Re: smb firewall recommendation

2013-01-15 Thread Adam Greene
Hey Jimmy, I second (or third or fourth) the Sonicwall recommendation. I'm a Cisco guy myself, and love to deploy ASA5505's but the Sonicwalls are solid, less expensive, and easy for almost any IT person to administer (unlike the Cisco which requires more specialized skills). Not much

RE: Linksys exploit - what does this mean to my remote users?

2013-01-15 Thread Guyer, Don
Unless I'm missing something, which could be possible so correct me if I'm wrong, I don't think it's anything to panic over... That is, unless they left the admin password as the default and opened up remote administration. Access was gained via 192.168.1.1... :) Regards, Don Guyer Catholic

RE: smb firewall recommendation

2013-01-15 Thread joeuser
We're staying away from Sonicwall also, not because of Sonicwall, but because of Dell. I second the Fortinet suggestions, as this is what our rep suggested to us. This is what we are going with from now on. Regards, joeuser - Still looking for the 'any' key... ...now these points of data make a

Re: OT?: Network connection on Eaton UPS

2013-01-15 Thread Richard Stovall
Does the USB to serial adapter work on anything else? On Tue, Jan 15, 2013 at 9:27 AM, Richard McClary richard.mccl...@aspca.orgwrote: Greetings! ** ** We are now the proud owners of 6 Eaton 5PX-3000 UPS units, each with a network card which seems to do nothing useful. (One of these

RE: OT?: Network connection on Eaton UPS

2013-01-15 Thread Richard McClary
Thanks – I was just about to follow-up! Yes that adapter and serial cable have worked on everything else I’ve used it for. Again, when things were “a bit off” (COM settings, etc), I would get connection errors rather than the blank console. SO, forgetting these devices are all UPS’s, and

Re: PC/server management

2013-01-15 Thread Roger Wright
Kaseya has a comprehensive mgmt solution. I've not had hands on but have been impresses with a couple demos I've seen. Roger Wright ___ Congressional Mantra: Spending will continue increase until deficits improve. On Mon, Jan 14, 2013 at 2:14 PM, Tom Miller tmil...@sfgtrust.com wrote:

RE: Java 7 0day actively exploited in the wild | BeyondTrust

2013-01-15 Thread Sam Cayze
Am I right in assuming that the latest version of version 6 is, or was, NOT affected by this? Can't find anything out there that suggests it was... -Original Message- From: Kennedy, Jim [mailto:kennedy...@elyriaschools.org] Sent: Friday, January 11, 2013 1:34 PM To: NT System Admin

RE: Java 7 0day actively exploited in the wild | BeyondTrust

2013-01-15 Thread Kennedy, Jim
Correct, but 6 is vulnerable to it's own set of exploits that were never fixed and they are well known. Arguably the bad guys are paying more attention to attacking 7 now so theoretically you are safer with 6. Bottom line, java is insecure no matter what you do and will be that way for several

RE: Java 7 0day actively exploited in the wild | BeyondTrust

2013-01-15 Thread Sam Cayze
Does the reward outweigh the risk? The reward is we get to stay in business :) We have a major partner that requires us to run it for a B2B app. So, we have to use it. But I've made it so just one user uses that app. That and the occasional WebEx stuff, but I uninstall it from people's PCs

RE: Java 7 0day actively exploited in the wild | BeyondTrust

2013-01-15 Thread Kennedy, Jim
I totally understand your risk vs reward scenario. We are in the same boat. Yea, in Feb this is all a moot point. -Original Message- From: Sam Cayze [mailto:sca...@gmail.com] Sent: Tuesday, January 15, 2013 1:24 PM To: NT System Admin Issues Subject: RE: Java 7 0day actively exploited

Re: PC/server management

2013-01-15 Thread Steve Ens
I just had the Kace rep in my office yesterday afternoon and it seems like a pretty comprehensive product. I am going to check out the Landesk lunch and learn later this month as well. On Mon, Jan 14, 2013 at 8:32 AM, Tom Miller tmil...@sfgtrust.com wrote: Folks, ** ** Looking for

RE: PC/server management

2013-01-15 Thread Mathew Shember
What kind of a footprint does Kace introduce to a system? I have many engineers who are literally cycle counters and will notice just about anything installed and start complaining about wasted resources. They run the servers hard and like them lean as possible. The Kace people have been after

RE: PC/server management

2013-01-15 Thread Tom Miller
Thanks, folks. I will be looking at KBoxes again. I evaluated Landesk a few years ago. It was full of great features but it was too expensive for us. Tom From: Steve Ens [mailto:stevey...@gmail.com] Sent: Tuesday, January 15, 2013 1:54 PM To: NT System Admin Issues Subject: Re: PC/server

