RE: Time sync

2013-01-08 Thread Ken Cornetet
We use SCOM to monitor everything, and we have some homegrown stuff on top of that. So, we do monitor. However, what we saw in the early days of virtualization was that dynamic disks could cause things to go south *very* quickly. I personally would not be comfortable in a situation where we've

RE: SSD and 2008 R2 Hyper-V, SAS vs. SATA SSD

2013-01-08 Thread Maglinger, Paul
Yeah, they replaced my 6 year old laptop to one with SSD. I went from a 5 minute boot to less than a minute. I used to be able to get a cup of coffee while I was waiting for the old one! :) I'm still leery about the MTBF so I'm planning on frequent backups. -Paul From: David Lum

RE: Cisco ASA question

2013-01-08 Thread Ziots, Edward
Remember even with the Egress filtering you are looking to do outbound, it could be an internal compromised host or account that is using your legitimate email servers to send the email out, but I would drop and log all other traffic from trust to untrust on port 25 and eliminate the hosts.

RE: Cisco ASA question

2013-01-08 Thread Tom Miller
Great thanks. I did that at my last gig. I'm amazed at the config but am working to tighten things. New to ASA so it's a little slow going. Apologies for my ignorance here. Under access rules, I see Outside, and those rules are limited and seem correct. Then I see Inside (incoming) with a

Re: Cisco ASA question

2013-01-08 Thread Patrick Salmon
Looks right to me, both in sequence and content [1]. - You're allowing SMTP from specific host(s). Correct. Not so much a 'best practice' ptooey as a must-do. - Next, you're denying SMTP from anything else. Also correct. - Implied, but must exist, is the Deny Any Any at the end. You'd be

Re: Cisco ASA question

2013-01-08 Thread Erik Goldoff
*and* I'd recommend checking SMTP relay on internal mail server. Is it allowing internal systems to relay smtp traffic instead of smtp direct ? Just another loophole that might need to be tightened. in most cases, *if* internal smtp relay is required, usually limited to a specific group of

RE: Cisco ASA question

2013-01-08 Thread Tom Miller
I had the direction incorrect! Thanks for the help folks, Relay only by exemption on the mail servers, though. From: Patrick Salmon [mailto:psal...@gmail.com] Sent: Tuesday, January 08, 2013 11:21 AM To: NT System Admin Issues Subject: Re: Cisco ASA question Looks right to me, both in sequence

RE: SSD and 2008 R2 Hyper-V, SAS vs. SATA SSD

2013-01-08 Thread N Parr
Lot of details you need to fill in. 50 user production server doing what? File share, large or lots of small files? SQL server, OLAP or OLTP loads? Then there's the technology of the SSD drives. Not just the MLC/SLC tech but drives with brains that can handle raid configurations. If you

RE: Digitial Signature Software

2013-01-08 Thread Webster
Digicert Managed PKI Services. http://www.digicert.com/managed-pki-ssl.htm Thanks Webster From: Robert Cato [mailto:cato.rob...@gmail.com] Sent: Tuesday, January 08, 2013 2:32 PM To: NT System Admin Issues Subject: Digitial Signature Software We are looking at Digital Signature Software

RE: Ouch today's outbreak

2013-01-08 Thread Michael B. Smith
You still have autorun enabled? REALLY? From: David Lum [mailto:david@nwea.org] Sent: Tuesday, January 8, 2013 3:52 PM To: NT System Admin Issues Subject: Ouch today's outbreak This just in: W32/SillyFDC. Not new to the internet, but new here :( Bites David Lum Sr. Systems Engineer //

RE: Ouch today's outbreak

2013-01-08 Thread David Lum
Welcome to my world...I had the GPO set up but was denied over a year ago. Guessing that will change. From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Tuesday, January 08, 2013 12:56 PM To: NT System Admin Issues Subject: RE: Ouch today's outbreak You still have autorun enabled?

Re: Ouch today's outbreak

2013-01-08 Thread kz20fl
So you spread the virus then! ;-) Sent from my Blackberry, which may be an antique but delivers email RELIABLY -Original Message- From: David Lum david@nwea.org Date: Tue, 8 Jan 2013 21:01:24 To: NT System Admin Issuesntsysadmin@lyris.sunbelt-software.com Reply-To: NT System Admin

RE: Ouch today's outbreak

2013-01-08 Thread David Lum
Update - brand new virus variant baby...as of yesterday. From: David Lum [mailto:david@nwea.org] Sent: Tuesday, January 08, 2013 1:01 PM To: NT System Admin Issues Subject: RE: Ouch today's outbreak Welcome to my world...I had the GPO set up but was denied over a year ago. Guessing that

