RE: Need System/Application Security Advice

2010-10-08 Thread Alan Davies
That's not really security. Once you have an account on a domain, you are far more likely to be able to privilege escalate and further penetrate the network/domain. The solution depends on how deep your pockets are and how critical the data is. You could do it with a DMZ based domain I guess ..

RE: disk encryption

2010-10-08 Thread David Lum
I am rolling PGP full disk encryption out this month, I am currently at 147 systems reporting in to the PGP console, with 45 of them people that are never in the office (thank you SMS!!!). In our org if you have a laptop, the disk gets encrypted. The central management features are the BOMB,

How'd this for a bad day? AKA bad me

2010-10-08 Thread David Lum
I have 7 production systems running on 3 different ESX boxes in an ESX cluster, and 2 different logical SAN volumes (sorry am not SAN savvy, I just know I have two different SAN volumes to choose from when making a VM). Today, a SAN blows up and takes out half - our SharePoint server (heavily

Re: AV Opinions

2010-10-08 Thread Andrew S. Baker
Or Vipre, because Joseph has already indicated that he's familiar with them. He's looking for other recommendations... *ASB* * * On Fri, Oct 8, 2010 at 1:12 AM, Ryan Finnesey ryan.finne...@harrierinvestments.com wrote: No one as commented on the Forefront products. *From:*

Re: How'd this for a bad day? AKA bad me

2010-10-08 Thread Andrew S. Baker
Yes, process failures can be deadly... Also, it is more important in this day and age of massive consolidation to make sure that your backups and DR are effective, because cascading failures can take out much more of your infrastructure than ever before. *ASB *(My XeeSM Profile)

Re: AV Opinions

2010-10-08 Thread Chipshead
Don't see much Trend chatter either. - Original Message - From: Ryan Finnesey ryan.finne...@harrierinvestments.com To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Sent: Friday, October 8, 2010 1:12:24 AM Subject: RE: AV Opinions No one as commented on the

RE: AV Opinions

2010-10-08 Thread Joseph L. Casale
Yup, And FF is prohibitively expensive in small environments, but it is my favorite. Most reliable I have ever used, _never_ had an FP or a dead machine or a bad dat. Its detection rates aren't quite as good as the top guys but you compromise I guess. Right now, I am keen on Sophos for the

RE: How'd this for a bad day? AKA bad me

2010-10-08 Thread John Aldrich
All I can say is OUCH! :-( From: David Lum [mailto:david@nwea.org] Sent: Friday, October 08, 2010 5:51 AM To: NT System Admin Issues Subject: How'd this for a bad day? AKA bad me I have 7 production systems running on 3 different ESX boxes in an ESX cluster, and 2 different logical SAN

RE: How'd this for a bad day? AKA bad me

2010-10-08 Thread Paul Hutchings
Being slightly serious for a moment, it's a pretty good illustration of how something like a SAN in isolation is no use :-) -Original Message- From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] Sent: 08 October 2010 13:43 To: NT System Admin Issues Subject: RE: How'd this for a

RE: How'd this for a bad day? AKA bad me

2010-10-08 Thread John Aldrich
Yep. Good point. :-) VERY good point! -Original Message- From: Paul Hutchings [mailto:paul.hutchi...@mira.co.uk] Sent: Friday, October 08, 2010 8:55 AM To: NT System Admin Issues Subject: RE: How'd this for a bad day? AKA bad me Being slightly serious for a moment, it's a pretty good

Re: Need System/Application Security Advice

2010-10-08 Thread Jeff Bunting
Agreed, but the OP was talking about a product that his client is selling. Consulting with their customers about their network/domain design may be way beyond the scope of their business. I interpreted the post as looking for suggestions to improve the security of the product that might be

Re: How'd this for a bad day? AKA bad me

2010-10-08 Thread Jeff Bunting
Why do you need to power down VMs to reboot vCenter? vCenter might be the problem with the missing VMs. VMWare support might be able to help you with those. Jeff On Fri, Oct 8, 2010 at 5:51 AM, David Lum david@nwea.org wrote: I have 7 production systems running on 3 different ESX boxes

