Thanks everyone for all the ideas the enviroment has about 350 machines at least all on flat domain can't vlan due to stupid software configurations. I have several systems that have to be live all the time (911 systems) and vmware esx servers in cluster. Any other suggestions is again so much appreciated I am willing to try just about anything right now I have a lot of angry users right now due to network performace ( for there facebooking I am sure) wanting this fixed and the sheriffs department has its busiest week of the year starting sat so please no idea will not be tried.
Thanks all ways, TR On Sep 2, 2010 1:15 PM, "Arch Angel" <[email protected]> wrote: > Tyler, > > I would not go crazy and start hardening PC's. I would get a system with a > few nic's and install something like OSSIM or even get a trial of Astaro > setup and then begin to trace it down. Begin by what systems are causing > the problems and then fix them one by one hardening then as you do them so > they don't get reinfected. > > Just my thoughts others may have better ones :-) > > Robert > (arch3angel) > > On Sep 2, 2010 2:06 PM, "Tyler Robinson" <[email protected]> wrote: >> Hey everyone just wondering what kinds of procedures you are using to >> prevent and stop virus outbreaks on your local network after some genius > end >> user investigates child porn on local network PCs. Do most of you use >> microsofts firewall with GP and just open exceptions for the applicatoins >> that need it or run another piece of software. I have a massive infection >> that i cannot track down our Eset is catching them but my network is > nothing >> but trojan packets we were not running an internal firewall (previous > Admin >> setup) without hardend systems, So do i start hardening systems first and >> then do a GP with Firewall or does anyone have any better suggestions > first >> to get my network back and clean the infection second to setup the correct >> way so there is no next time..As always thanks so much to the PDC > community >> you guys are the best. >> TR >> >> -- >> Tyler Robinson >> Owner of Computer Impressions
_______________________________________________ Pauldotcom mailing list [email protected] http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom Main Web Site: http://pauldotcom.com
