RE: Network scan tool/appliance horror stories

2012-10-30 Thread Jones, Barry
I can share with you several stories personnel (both IT or vendors), who have scanned Electric Utility environments with or without permission; and hence caused multiple failures - including electro-mechanical systems and related applications. Utilities typically utilize many industrial

RE: AD and enforced password policies

2012-01-05 Thread Jones, Barry
'Either way, expiring often is the first and most effective step at making the lusers hate you and will only bring the Post-It(tm) makers happy.' If you want to make them really, really unhappy, implement a rotating user ID coupled with an often expiring password policy. For example, User ID

Net Brain?

2011-11-22 Thread Jones, Barry
Anyone using Net Brain? Just curious what you think Barry Jones - CISSP GSNA P please don't print this e-mail unless you really need to.

Portable Analyzers

2011-11-18 Thread Jones, Barry
Just curious if anyone is using handheld network analyzers or to what extent and results - yeah/neah? I have used this product, and others, but wondered if anyone had others? OptiView(r) Portable Network

RE: Firewalls - Ease of Use and Maintenance?

2011-11-11 Thread Jones, Barry
Hey all. I wanted to say thanks for all the advice. Barry -Original Message- From: Jack Bates [mailto:jba...@brightok.net] Sent: Thursday, November 10, 2011 6:06 PM To: valdis.kletni...@vt.edu Cc: nanog@nanog.org Subject: Re: Firewalls - Ease of Use and Maintenance? On 11/10/2011 12:24

Firewalls - Ease of Use and Maintenance?

2011-11-08 Thread Jones, Barry
Hello all. I am potentially looking at firewall products and wanted suggestions as to the easiest firewalls to install, configure and maintain? I have a few small networks ( 50 nodes at one site, 50 odd at another, and maybe 20 at another. I have worked with Cisco Pix, ASA, Netscreen, and

RE: Synology Disk DS211J

2011-10-04 Thread Jones, Barry
...@maunier.org Sent: Friday, September 30, 2011 8:32 AM To: Jones, Barry bejo...@semprautilities.com Subject: Re: Synology Disk DS211J 2011/9/29 Jones, Barry bejo...@semprautilities.com Hey all. A little off topic, but wanted to share... I purchased a home storage Synology DS1511+. After

Synology Disk DS211J

2011-09-29 Thread Jones, Barry
Hey all. A little off topic, but wanted to share... I purchased a home storage Synology DS1511+. After configuring it on the home net, I did some captures to look at the protocols, and noticed that the DS1511+ is making outgoing connections to 59.124.41.242 (www) and 59.124.41.245 (port 81 89)

RE: Synology Disk DS211J

2011-09-29 Thread Jones, Barry
Yep! -Original Message- From: Matthew Palmer [mailto:mpal...@hezmatt.org] Sent: Thursday, September 29, 2011 2:31 PM To: nanog@nanog.org Subject: Re: Synology Disk DS211J On Thu, Sep 29, 2011 at 12:11:48PM -0700, Jones, Barry wrote: A little off topic, but wanted to share... I

RE: Synology Disk DS211J

2011-09-29 Thread Jones, Barry
Or, open those specific ports as needed, then close. PITA though (pain in the @ss) -Original Message- From: Jones, Barry [mailto:bejo...@semprautilities.com] Sent: Thursday, September 29, 2011 4:14 PM To: 'Matthew Palmer'; nanog@nanog.org Subject: RE: Synology Disk DS211J Yep

Access and Session Control System?

2011-09-01 Thread Jones, Barry
Hello all. I am looking at a variety of systems/methods to provide (vendor, employee) access into my dmz's. I want to reduce the FW rule sets and connections to as minimal as possible. And I want the accessing party to only get to the destination I define (like a fw rule). When I refer to