Re: How'd this for a bad day? AKA bad me

2010-10-08 Thread Jonathan Link
+1 I'm just getting caught up on emails this morning. vCenter reboot shouldn't necessitate a reboot of a host server. On Fri, Oct 8, 2010 at 9:34 AM, Jeff Bunting bunting.j...@gmail.com wrote: Why do you need to power down VMs to reboot vCenter? vCenter might be the problem with the

RE: How'd this for a bad day? AKA bad me

2010-10-08 Thread David Lum
I don't know the exact details (and don't remember at the moment), my guess is they needed to do something SAN side - I just now heard one SAN store is what died. Today is gonna bite.. From: Jeff Bunting [mailto:bunting.j...@gmail.com] Sent: Friday, October 08, 2010 6:35 AM To: NT System Admin

Re: Need rack vendor recommendations

2010-10-08 Thread Candee
I used these guys: http://www.racksolutions.com/ They were incredibly helpful. On Thu, Oct 7, 2010 at 9:49 PM, Angus Scott-Fleming angu...@geoapps.comwrote: All I'm putting in a rack for about 6 servers in a vault at a client and need recommendations on what rack systems you're happy with.

DNS on 2008R2

2010-10-08 Thread greg.sweers
Anyone tell me why 2 AD DNS servers that were running perfectly find would suddenly stop doing all recursive queries outside of the network. I had to run this dnscmd /config /EnableEDNSProbes 0 which apparently disables larger UDP packets, but I am trying to find out if there was an recent

Re: HP PODs

2010-10-08 Thread Pete Howard
Crickets.. No POD people here ? From: pchow...@yahoo.com pchow...@yahoo.com To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Sent: Thu, October 7, 2010 2:54:57 PM Subject: HP PODs Anyone have good or bad reviews on the HP POD or other

RE: DNS on 2008R2

2010-10-08 Thread greg.sweers
BTW their was no firewall change, same one that has been in their for 6 months at least. From: greg.swe...@actsconsulting.net [mailto:greg.swe...@actsconsulting.net] Sent: Friday, October 08, 2010 10:49 AM To: NT System Admin Issues Subject: DNS on 2008R2 Anyone tell me why 2 AD DNS servers

RE: Need rack vendor recommendations

2010-10-08 Thread Raper, Jonathan - Eagle
+1 on the APC NetShelter line, but be careful on the model you choose! I say that, because some of them don't have enough space, in my opinion, for high density applications (at least not the models we're using). Our biggest issue is not having enough space to run all the cables for a high

OT Friday Not Funny

2010-10-08 Thread Bill Humphries
I think I'm the violin player on the deck of the Titanic. You have good intentions, but it is going to end badly for you. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here:

Re: OT Friday Not Funny

2010-10-08 Thread Candee
Oh no. What's up? On Fri, Oct 8, 2010 at 11:19 AM, Bill Humphries nt...@hedgedigger.comwrote: I think I'm the violin player on the deck of the Titanic. You have good intentions, but it is going to end badly for you. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~

Re: OT Friday Not Funny

2010-10-08 Thread Daniel Rodriguez
That don't sound good. All ok? On Oct 8, 2010 11:23 AM, Candee can...@gmail.com wrote: Oh no. What's up? On Fri, Oct 8, 2010 at 11:19 AM, Bill Humphries nt...@hedgedigger.com wrote: I think I'm the v... ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~

RE: How'd this for a bad day? AKA bad me

2010-10-08 Thread Raper, Jonathan - Eagle
+1 from here as well. A vCenter reboot should not require a host reboot. If it did, that would (IMHO) be a huge problem in the design and purpose behind VMware. Talk to VMware. If your maintenance is not current, get current. On a related note, YESTERDAY, one of our storage groups on our SAN

