[NTSysADM] FSRM Duplicate File Reports

2014-12-03 Thread Matthew Topper
Does anyone know what the criteria is for the duplicate file reports in FSRM? Is it a hash of the file? I'm trying to confirm that it's not just a filename match. Matthew Topper

RE: [NTSysADM] RE: DPM weirdness.

2014-12-03 Thread Maglinger, Paul
At least they didn't make it an even $500 - that would just be too darn expensive! From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Susan Bradley Sent: Wednesday, December 03, 2014 12:44 AM To: ntsysadm@lists.myitforum.com Subject: Re: [NTSysADM] RE: DPM

RE: [NTSysADM] Managed File Transfer Solution Recommendations

2014-12-03 Thread Haritwal, Dhiraj
Hi, I have downloaded below software's to test functionality/features. Any pros/cons you would like to share. è Global Escape EFT Enterprise è JScape MFT è Solarwinds Serv-U è Cornerstone MFT è IPSwitch MOVEit Regards, Dhiraj From: listsad...@lists.myitforum.com

RE: [NTSysADM] Managed File Transfer Solution Recommendations

2014-12-03 Thread Maglinger, Paul
We have used Global EFT Pretty easy to use. Tech support is pretty responsive on the few issues we had. Can be configured to automatically block IPs that are trying to get in after so many attempts. Log files show which accounts they're attempting to use. You have the choice of password,

RE: [NTSysADM] Managed File Transfer Solution Recommendations

2014-12-03 Thread Haritwal, Dhiraj
Appreciate the feedback, Paul. Dhiraj From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Maglinger, Paul Sent: 03 December 2014 18:55 To: 'ntsysadm@lists.myitforum.com' Subject: RE: [NTSysADM] Managed File Transfer Solution Recommendations We have

RE: [NTSysADM] Managed File Transfer Solution Recommendations

2014-12-03 Thread David McSpadden
We have been using GlobalScape EFT for about 8 years. They have been able to answer all of our requests. And they have passed all of our auditors. NCUA, Indiana State DFI, PCI, GBLA, etc. And they are secure and fairly cheap. From: listsad...@lists.myitforum.com

[NTSysADM] Firewalls / Web filtering

2014-12-03 Thread Stefan Jafs
I'm going around in circles trying to make a decision on a new Firewall and Web filtering appliance. We currently have the SonicWall NSA240 * 2 for HA and iPrism for Webfiltering. We have increased our speed on Rogers fibre to 200 / 200 Mbs, the SonicWall is only 100 Mbs. Also the iPrism can't

[NTSysADM] RE: Firewalls / Web filtering

2014-12-03 Thread Kennedy, Jim
I can't say enough about how awesome our Barracuda is overall. The bad reviews you see may reflect the pre 8.x version released this summer, it was a dramatic change for that product. Pro's 1) It's list of 'unknowns' is very manageable so you can block unknowns. Blocking unknowns is HUGE

Re: [NTSysADM] Firewalls / Web filtering

2014-12-03 Thread Matthew W. Ross
Cisco - I don't have first hand knowledge.Sonicwall - I've only played with their little routers, which have basic filtering. I have not played with their web filtering appliance.Barracuda - We use a Barracuda 610 Web Filter. It does the two things we require of a web filter: Block content and

RE: [NTSysADM] RE: DPM weirdness.

2014-12-03 Thread J- P
ROFL From: pmaglin...@scvl.com To: ntsysadm@lists.myitforum.com Subject: RE: [NTSysADM] RE: DPM weirdness. Date: Wed, 3 Dec 2014 12:58:40 + At least they didn’t make it an even $500 – that would just be too darn expensive! From: listsad...@lists.myitforum.com

Re: [NTSysADM] Firewalls / Web filtering

2014-12-03 Thread CSSU NetAdmin
We use the SonicWall NSA3600 and Barracuda Web Filter. (We used to use the SonicWall web filtering but needed more granularity.) Both work well for us. We have 2 K-8 schools and central office going through the Sonicwall and Barracuda. The Barracuda is easy to manage and interfaces well with