RE: PC/server management

2013-01-15 Thread Rod Trent
Ahem...Windows Intune Sent from Windows Phone 8 -Original Message- From: Mathew Shember mathew.shem...@synopsys.com Sent: ‎1/‎15/‎2013 2:21 PM To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Subject: RE: PC/server management What kind of a footprint does Kace introduce

Re: PC/server management

2013-01-15 Thread Steve Ens
He said very low bandwidth and about 20MB of RAM per machine. On Tue, Jan 15, 2013 at 1:17 PM, Mathew Shember mathew.shem...@synopsys.com wrote: What kind of a footprint does Kace introduce to a system? ** ** I have many engineers who are literally “cycle counters” and will notice

RE: PC/server management

2013-01-15 Thread Glen Johnson
We use KACE and haven't noticed an impact from the agent even on low end machines. The big issue for us, it doesn't multicast client os installs, so re-loading a lab can be painfully slow. So we've working more towards client management, software install, removal and such instead of complete

Re: PC/server management

2013-01-15 Thread Steve Ens
Hey Rod, how are things? Does intune give you the ability to do lifecycle management? On Tue, Jan 15, 2013 at 1:25 PM, Rod Trent rodtr...@myitforum.com wrote: Ahem...Windows Intune Sent from Windows Phone 8 -- From: Mathew Shember mathew.shem...@synopsys.com

RE: PC/server management

2013-01-15 Thread Tom Miller
I looked at the Intune page and it seems to focus on patching but not much else. It might do more but Microsoft's web page on it does not give much information. KBox runs as an agent over port 80 or 443 - depends on if you want to use certs. I've ever seen any high utilization from agents,

RE: PC/server management

2013-01-15 Thread Rod Trent
Just patching? Have you looked at the page today. Rev 4 was just released. Provides everything you'd find in ConfigMgr, except in the Cloud. www.windowsintune.com From: Tom Miller [mailto:tmil...@sfgtrust.com] Sent: Tuesday, January 15, 2013 3:01 PM To: NT System Admin Issues Subject:

Re: PC/server management

2013-01-15 Thread John Cook
Not to mention Dell will you download a trial VM to test for 30 days. John W. Cook Network Operations Manager Partnership for Strong Families From: Tom Miller [mailto:tmil...@sfgtrust.com] Sent: Tuesday, January 15, 2013 03:00 PM Eastern Standard Time To: NT System Admin Issues

RE: hakin9.org magazine

2013-01-15 Thread Ziots, Edward
They are legit for the l33t... Z Edward E. Ziots, CISSP, Security +, Network + Security Engineer Lifespan Organization ezi...@lifespan.org From: David Lum [mailto:david@nwea.org] Sent: Tuesday, January 15, 2013 2:00 PM To: NT System Admin Issues Subject: hakin9.org magazine Anyone know

RE: Java 7 0day actively exploited in the wild | BeyondTrust

2013-01-15 Thread Ziots, Edward
LOl is it a moot point, still going to be old version that are vulnerable on the networks, same old exploits same old issues. Z Edward E. Ziots, CISSP, Security +, Network + Security Engineer Lifespan Organization ezi...@lifespan.org -Original Message- From: Kennedy, Jim

RE: PC/server management

2013-01-15 Thread Tom Miller
Thanks - I must have been mesmerized by all the shiny photos on the site... From: Rod Trent [mailto:rodtr...@myitforum.com] Sent: Tuesday, January 15, 2013 3:07 PM To: NT System Admin Issues Subject: RE: PC/server management Just patching? Have you looked at the page today. Rev 4 was just

RE: PC/server management

2013-01-15 Thread Tim Vander Kooi
Intune would be ridiculously expensive for 350 seats. It will be a great solution some day when Microsoft learns how to price cloud products though. ;-) Tim From: Rod Trent [mailto:rodtr...@myitforum.com] Sent: Tuesday, January 15, 2013 1:25 PM To: NT System Admin Issues Subject: RE: PC/server

Re: hakin9.org magazine

2013-01-15 Thread Ben Scott
On Tue, Jan 15, 2013 at 1:59 PM, David Lum david@nwea.org wrote: Anyone know about this magazine? I got SPAM from them and it did make me curious so I did take a look and it looks legit, but… They're legit in the sense of not trying to steal your credit card info, but they're not legit in