Re: How'd this for a bad day? AKA bad me

2010-10-08 Thread Ben Scott
On Fri, Oct 8, 2010 at 5:51 AM, David Lum david@nwea.org wrote: I have 7 production systems ... Oh, boy. Fun. I've had days like that. Not many, fortunately (and knock on wood). Hope you get it all sorted out in time for the weekend! Today I find myself having to arbitrate a pooch

Re: OT Friday Not Funny

2010-10-08 Thread Ben Scott
On Fri, Oct 8, 2010 at 11:19 AM, Bill Humphries nt...@hedgedigger.com wrote: I think I'm the violin player on the deck of the Titanic.  You have good intentions, but it is going to end badly for you. That sounds bad. As in don't cross the streams bad. Things are fine, the upcoming

Re: How'd this for a bad day? AKA bad me

2010-10-08 Thread Jonathan Link
Machines are recalcitrant, they're just misunderstood. On Fri, Oct 8, 2010 at 12:15 PM, Ben Scott mailvor...@gmail.com wrote: On Fri, Oct 8, 2010 at 5:51 AM, David Lum david@nwea.org wrote: I have 7 production systems ... Oh, boy. Fun. I've had days like that. Not many, fortunately

Anyone used the Sonicwall NSA 2400?

2010-10-08 Thread Holstrom, Don
It seems like a good firewall to use. I always liked external computers... It's only about $1,000 if you look around. Anyone had better use of any others? ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To

Re: How'd this for a bad day? AKA bad me

2010-10-08 Thread Steven Peck
If the systems are still actually on the LUNs, then you should be able to reconnect them and bring them up. Rebooting vCenter should not have had anything to do with shutting down guests but rebooting the SAN might possibly have been required to address it's fire. From vCenter just reconnect to

Re: How'd this for a bad day? AKA bad me

2010-10-08 Thread Andrew S. Baker
Your not is AWOL *ASB * * * On Fri, Oct 8, 2010 at 12:20 PM, Jonathan Link jonathan.l...@gmail.comwrote: Machines are recalcitrant, they're just misunderstood. On Fri, Oct 8, 2010 at 12:15 PM, Ben Scott mailvor...@gmail.com wrote: On Fri, Oct 8, 2010 at 5:51 AM, David Lum

Re: How'd this for a bad day? AKA bad me

2010-10-08 Thread Jonathan Link
That's not the only thing... On Fri, Oct 8, 2010 at 12:32 PM, Andrew S. Baker asbz...@gmail.com wrote: Your not is AWOL *ASB * * * On Fri, Oct 8, 2010 at 12:20 PM, Jonathan Link jonathan.l...@gmail.comwrote: Machines are recalcitrant, they're just misunderstood. On Fri, Oct 8,

Re: How'd this for a bad day? AKA bad me

2010-10-08 Thread Andrew S. Baker
I've said it before, but I will say it again. In a highly virtualized, heavily consolidated world, we need more planning, more thinking and more time for effective execution. Cutting corners will become more and more painful, and will bite more and more organizations. Hopefully, enough near

Multiple net segments on W2k8r2

2010-10-08 Thread Joseph L. Casale
I have some configuration changes I am planning for and this involves adding a NIC to a W2k8r2 box that's untagged into a Storage vlan on a different segment. So long as that interface is not set to register itself in DNS (it will never be addressed by this ip) is there anything else I

Re: Anyone used the Sonicwall NSA 2400?

2010-10-08 Thread Andrew S. Baker
Is that $1000 with all the services? Or just for the device? SonicWall is okay, although I haven't used their devices in a few years. I prefer the Fortigate devices from Fortinet - http://www.fortinet.com/products/fortigate/ - http://www.fortinet.com/doc/FortinetMatrix.pdf *ASB *(My

IT Solutions for a tiny Deployment

2010-10-08 Thread Sam Cayze
Looking to utilize an IM solution for about 3 users right now. Might expand to about 10 users - so please, no over the top large enterprise recommendations. Requirements: Security Trail/Logging Can work over WAN I can provide a backend server if needed. A virtual appliance would be even

