable use policy (8)](https://www.resilientiq.com/blog/topic/acceptable-use-policy)
- [cyber threat analysis (7)](https://www.resilientiq.com/blog/topic/cyber-threat-analysis)
- [IT Security in Education (6)](https://www.resilientiq.com/blog/topic/it-security-in-education)
- [malware (6)](https://www.resilientiq.com/blog/topic/malware)
- [IoT Security (5)](https://www.resilientiq.com/blog/topic/iot-security)
- [Patient data security (5)](https://www.resilientiq.com/blog/topic/patient-data-security)
- [Protecting Student Data (5)](https://www.resilientiq.com/blog/topic/protecting-student-data)
- [network vulnerability (5)](https://www.resilientiq.com/blog/topic/network-vulnerability)
- [wireless networking solutions (5)](https://www.resilientiq.com/blog/topic/wireless-networking-solutions)
- [Cyber Threat Assessment (4)](https://www.resilientiq.com/blog/topic/cyber-threat-assessment)
- [Digital Privacy in Schools (4)](https://www.resilientiq.com/blog/topic/digital-privacy-in-schools)
- [protecting your it network (4)](https://www.resilientiq.com/blog/topic/protecting-your-it-network)
- [DDoS Attacks (3)](https://www.resilientiq.com/blog/topic/ddos-attacks)
- [IT Security in Schools (3)](https://www.resilientiq.com/blog/topic/it-security-in-schools)
- [Protecting Employee Privacy (3)](https://www.resilientiq.com/blog/topic/protecting-employee-privacy)
- [advanced persistent threats (3)](https://www.resilientiq.com/blog/topic/advanced-persistent-threats)
- [cloud security (3)](https://www.resilientiq.com/blog/topic/cloud-security)
- [healthcare cyberattacks (3)](https://www.resilientiq.com/blog/topic/healthcare-cyberattacks)
- [network threats (3)](https://www.resilientiq.com/blog/topic/network-threats)
- [phishing (3)](https://www.resilientiq.com/blog/topic/phishing)
- [secured network services (3)](https://www.resilientiq.com/blog/topic/secured-network-services)
- [securing the healthcare enterprise (3)](https://www.resilientiq.com/blog/topic/securing-the-healthcare-enterprise)
- [traffic shaping (3)](https://www.resilientiq.com/blog/topic/traffic-shaping)
- [Control network traffic (2)](https://www.resilientiq.com/blog/topic/control-network-traffic)
- [Intent-based Security (2)](https://www.resilientiq.com/blog/topic/intent-based-security)
- [K-12 Technology Security (2)](https://www.resilientiq.com/blog/topic/k-12-technology-security)
- [app performance (2)](https://www.resilientiq.com/blog/topic/app-performance)
- [bandwidth management (2)](https://www.resilientiq.com/blog/topic/bandwidth-management)
- [byod policy (2)](https://www.resilientiq.com/blog/topic/byod-policy)
- [cloud (2)](https://www.resilientiq.com/blog/topic/cloud)
- [critical infrastructure threats (2)](https://www.resilientiq.com/blog/topic/critical-infrastructure-threats)
- [cyber secure campus (2)](https://www.resilientiq.com/blog/topic/cyber-secure-campus)
- [cybersecurity strategy (2)](https://www.resilientiq.com/blog/topic/cybersecurity-strategy)
- [mobile device security (2)](https://www.resilientiq.com/blog/topic/mobile-device-security)
- [network optimization (2)](https://www.resilientiq.com/blog/topic/network-optimization)
- [network security in higher education (2)](https://www.resilientiq.com/blog/topic/network-security-in-higher-education)
- [network technology (2)](https://www.resilientiq.com/blog/topic/network-technology)
- [network visibility (2)](https://www.resilientiq.com/blog/topic/network-visibility)
- [oil and gas industry (2)](https://www.resilientiq.com/blog/topic/oil-and-gas-industry)
- [ssl encryption (2)](https://www.resilientiq.com/blog/topic/ssl-encryption)
- [threat intelligence (2)](https://www.resilientiq.com/blog/topic/threat-intelligence)
- [unified threat management (UTM) (2)](https://www.resilientiq.com/blog/topic/unified-threat-management-utm)
- [wan optimization (2)](https://www.resilientiq.com/blog/topic/wan-optimization)
- [wireless LAN access security (2)](https://www.resilientiq.com/blog/topic/wireless-lan-access-security)
- [wireless network best practices (2)](https://www.resilientiq.com/blog/topic/wireless-network-best-practices)
- [802.11ac wave 2 (1)](https://www.resilientiq.com/blog/topic/802-11ac-wave-2)
- [Endpoint Protection (1)](https://www.resilientiq.com/blog/topic/endpoint-protection)
- [Endpoint Security (1)](https://www.resilientiq.com/blog/topic/endpoint-security)
- [IT Security in Government (1)](https://www.resilientiq.com/blog/topic/it-security-in-government)
- [Internal Segmentation Firewalls (1)](https://www.resilientiq.com/blog/topic/internal-segmentation-firewalls)
- [Network Technology Problem Solving (1)](https://www.resilientiq.com/blog/topic/network-technology-problem-solving)
- [Point of sale attacks (1)](https://www.resilientiq.com/blog/topic/point-of-sale-attacks)
- [Public sector IT networks (1)](https://www.resilientiq.com/blog/topic/public-sector-it-networks)
- [Software-defined networking (1)](https://www.resilientiq.com/blog/topic/software-defined-networking)
- [Threat detection (1)](https://www.resilientiq.com/blog/topic/threat-detection)
- [application security (1)](https://www.resilientiq.com/blog/topic/application-security)
- [business critical applications (1)](https://www.resilientiq.com/blog/topic/business-critical-applications)
- [critical learning applications (1)](https://www.resilientiq.com/blog/topic/critical-learning-applications)
- [cybersecurity (1)](https://www.resilientiq.com/blog/topic/cybersecurity)
- [cybersecurity technology (1)](https://www.resilientiq.com/blog/topic/cybersecurity-technology)
- [data protection (1)](https://www.resilientiq.com/blog/topic/data-protection)
- [digital learning (1)](https://www.resilientiq.com/blog/topic/digital-learning)
- [healthcare data security (1)](https://www.resilientiq.com/blog/topic/healthcare-data-security)
- [healthcare mobile networks (1)](https://www.resilientiq.com/blog/topic/healthcare-mobile-networks)
- [high performance network security (1)](https://www.resilientiq.com/blog/topic/high-performance-network-security)
- [higher education (1)](https://www.resilientiq.com/blog/topic/higher-education)
- [hybrid clouds (1)](https://www.resilientiq.com/blog/topic/hybrid-clouds)
- [hyperconnected (1)](https://www.resilientiq.com/blog/topic/hyperconnected)
- [indicators of compromise (1)](https://www.resilientiq.com/blog/topic/indicators-of-compromise)
- [it industry news (1)](https://www.resilientiq.com/blog/topic/it-industry-news)
- [network infrastructure (1)](https://www.resilientiq.com/blog/topic/network-infrastructure)
- [network intrusion (1)](https://www.resilientiq.com/blog/topic/network-intrusion)
- [networking terminology (1)](https://www.resilientiq.com/blog/topic/networking-terminology)
- [next-generation firewal (1)](https://www.resilientiq.com/blog/topic/next-generation-firewal)
- [ngfw (1)](https://www.resilientiq.com/blog/topic/ngfw)
- [reinforce network technology (1)](https://www.resilientiq.com/blog/topic/reinforce-network-technology)
- [retail data security (1)](https://www.resilientiq.com/blog/topic/retail-data-security)
- [sandbox solution (1)](https://www.resilientiq.com/blog/topic/sandbox-solution)
- [sdn (1)](https://www.resilientiq.com/blog/topic/sdn)
- [security operations (1)](https://www.resilientiq.com/blog/topic/security-operations)
- [shadow IT risks (1)](https://www.resilientiq.com/blog/topic/shadow-it-risks)
- [ssl inspection (1)](https://www.resilientiq.com/blog/topic/ssl-inspection)
- [ssl security (1)](https://www.resilientiq.com/blog/topic/ssl-security)
- [university campus cybersecurity (1)](https://www.resilientiq.com/blog/topic/university-campus-cybersecurity)
- [zero-day attacks (1)](https://www.resilientiq.com/blog/topic/zero-day-attacks)

