This blog highlights the importance of staying updated with RUCKUS® security to combat sophisticated cyber threats. It underscores the necessity of regular firmware and software updates, monitoring security bulletins, and reporting potential security issues to maintain network integrity and address both new and existing vulnerabilities effectively.

Technology, and the ability to get around that technology, is constantly changing, so RUCKUS® security has to help you change with it. As attackers become more sophisticated, it becomes that much more important to keep abreast of the latest security concerns and bulletins. In addition, the basics of security defense, discussed in previous RUCKUS Networks blogs, become even more important so you have sufficient information to address both old and new threats. RUCKUS takes security seriously and provides up-to-date websites, software, and content to keep you aware of needed changes, patches, and security concerns.

Importance of firmware and software updates

Monitoring security bulletins, security advisories, threat intelligence, and other sources of information for potential security issues is important for proactively protecting your network against known and evolving issues such as remote code execution, botnets, ddos, and other related vulnerabilities. But, there is also a place for letting process and controls assist with that responsibility. By instituting regular updates to your firmware and software, you can maintain network security, address performance issues, and protect against emerging vulnerabilities just by keeping your network up-to-date.

How to check for Security Bulletins and vulnerabilities

Security bulletins are a primary means of keeping up with actual vulnerabilities in the network. These bulletins will list out the name of the vulnerability, description, what could be allowed by the vulnerability, and patches recommended to fix the issue. In addition, there are national or technology-specific registries that you can check to stay current.

Steps to check for the latest RUCKUS Security Bulletins

To access the latest security bulletins and advisories, visit the official RUCKUS website maintained both externally and within the RUCKUS support portal. The websites contain helpful information for RUCKUS customers to read about how to address known issues via a specific bulletin. Links for each are below:

RUCKUS Networks: Security Bulletin external website

How do you check CISA and NIST for common vulnerability events (CVEs)?

In addition, it is a good idea to check on known vulnerabilities, also known as common vulnerability events (CVEs). The U.S. government maintains a repository of known vulnerabilities and associated severity levels (known as CVSS severity).

The Cybersecurity and Infrastructure Security Agency (CISA) also maintains a database of cybersecurity alerts and advisories that is updated regularly. It is searchable by advisory type, release year, or vendor, making it easy to lookup the latest on any product in your network.

Reporting a RUCKUS security issue

Prompt resolution of vulnerabilities and threats is critical for all network owners. That is why reporting potential security issues to RUCKUS is an important part of making your network more secure. Reporting an issue fosters collaboration for proactive security management and also allows you to find out if what you are experiencing is a security gap or is already addressed by a known issue (and patch). Also, if there are any immediate mitigation steps, you can find that out when reporting the issue or searching the bulletin database.

What is the procedure to report a RUCKUS product security issue?

RUCKUS publishes an easy-to-follow process for reporting a potential security issue. The RUCKUS Product Security Team takes each report of a potential security issue seriously, as they are responsible for researching, analyzing, and responding to security incident reports involving RUCKUS products. Following this process allows RUCKUS to engage its network of security researchers, government entities, consultants, industry security organizations, outside entities, and other vendors to determine if an issue is security-related, the extent of that issue, and means of addressing it.

To let RUCKUS know about an issue, follow the defined security issue reporting process captured in the RUCKUS security incident response policy and send a message to the email alias listed. Makes sure to provide a detailed description of the issue you believe you are facing.

Replace End of Life Product in your environment

Product that is no longer supported, or end of life, often will not receive the most current security updates. Keeping end-of-support Wi-Fi® access points (APs), switches, or software in your environment opens you up to particular security issues and network outages that are generally addressed by patches to newer, actively supported product. Therefore, a best practice is to make sure you are not running any equipment or software that is no longer supported since it is possible this equipment won’t receive critical security updates or be monitored actively (or as actively) as currently supported networking gear.

If you are unsure, check out the list of RUCKUS products that are end of life to see if any of your equipment is no longer supported and needs to be replaced. Contact a RUCKUS sales representative if you find yourself in this situation and need to refresh your network.

Keep active support for products in your network

Just as important as keeping your products current is making sure your products are under an active support contract. The network edge is where a lot of processing and connectivity now happens, and one of the best defenses is for the firmware and software to be up-to-date. To be able to install the latest firmware and patches, you need an active support contract for software and maintenance. RUCKUS provides different levels of support, and you can renew existing support, start new support, or change levels of support as fits your business needs. You can check out more information on the RUCKUS support page.

RUCKUS Support Main page showing access to the portal, info about support programs, and other information.

Conclusion

Staying up-to-date with firmware and software updates and utilizing currently supported equipment are crucial for maintaining the security of your RUCKUS (or any vendor) devices. It allows for vulnerabilities or bugs to be addressed promptly, reducing the risk of cybersecurity threats. Likewise, keeping up-to-date on the known security issues by monitoring security bulletins is a key part of preventing security holes. To check for the latest security bulletins, visit the RUCKUS website and navigate to the support section. Remain informed about the latest security notices to stay proactive in protecting your network and devices. If you come across a security issue with your RUCKUS product, it is essential to report it immediately. Reporting security issues helps RUCKUS address and resolve the problem effectively, promoting the safety of RUCKUS customers. Follow the procedure outlined on the website to report any security concerns. Your contribution in reporting such issues is invaluable in maintaining a secure network environment for all users.

FAQ

How can RUCKUS One help you to perform security updates automatically?

RUCKUS One can automatically update firmware in your network through its cloud AI Ops. It identifies devices that require updates, downloads and installs the necessary files, and schedules the updates during low-traffic periods to minimize disruptions. This automation helps keep your network devices are up-to-date, enhancing performance and security.

Can other RUCKUS products help you keep your network up-to-date?

RUCKUS SmartZone can allow you to schedule firmware updates for your network. You, as the administrator, still need to configure and schedule the different zones and firmware versions for those zones to be updated, so it is not a completely automatic process. However, it does provide a level of control and flexibility that, coupled with due diligence to remain up-to-date on firmware and patches, can help to protect your network.

Predictive, Pre-Deployment, Post Installation and Health Check Wireless Surveys carried out by certified wireless engineers.

We look at Wi-Fi fundamentals, explore the benefits of and technology behind Wi-Fi 6, Wi-Fi 6E and what the future holds for Wi-Fi 7

Net-Ctrl provide network and structured cabling solutions as either a stand-alone installation, or to compliment products and solutions that we offer.

Connect-the-Classroom scheme  is allowing schools to upgrade their infrastructure to a solution that should last 10 years

Net-Ctrl provides two excellent support packages in addition to any equipment purchased. Find out about our Silver or Gold support package

IP-CCTV site survey to assess camera locations and requirement and existing Mobotix solution health checks.

Net-Ctrl offers our Cloud WLAN. Delivering market-leading patented technology managed by the Net-Ctrl engineering team.

We provide an automated Cybersecurity awareness training solution covering both simulated phishing and training courses.

Net-Ctrl offers a range of wireless network solutions. We explore some common questions related to these solutions.

Offering end-to-end, affordable and competitive financing solutions to help you achieve your business goals.