RE: IT Solutions for a tiny Deployment

2010-10-08 Thread Cameron Cooper
Haven't looked to much into it, but Exchange 2007 and 2010 have unified communications built in. I would think that you would be able to lock it down via AD and GP. _ Cameron Cooper Network Administrator | CompTIA A+ Certified Aurico Reports, Inc Phone:

RE: IT Solutions for a tiny Deployment

2010-10-08 Thread John Aldrich
Jabber??? I know you can deploy your own Jabber server. Not sure if it would meet all your requirements, but it might be something to look at. From: Sam Cayze [mailto:sam.ca...@rollouts.com] Sent: Friday, October 08, 2010 12:48 PM To: NT System Admin Issues Subject: IT Solutions for a tiny

RE: How'd this for a bad day? AKA bad me

2010-10-08 Thread David Lum
Yeah I seem to run into this kind of I should change my career event once every five years or so, although this event isn't nearly as stressful as being at a client (these down systems are at %dayjob%) and having a RAID5 card die and thinking I don't even know how the RAID volumes were

RE: IT Solutions for a tiny Deployment

2010-10-08 Thread Raper, Jonathan - Eagle
Would this work for you? I don't know about logging, but it is hosted, so you would only have to pay a monthly fee. You don't have to have a Cisco infrastructure in order to use it. You would only need Cisco if you wanted IP phone and/or soft phone integration...and it can connect from behind a

RE: How'd this for a bad day? AKA bad me

2010-10-08 Thread Raper, Jonathan - Eagle
Just be glad it didn't happen on a Monday! Terrible way to start off a week! Jonathan L. Raper, A+, MCSA, MCSE Technology Coordinator Eagle Physicians Associates, PA jra...@eaglemds.com www.eaglemds.com -Original Message- From: David Lum [mailto:david@nwea.org] Sent: Friday,

Re: IT Solutions for a tiny Deployment

2010-10-08 Thread James Winzenz
Openfire/Spark? Looks promising and can be put on Windows or Linux. Looks like it can also integrate with AD. Dunno if it meets all your requirements or not, but here's the site: http://www.igniterealtime.org/projects/openfire/documentation.jsp From: Sam Cayze Sent: Friday, October 08,

Re: Multiple net segments on W2k8r2

2010-10-08 Thread Andrew S. Baker
You don't need to have Microsoft File Sharing on this NIC at all, right? *ASB * * * On Fri, Oct 8, 2010 at 12:38 PM, Joseph L. Casale jcas...@activenetwerx.com wrote: I have some configuration changes I am planning for and this involves adding a NIC to a W2k8r2 box that’s untagged into a

Re: IT Solutions for a tiny Deployment

2010-10-08 Thread Andrew S. Baker
Please define security in this context. *ASB* * * On Fri, Oct 8, 2010 at 12:47 PM, Sam Cayze sam.ca...@rollouts.com wrote: Looking to utilize an IM solution for about 3 users right now. Might expand to about 10 users – so please, no over the top large enterprise recommendations.

RE: How'd this for a bad day? AKA bad me

2010-10-08 Thread Terry Dickson
Amen -Original Message- From: Andrew S. Baker [mailto:asbz...@gmail.com] Sent: Friday, October 08, 2010 11:36 AM To: NT System Admin Issues Subject: Re: How'd this for a bad day? AKA bad me I've said it before, but I will say it again. In a highly virtualized, heavily consolidated

RE: Multiple net segments on W2k8r2

2010-10-08 Thread Joseph L. Casale
Sì signore, It will only have TCP Port 3260, pings actually are disabled anyway on the SAN... I guess I can uncheck the Client for Microsoft Networks, QoS Packet Scheduler and the File and Printer Sharing for Microsoft Networks. jlc From: Andrew S. Baker [mailto:asbz...@gmail.com] Sent:

Re: IT Solutions for a tiny Deployment

2010-10-08 Thread Steven Peck
The standard edition of OCS2007r2 can do this on one server. It will also provide you with additional nice tools in the way of desktop sharing and video conferencing between these folks should that be desirable later. If by security you mean secure communications between clients, then OCS2007r2

