Securing a small shop LAN app: network basics for a business VM
A lot of small businesses now run their core software as a virtual machine on a computer in the back room. Staff open it in a browser from the counter PC, a laptop or a phone, and the data stays in the building. That also means the shop's local network is now the front door to customer records, prices and inventory. You don't need an IT department to lock that door. You need a handful of habits,…
Small businesses often run their essential software on a virtual machine (VM) located in a back room. Staff access the app through a browser on a counter PC, laptop, or mobile device, keeping all data within the premises. However, this setup exposes the shop's local network to potential security threats. To secure this LAN app, follow these steps:
1. Split the network: Create a separate guest Wi-Fi network for customers, isolating their devices from the main LAN. Only staff should connect to the staff network, ideally using a cable connection.
2. Give the VM a stable address: Reserve a fixed IP address for the VM in the router's settings to prevent changes after power outages. Alternatively, set a static address within the VM and configure the gateway and DNS to match the router.
3. Firewall basics: Avoid port-forwarding the business app to the internet. Disable Universal Plug and Play (UPnP) and remote router administration. Enable the operating system firewall on both the host and the VM, allowing only necessary services.
4. Passwords: Replace default passwords with long, unique ones for the router, host computer, VM, and app accounts. Use a password manager to store these credentials securely.
5. Updates without surprises: Schedule regular firmware updates for the router, and set operating system updates to install outside business hours. Update the VirtualBox host during a quiet window and confirm the VM starts correctly after the update. Follow vendor update instructions for the app and VM guest system.
6. Access control: Manage who has access to the router, host machine, and app. Store passwords securely and update the access list whenever staff change roles or leave the business.
7. Monthly check: Run a routine checklist to ensure guest Wi-Fi remains isolated, the VM retains its reserved address, and all devices are up-to-date. Verify the app user list matches current staff and restore backups to a secure location.
Written by urgent.news from Dev.to's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