[see all](https://www.resilientiq.com/blog/3-ways-to-use-security-policies-to-control-network-traffic#)

### Subscribe to Blog

[![Resilient-Advanced-Networking-Solutions.png](https://www.resilientiq.com/hs-fs/hubfs/Resilient_Logos/Resilient-Advanced-Networking-Solutions.png?width=496&height=105&name=Resilient-Advanced-Networking-Solutions.png "Resilient-Advanced-Networking-Solutions.png")](http://resilientiq.com)

Contact

 2921 Country Club Road  
 Denton, Texas 76210  
 940-535-7500

#### Keep in Touch

### Subscribe to Our Blog

## [![social-1834007_960_720](https://www.resilientiq.com/hs-fs/hubfs/Social%20Media%20Icons/social-1834007_960_720.png?width=40&name=social-1834007_960_720.png "social-1834007_960_720")](https://www.facebook.com/ResilientIntelligentNetworks)[![social-1834011_1280](https://www.resilientiq.com/hs-fs/hubfs/Social%20Media%20Icons/social-1834011_1280.png?width=40&name=social-1834011_1280.png "social-1834011_1280")](https://www.linkedin.com/company/resilient-intelligent-networks)[![social-1834013_1280](https://www.resilientiq.com/hs-fs/hubfs/Social%20Media%20Icons/social-1834013_1280.png?width=40&name=social-1834013_1280.png "social-1834013_1280")](https://twitter.com/resilientiq)[![social-1834014_960_720](https://www.resilientiq.com/hs-fs/hubfs/Social%20Media%20Icons/social-1834014_960_720.png?width=40&name=social-1834014_960_720.png "social-1834014_960_720")](https://www.resilientiq.com/blog/rss.xml)[![](https://www.resilientiq.com/hs-fs/hubfs/Social%20Media%20Icons/social-1834016_960_720.png?width=40&name=social-1834016_960_720.png "social-1834016_960_720.png")](https://www.youtube.com/channel/UCIuShF1pL6Ekv2JTOnXuz-Q)

Search the Resilient Blog on Google