RE: OT chicago ISP

2010-10-08 Thread Cameron Cooper
We used to have McCleod and switched over to Cimco. They were great to work with what we already had in place and were very helpful with any issues. Very little down time. _ Cameron Cooper Network Administrator | CompTIA A+ Certified Aurico Reports, Inc Phone:

RE: OT chicago ISP

2010-10-08 Thread Cameron Cooper
At the moment we have 2 bonded T1's and one leased Point-2-Point line with them. Once we move to a new building later this year we are switching over to fiber. _ Cameron Cooper Network Administrator | CompTIA A+ Certified Aurico Reports, Inc Phone: 847-890-4021 | Fax:

Setting SPN's on Clustered SQL (2005)

2010-10-08 Thread Ziots, Edward
Has anyone had to manually add a SPN to a multi-node cluster SQL 2005 box before? I used the spn_query.vbs script from Microsoft to look at each of the nodes of the cluster and the Cluster Name and the SQL Server name ( Still default instance) Used the best practices that doesn't have the SQL

RE: IT Solutions for a tiny Deployment

2010-10-08 Thread greg.sweers
We use Spark, love it. Integrates with our Asterisk system, AD, Website(in testing). We can transfer a phone call from our phone to the chat client and vice versa from anywhere. Features are good, lots of customization. It does take some work to get it going. From: James Winzenz

Replacement for Windows 7 Offline files?

2010-10-08 Thread Craig Gauss
Sound Solutions, Inc. 8400 Highland Dr. Wausau, WI 54401 Tel: 715-842-7665 Fax: 715-842-7620 I set up a laptop with Windows 7 and Offline Files yesterday. The Offline Files is terrible in Windows 7. You have to click too much for the normal user. Does anyone know of any decent replacements for

RE: IT Solutions for a tiny Deployment

2010-10-08 Thread Sam Cayze
Mainly that all communication is over an encrypted connection; such as SSL. I'm just started my research, trying to become aware of other concerns as well. Also, my subject line was supposed to be IM, not IT... Sam From: Andrew S. Baker [mailto:asbz...@gmail.com] Sent: Friday,

Re: Replacement for Windows 7 Offline files?

2010-10-08 Thread Andrew S. Baker
Please state the nature of your medical emergency... What you do mean you have to click too much?!? *ASB *(My XeeSM Profile) http://XeeSM.com/AndrewBaker *Exploiting Technology for Business Advantage...* * * On Fri, Oct 8, 2010 at 1:52 PM, Craig Gauss cra...@sound-solutions.bizwrote: I set up a

Re: Multiple net segments on W2k8r2

2010-10-08 Thread Steven Peck
Leave the gateway entry empty, clear the box on register with DNS and on the WINs tab uncheck the box for LMHOST lookup. In the advanced networking make sure the binding order has this NIC second. (Note in Windows 2008 you may have to enable menu's to see the menu.) Also consider renaming the NIC

RE: Setting SPN's on Clustered SQL (2005)

2010-10-08 Thread Mayo, Bill
I have had this problem before. I don't remember a lot firsthand, but I do have my notes about it. Copied/pasted below. When multiple computers are traversed for integrated authentication (e.g. computer connects to web server which connects to SQL server), there are certain requirements for

RE: Replacement for Windows 7 Offline files?

2010-10-08 Thread Craig Gauss
Sound Solutions, Inc. 8400 Highland Dr. Wausau, WI 54401 Tel: 715-842-7665 Fax: 715-842-7620 From what I experienced you had to go into sync center, then offline files, then through the folder hierarchy to finally get to the files. Unlike XP where it was directly in the folder on the desktop.