RE: [NTSysADM] Firewalls / Web filtering

2014-12-03 Thread J- P
I never required the higher end models , but have used their 2000's serires models for about 10 years now if you add their switch you can have 50 WAN ports (might be overkill) http://www.draytek.us/ http://www.draytek.us/vigor-3900 From: sj...@amico.com To: ntsysadm@lists.myitforum.com

Re: [NTSysADM] Firewalls / Web filtering

2014-12-03 Thread Kevin Lundy
Palo Alto. Can be expensive. When I last purchased though, it was cheaper to buy the PA, than to replace our outdated ASAs with new versions and renew our Websense subscription. You have to let the sales folks know you are looking at competitive products. It is my opinion that the PA platform

Re: [NTSysADM] Firewalls / Web filtering

2014-12-03 Thread Andrew S. Baker
I like the PA technology, but I'm still disgruntled about the PA pricing (and initial configuration complexity) for all but larger enterprises... *ASB **http://XeeMe.com/AndrewBaker* http://xeeme.com/AndrewBaker *Providing Virtual CIO Services (IT Operations Information Security) for the

Re: [NTSysADM] Firewalls / Web filtering

2014-12-03 Thread Andrew S. Baker
Sophos is okay, but for the money, I prefer the Fortinet devices in terms of performance and management. I've done lots of migrations FROM Cisco to various other products, so... Those are the ones I can speak to from the perspective or recent experience. Regards, *ASB

RE: [NTSysADM] Firewalls / Web filtering

2014-12-03 Thread Stefan Jafs
Well Sophos is tossing in a second SG 330 for free until the end of the year to sweeten the deal. __ Stefan Jafs From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Andrew S. Baker Sent: December 3, 2014 13:36 To: ntsysadm

Re: [NTSysADM] Firewalls / Web filtering

2014-12-03 Thread Kevin Lundy
PA is (or was) willing to negotiate if you buy direct. As soon as they knew they could take business away from Cisco, they got very aggressive. Like I say, replacing 2 ASA's with 2 PA's ended up being cheaper. This was about 2 years ago. Another trick is to get an eval unit. Then you can get a

[NTSysADM] RE: Firewalls / Web filtering

2014-12-03 Thread Reimer, Mark
I'm using Fortinet (smaller bandwidth, fewer people). But it has been good to me. Works good. Support has been good, when I needed it (very seldom). Filter works well for us also. Mark From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Stefan Jafs Sent:

[NTSysADM] Time Sync on Virtual DCs

2014-12-03 Thread Charles F Sullivan
Not long ago there was a discussion about best practices for running your DCs as VMs. Besides making sure that your PDC emulator is set to sync time with a reliable outside time server, as you should do with a physical server, *be sure the VM hosts have their time sync in order because VMs at

RE: [NTSysADM] Time Sync on Virtual DCs

2014-12-03 Thread Joseph L. Casale
Search the vmware kb for Timekeeping, there are specific guidelines to follow. I've not encountered an issue ever using these, how does your env compare to their best practises? jlc From: listsad...@lists.myitforum.com listsad...@lists.myitforum.com on

RE: [NTSysADM] Time Sync on Virtual DCs

2014-12-03 Thread Michael B. Smith
Heh. I rarely comment anything about VMWare (not my area of expertise), but I did get into a slight kerfluffle with them in 2010 that led to them changing their recommendations on this topic (there was quite a bit of behind the scenes discussion that happened). See:

RE: [NTSysADM] Time Sync on Virtual DCs

2014-12-03 Thread Charles F Sullivan
More importantly, that’s a very good article that you wrote. *From:* listsad...@lists.myitforum.com [mailto: listsad...@lists.myitforum.com] *On Behalf Of *Michael B. Smith *Sent:* Wednesday, December 3, 2014 4:26 PM *To:* ntsysadm@lists.myitforum.com *Subject:* RE: [NTSysADM] Time Sync on