RE: Ouch today's outbreak

2013-01-08 Thread Michael B. Smith
Well that is better. But STILL! From: David Lum [mailto:david@nwea.org] Sent: Tuesday, January 8, 2013 4:45 PM To: NT System Admin Issues Subject: RE: Ouch today's outbreak Update - brand new virus variant baby...as of yesterday. From: David Lum [mailto:david@nwea.org] Sent: Tuesday,

RE: Humor - ESD

2013-01-08 Thread John Cook
Love the comment - Unlike LSD that takes you out of reality, ESD brings you screaming back! John W. Cook Network Operations Manager Partnership For Strong Families 5950 NW 1st Place Gainesville, Fl 32607 Office (352) 244-1610 Cell (352) 215-6944 MCSE, MCP+I, MCTS, CompTIA A+, N+, VSP4,

RE: TechEd vs TechMentor

2013-01-08 Thread Rod Trent
Which apps do you deal with the most? From: Damien Solodow [mailto:damien.solo...@harrison.edu] Sent: Tuesday, January 08, 2013 5:14 PM To: NT System Admin Issues Subject: TechEd vs TechMentor It looks like I might be able to make one of these for the first time. Any advice on which is

RE: TechEd vs TechMentor

2013-01-08 Thread Damien Solodow
Windows Server, Exchange, SQL, PowerShell, VMware vCloud, Citrix XenApp. DAMIEN SOLODOW Systems Engineer 317.447.6033 (office) 317.447.6014 (fax) HARRISON COLLEGE From: Rod Trent [mailto:rodtr...@myitforum.com] Sent: Tuesday, January 08, 2013 5:24 PM To: NT System Admin Issues Subject: RE:

RE: TechEd vs TechMentor

2013-01-08 Thread Webster
You will get nothing on the last two at either conference. IMO, TechMentor is for more Beginner to Intermediate level folk. The one I went to in August was an anomaly. It was at MS HQ and most sessions were extremely technical. TechEd runs the range from Beginner to Advanced but the average

RE: TechEd vs TechMentor

2013-01-08 Thread Ziots, Edward
I have to agree with Webster, I would side with Tech Ed, especially when you go to the whiteboard sessions in which you can draw out your solutions with MVP's and other folks that are SME's on their particular areas. I remember a few years ago going over a IIS 7.0 design and one of the M$ folks

RE: TechEd vs TechMentor

2013-01-08 Thread Damien Solodow
Good to know. :) What has TechEd pricing been like? DAMIEN SOLODOW Systems Engineer 317.447.6033 (office) 317.447.6014 (fax) HARRISON COLLEGE From: Ziots, Edward [mailto:ezi...@lifespan.org] Sent: Tuesday, January 08, 2013 5:57 PM To: NT System Admin Issues Subject: RE: TechEd vs TechMentor I

RE: TechEd vs TechMentor

2013-01-08 Thread Rod Trent
Keep in mind.TechEd registration has usually opened by now, well, actually they leave it open all year long. From: Damien Solodow [mailto:damien.solo...@harrison.edu] Sent: Tuesday, January 08, 2013 5:59 PM To: NT System Admin Issues Subject: RE: TechEd vs TechMentor Good to know. J

RE: TechEd vs TechMentor

2013-01-08 Thread Ziots, Edward
Last time I remember it was like 1,500 or something. I am not sure what the price is now.. Z Edward E. Ziots, CISSP, Security +, Network + Security Engineer Lifespan Organization ezi...@lifespan.org From: Damien Solodow [mailto:damien.solo...@harrison.edu] Sent: Tuesday, January

RE: TechEd vs TechMentor

2013-01-08 Thread Michael B. Smith
Microsoft makes it very clear that in large deployments, Citrix solutions are better – in some ways. ☺ From: John Cook [mailto:john.c...@pfsf.org] Sent: Tuesday, January 8, 2013 6:26 PM To: NT System Admin Issues Subject: Re: TechEd vs TechMentor Sure you will - they'll tell you why the MS

Re: TechEd vs TechMentor

2013-01-08 Thread Steven Peck
http://channel9.msdn.com/Events/TechEd/NorthAmerica/2012 TechEd NA has a lot of their sessions online so you can see what the presentations are like. They have the EU and AU ones somewhere on the site as well. Steven Peck http://www.blkmtn.org On Tue, Jan 8, 2013 at 2:59 PM, Damien Solodow

RE: Time sync

2013-01-08 Thread Ken Schaefer
SCOM is just the lowest level of tool you need for something to monitor and manage an environment - what are you doing for your non-Wintel devices (network, *nix, security appliances etc?) You feed all of that into an event management tool - it can auto ticket into your ITSM system and resolve