Re: OT Friday Not Funny

2010-10-08 Thread Bill Humphries
Just frustrated. Small consulting company, disengaged/distracted owner. The one person around here that I don't really do his job for him just quit...so now I'm figuring out how to do his job too. Sorry for the venting, guys. Candee wrote: Oh no. What's up? On Fri, Oct 8, 2010 at 11:19

Re: OT chicago ISP

2010-10-08 Thread Bill Humphries
Thanks for the info, Cameron. Cameron Cooper wrote: We used to have McCleod and switched over to Cimco. They were great to work with what we already had in place and were very helpful with any issues. Very little down time. _ Cameron Cooper Network Administrator |

RE: Setting SPN's on Clustered SQL (2005)

2010-10-08 Thread Ziots, Edward
Bill thanks for the offline comments, we are going to try and move it off a SQL cluster for this time, if that doesn't help stuff then well go the SPN route, which I believe its going to have to happen anyways to fix the clusters accordingly, Unless I temporarly make the accounts DA, recycle the

RE: Replacement for Windows 7 Offline files?

2010-10-08 Thread Don Guyer
I haven’t seen, used or set it up yet, but I know Synch Toy has started being used on a handful of workstation machines here. No complaints heard, only that it works “better” than offline files. Don Guyer Systems Engineer - Information Services Prudential, Fox Roach/Trident Group 431 W.

RE: Setting SPN's on Clustered SQL (2005)

2010-10-08 Thread Mayo, Bill
No problem, Edward, although I honestly am not sure how I managed to reply offline. D'oh! -Original Message- From: Ziots, Edward [mailto:ezi...@lifespan.org] Sent: Friday, October 08, 2010 2:25 PM To: NT System Admin Issues Subject: RE: Setting SPN's on Clustered SQL (2005) Bill

Re: OT Friday Not Funny

2010-10-08 Thread Daniel Rodriguez
Sorry to hear that. Hope they at least compensate you with his pay. :) But that would be wishful thinking. If you need anything, let us know. On Fri, Oct 8, 2010 at 2:21 PM, Bill Humphries nt...@hedgedigger.comwrote: Just frustrated. Small consulting company, disengaged/distracted owner.

3rd Defrag Utilities

2010-10-08 Thread Sean Martin
Good morning/afternoon! I wanted to get some feedback from you all regarding the use of 3rd party Defrag utilities. We've used Diskkeeper for as long as I can remember (from NT4, Win2000, etc.) We're all Windows 2003 with a few Windows 2008 servers in production and more on the way. One of my

Re: Replacement for Windows 7 Offline files?

2010-10-08 Thread Andrew S. Baker
I haven't had to do that. The offline files are right where I have expected them to be if the drive was previously mapped. Also available if you use UNC mapping to the location. *ASB* * * On Fri, Oct 8, 2010 at 2:03 PM, Craig Gauss cra...@sound-solutions.bizwrote: From what I experienced

RE: Setting SPN's on Clustered SQL (2005)

2010-10-08 Thread Ziots, Edward
DOh, Silly me... too fried these days... Z Edward E. Ziots CISSP, Network +, Security + Network Engineer Lifespan Organization Email:ezi...@lifespan.org Cell:401-639-3505 -Original Message- From: Mayo, Bill [mailto:bem...@pittcountync.gov] Sent: Friday, October 08, 2010 2:28 PM To:

RE: Setting SPN's on Clustered SQL (2005)

2010-10-08 Thread Ziots, Edward
Yeah and the 64bit SQL box didn't work, go figures... back to the hell next week. Z Edward E. Ziots CISSP, Network +, Security + Network Engineer Lifespan Organization Email:ezi...@lifespan.org Cell:401-639-3505 -Original Message- From: Ziots, Edward [mailto:ezi...@lifespan.org]

Re: HP PODs

2010-10-08 Thread Kurt Buff
No - we defeated the aliens and chased them off the planet... On Fri, Oct 8, 2010 at 07:51, Pete Howard pchow...@yahoo.com wrote: Crickets.. No POD people here ? -- *From:* pchow...@yahoo.com pchow...@yahoo.com *To:* NT System Admin Issues

Re: OT Friday Not Funny

2010-10-08 Thread Ben Scott
On Fri, Oct 8, 2010 at 2:21 PM, Bill Humphries nt...@hedgedigger.com wrote: Small consulting company, disengaged/distracted owner. The one person around here that I don't really do his job for him ... Sounds like my last job. That's why I quit. After 5 years, I realized it wasn't going to

RE: Replacement for Windows 7 Offline files?