Re: FoxIT reader vulnerability

2013-01-15 Thread Ben Scott
On Fri, Jan 11, 2013 at 10:50 AM, Richard McClary richard.mccl...@aspca.org wrote: http://www.theregister.co.uk/2013/01/11/foxit_pdf_plugin_vuln/ Just now checked the FoxIT web site. The currently offered version is 5.4.4.1128, which the article mentions as being vulnerable (as are older

RE: hakin9.org magazine (UNCLASSIFIED)

2013-01-15 Thread Kent, Larry J CTR USARMY 93 SIG BDE (US)
Classification: UNCLASSIFIED Caveats: NONE I get it all the time. Too much money for me to actually subscribe. It used to be free. If you are a hacker-wannbe this is a good site in my opinion. -Original Message- From: David Lum [mailto:david@nwea.org] Sent: Tuesday, January 15,

Re: FoxIT reader vulnerability

2013-01-15 Thread Matthew W. Ross
Doesn't Adobe (and possibly other PDF viewers) include PDF rendering with javascript now? I just want a dumb .pdf reader. Is it just me? --Matt Ross Ephrata School District - Original Message - From: Ben Scott [mailto:mailvor...@gmail.com] To: NT System Admin Issues

RE: FoxIT reader vulnerability

2013-01-15 Thread David Lum
E-reader...although for all I know they do extra crap too. -Original Message- From: Matthew W. Ross [mailto:mr...@ephrataschools.org] Sent: Tuesday, January 15, 2013 3:30 PM To: NT System Admin Issues Subject: Re: FoxIT reader vulnerability Doesn't Adobe (and possibly other PDF viewers)

RE: FoxIT reader vulnerability

2013-01-15 Thread Sam Cayze
They all seem to have Javascript in them. Adobe has at least since version 6. Always had to disable it. I've been in love with NitroPDF for over a year, but sadly noticed even they had a Javascript checkbox their options. And enable by default. I disable it across the boards with no Ill

RE: hakin9.org magazine

2013-01-15 Thread Kennedy, Jim
They are spammers so by definition they are thieves. From: David Lum [david@nwea.org] Sent: Tuesday, January 15, 2013 2:01 PM To: NT System Admin Issues Subject: hakin9.org magazine Anyone know about this magazine? I got SPAM from them and it did make

Re: hakin9.org magazine

2013-01-15 Thread Jonathan Link
They only wish to raise quality of life for all species. On Tue, Jan 15, 2013 at 7:23 PM, Kennedy, Jim kennedy...@elyriaschools.orgwrote: They are spammers so by definition they are thieves. From: David Lum [david@nwea.org] Sent: Tuesday, January

RE: hakin9.org magazine

2013-01-15 Thread Kennedy, Jim
spam is defined by consent not content or intent. :) wow, it's been years since I have used my anti spam talking points. I miss those days on usenet. From: Jonathan Link [jonathan.l...@gmail.com] Sent: Tuesday, January 15, 2013 7:30 PM To: NT System

Re: FoxIT reader vulnerability

2013-01-15 Thread Ben Scott
On Tue, Jan 15, 2013 at 6:29 PM, Matthew W. Ross mr...@ephrataschools.org wrote: Doesn't Adobe (and possibly other PDF viewers) include PDF rendering with javascript now? I just want a dumb .pdf reader. Is it just me? The real irony here is that Adobe originally created PDF to be a safe

Re: FoxIT reader vulnerability

2013-01-15 Thread Kurt Buff
On Tue, Jan 15, 2013 at 4:45 PM, Ben Scott mailvor...@gmail.com wrote: On Tue, Jan 15, 2013 at 6:29 PM, Matthew W. Ross mr...@ephrataschools.org wrote: Doesn't Adobe (and possibly other PDF viewers) include PDF rendering with javascript now? I just want a dumb .pdf reader. Is it just me?

RE: FoxIT reader vulnerability

2013-01-15 Thread Michael B. Smith
I learned Forth when I was 17, in 1980. It blew my mind. Before that, I knew WATFOR, UCSD Pascal, 6502 assembler, and 8008 assembler. Forth's RPN and its low-level power made me feel as if I could do anything! :) -Original Message- From: Kurt Buff [mailto:kurt.b...@gmail.com] Sent:

Re: FoxIT reader vulnerability

2013-01-15 Thread Kurt Buff
I took USCD Pascal, RPG III, COBOL, Fortran, 360 assembler, JCL and probably a couple of other languages as well in a failed attempt at an Associates about then. I heard of the language about then as well, but didn't try to tackle it until I had an Amiga. None of it really stuck - I just wasn't