RE: [NTSysADM] Time Sync on Virtual DCs

2014-12-03 Thread Charles F Sullivan
In this article, they only mention syncing with the domain hierarchy in passing. It’s not mentioned as a best practice: http://kb.vmware.com/selfservice/microsites/search.do?language=en_UScmd=displayKCexternalId=1318 So no we aren’t following their guidance and I see no reason to not use AD,

RE: [NTSysADM] Firewalls / Web filtering

2014-12-03 Thread Jon Harris
I have setup an ASA without a lot of Cisco background (training) and got it pretty much correct. The only issue I had was a loop back for access to the DMZ for a server we had out there from inside. If you have a syslog server you can capture the logs but they can get messy and long. Once we

RE: [NTSysADM] Time Sync on Virtual DCs

2014-12-03 Thread Matthew Topper
I was under the impression that the ‘correct’ way to do this was to have NTP configured on your VMware or Hyper-V hosts (to sync with whatever external NTP servers you want to pull from) and let them be authoritative in that your virtual DC allows its clock to match the hardware, then operate

RE: [NTSysADM] Time Sync on Virtual DCs

2014-12-03 Thread Michael B. Smith
Thank you. ☺ From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Charles F Sullivan Sent: Wednesday, December 3, 2014 5:27 PM To: ntsysadm@lists.myitforum.com Subject: RE: [NTSysADM] Time Sync on Virtual DCs More importantly, that’s a very good article that

RE: [NTSysADM] Time Sync on Virtual DCs

2014-12-03 Thread Michael B. Smith
Please read my referenced article and the linked documents, including those from both VMware and Microsoft. http://theessentialexchange.com/blogs/michael/archive/2010/01/29/a-brief-history-of-time-ok-ok-let-s-go-with-quot-an-introduction-to-the-windows-time-service-quot.aspx From:

RE: [NTSysADM] RE: DPM weirdness.

2014-12-03 Thread Michael B. Smith
Please keep in mind that you can always request an escalation. You may not always GET one, but you can request it. You can also always request that you be assigned to someone who can better speak your language. Those are always supposed to be honored. From: listsad...@lists.myitforum.com

RE: [NTSysADM] Time Sync on Virtual DCs

2014-12-03 Thread Matthew Topper
So it seems I’ve been doing this wrong. From reading those, it appears the suggestion is to disable time sync in VMWare tools and let DCs query an NTP server directly (and let members query the DC as normal) I had been using the suggestions in this post for time sync with Hyper-V, but I’m

RE: [NTSysADM] Time Sync on Virtual DCs

2014-12-03 Thread Michael B. Smith
That suggestion is, indeed, outdated. It was true with early versions of Microsoft hypervisors (and early versions of VMware hypervisors and Xen hypervisors, blah blah blah) --- but not today. From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Matthew

[NTSysADM] RE: Firewalls / Web filtering

2014-12-03 Thread Heaton, Joseph@Wildlife
We're currently using ASAs and Websense. Being forced to migrate to Palo Alto within the next 6 months or so. From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Stefan Jafs Sent: Wednesday, December 03, 2014 8:52 AM To: ntsysadm@lists.myitforum.com

[NTSysADM] Outstanding deal: Thycotic Secret Server Express

2014-12-03 Thread Kurt Buff
http://thycotic.com/products/secret-server/express/secret-server-express/ $10.00/year Buy Secret Server Express now and get more users and Secrets. Express purchases made by December 17th, 2014 are guaranteed 100 users and 1,000 Secrets for the initial purchase and renewals.

Re: [NTSysADM] Firewalls / Web filtering

2014-12-03 Thread Kurt Buff
PA pricing is an obstacle, especially the way they break out every service - web filtering, AV/malware detection, etc - which really starts to add up. Configuration is confusing until you get used to it, but I think it's less complicated/cumbersome than the SonicWalls I've dealt with (which