2010-10-08 Thread John Hornbuckle
We use folder redirection for users' desktops and My Documents folders, and offline files so that they'll still have access to their stuff if they lose connection to the network. Can't say I've seen any clicking necessary, except in cases of file version conflicts. John Hornbuckle MIS

Re: Interesting run-down on Stuxnet from F-Secure

2010-10-08 Thread Ben Scott
On Thu, Oct 7, 2010 at 2:41 PM, Carl Houseman c.house...@gmail.com wrote: The avenue closes as the percentage of XP machines ...  how long for that? I'm guessing XP is less than 50% of Windows users before April 2014, and if not by then, real soon afterwards. People running as admin when

Procurve Routing Issue

2010-10-08 Thread Joseph L. Casale
I have a 2824 with two vlans, 100 for prod and 103 for ip san. It's not currently in routed mode, but I want assign ips to the two vlans and set it up in routed mode so the switch can route traffic between servers and the san vlan for bandwidth reasons. My issue is the lack of acl's, any client

Re: Interesting run-down on Stuxnet from F-Secure

2010-10-08 Thread Ben Scott
On Thu, Oct 7, 2010 at 8:08 PM, Andrew S. Baker asbz...@gmail.com wrote: And I would say that we are were we are because as consumers and corporate customers, we don't push for things to be different.   Not that technology companies don't have their own responsibility to do the right thing, but

RE: Interesting run-down on Stuxnet from F-Secure

2010-10-08 Thread Ziots, Edward
Yep, its defintely like that, until they get royally 0wned, then its Chicken Little the Sky is falling, and by then its too late you are the next poster boy for newspapers, and the fallout. So really who wants to be the next TJX/Hannaford Foods/ etc etc, sorry I will pass. I don't care if I

Re: Need System/Application Security Advice

2010-10-08 Thread Ben Scott
On Thu, Oct 7, 2010 at 4:13 PM, Brian Desmond br...@briandesmond.com wrote: Personally I think you’re making a mountain out of a mole hill. Like I said this is really a common design. Without knowing more (and we on this list don't really know the details from that post), I think the OP *may*

Re: Interesting run-down on Stuxnet from F-Secure

2010-10-08 Thread James Winzenz
+9000 -- From: Ben Scott mailvor...@gmail.com Sent: Friday, October 08, 2010 1:02 PM To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Subject: Re: Interesting run-down on Stuxnet from F-Secure On Thu, Oct 7, 2010 at 8:08 PM,

Re: Procurve Routing Issue

2010-10-08 Thread Ben Scott
On Fri, Oct 8, 2010 at 4:02 PM, Joseph L. Casale jcas...@activenetwerx.com wrote: I have a 2824 with two vlans, 100 for prod and 103 for ip san. It’s not currently in routed mode, but I want assign ips to the two vlans and set it up in routed mode so the switch can route traffic between servers

RE: Procurve Routing Issue

2010-10-08 Thread Joseph L. Casale
I would not use the 2824 as a router for anything serious, and bandwidth reasons makes it sound serious. Do you know what it takes to route even at gig speeds? It doesn't need to be serious at all to desire to route faster than most routers:) Its iSCSI traffic, letting even a 2824 pass it

Root cause of: RE: How'd this for a bad day? AKA bad me

2010-10-08 Thread David Lum
So, the root cause: ESX 3.5 OS was installed onto SAN volume that contained my VM's. The install of that OS (effectively) removes pointers that VM's need when they boot up. Best practice is to disconnect the SAN links when installing this version of the OS so this doesn't happen. In fact our SE

RE: Interesting run-down on Stuxnet from F-Secure

2010-10-08 Thread Carl Houseman
UAC prompting isn't the major benefit of UAC. The major benefit is that, for admins, programs that aren't admin-by-nature run without admin rights. If the admin user runs a malware executable that tries to write something to a protected file/registry area, it will fail (unless it also exploits a

Re: Root cause of: RE: How'd this for a bad day? AKA bad me

2010-10-08 Thread Kurt Buff
Experience may not be the best teacher, but it is the most expensive one... On Fri, Oct 8, 2010 at 13:34, David Lum david@nwea.org wrote: So, the root cause: ESX 3.5 OS was installed onto SAN volume that contained my VM’s. The install of that OS (effectively) removes pointers that VM’s

Re: Procurve Routing Issue

2010-10-08 Thread Ben Scott
On Fri, Oct 8, 2010 at 4:31 PM, Joseph L. Casale jcas...@activenetwerx.com wrote:  I would not use the 2824 as a router for anything serious, and bandwidth reasons makes it sound serious. Do you know what it takes to route even at gig speeds? To the best of my knowledge, simply sending or

Could use your feedback...

2010-10-08 Thread Stu Sjouwerman
KnowBe4 will soon release it's first Internet Security Awareness Training product. It will make end-users aware of the dangers of social engineering and spear phishing. If you are interested, here is a beta you can check out: http://www.ptrain.com/isat/draft1/ We need your input

RE: How'd this for a bad day? AKA bad me

2010-10-08 Thread Brian Desmond
Sounds like you should home the redundant sets of VMs on different SAN volumes/whatever? Thanks, Brian Desmond br...@briandesmond.com c - 312.731.3132 From: David Lum [mailto:david@nwea.org] Sent: Friday, October 08, 2010 11:51 AM To: NT System Admin Issues Subject: How'd this for a bad

Re: Interesting run-down on Stuxnet from F-Secure

2010-10-08 Thread Ben Scott
On Fri, Oct 8, 2010 at 4:51 PM, Carl Houseman c.house...@gmail.com wrote: UAC prompting isn't the major benefit of UAC.  The major benefit is that, for admins, programs that aren't admin-by-nature run without admin rights.  If the admin user runs a malware executable that tries to write

Re: DNS on 2008R2

2010-10-08 Thread Anders Blomgren
Are you using forwarders? Have they been changed? Our older version Cisco Network Registrar goes bonkers if I dont disable EDNS Probes on the 2008R2 dc's that forward to it. -Anders On Fri, Oct 8, 2010 at 4:48 PM, greg.swe...@actsconsulting.net wrote: Anyone tell me why 2 AD DNS servers that

RE: Procurve Routing Issue

2010-10-08 Thread Joseph L. Casale
To the best of my knowledge, simply sending or receiving full frames at gig speeds is enough to stress most PCs, let alone forwarding them. The bottleneck is usually bus bandwidth or interrupt load. While I don't know, I would expect the routing on the 2800 to be done on the management CPU,

RE: Interesting run-down on Stuxnet from F-Secure

2010-10-08 Thread Marc Maiffret
Indeed our Blink product goes way beyond traditional anti-virus by actually preventing the exploitation of vulnerabilities that lead then to attackers loading malware. Most all AV and related are simply looking for the malware that is deployed to a system after it has been exploited and in

RE: Interesting run-down on Stuxnet from F-Secure

2010-10-08 Thread Carl Houseman
No, the UAC prompt may not happen. UAC prompting only happens for specific programs that are recognized as needing elevation. It does NOT happen for every API call that might fail if not elevated. Yes, the malware writers could make their malware smart enough to cause the UAC prompt and gain

RE: Could use your feedback...

2010-10-08 Thread Erik Goldoff
Stu, My first feedback, before I can comment on the content, is that it RUDELY maximized my browser window on my screen without asking, and without need, it doesn't even come close to filling up the screen on my 22 monitor. In most cases, when a site does that, I'm not to fast to return. Just

Re: Could use your feedback...

2010-10-08 Thread Kurt Buff
So far, so good. When the finished product comes out, I'd pass that link around to our staff. I didn't see options for the name, however. On Fri, Oct 8, 2010 at 14:03, Stu Sjouwerman s...@sunbelt-software.com wrote: KnowBe4 will soon release it's first Internet Security Awareness Training