RE: Help with sizing a Windows 2003 Print Server
Basically we run out Print servers on ESX VM's. I have about 200-250 printers per server. Here are the specs. 8GB of Disk ( spool the files and such) 1GIG of RAM (512MB for OS, and 512MB for applications to run in) Processor ( 2.0GHZ or higher) Z Edward E. Ziots Network Engineer Lifespan Organization MCSE,MCSA,MCP,Security+,Network+,CCA Phone: 401-639-3505 From: McBride, Ryan [mailto:[EMAIL PROTECTED] Sent: Sunday, October 19, 2008 7:45 PM To: NT System Admin Issues Subject: Help with sizing a Windows 2003 Print Server Hey Guys, Just wondering if anyone knows of a formula that can be used when sizing a print server. I'm looking at approx 200 Printers and 1200-1500 End users. All in the one physical site. Mainly interested in Ram sizing. CPU Disk space will not be an issue. Thanks in advance Ryan McBride Senior Systems Engineer D3S Enterprise Services http://www.thalesgroup.com.au/ B314 Garden Island, Cowper Wharf Road, Woolloomooloo Tel: +61 (02) 9562 2205 | Mob: +61 413 984 819 | Fax: +61 (02) 9562 2857 Email: [EMAIL PROTECTED] http://www.thalesgroup.com.au/ DISCLAIMER:- -- This e-mail transmission and any documents, files and previous e-mail messages attached to it are private and confidential. They may contain proprietary or copyright material or information that is subject to legal professional privilege. They are for the use of the intended recipient only. Any unauthorised viewing, use, disclosure, copying, alteration, storage or distribution of, or reliance on, this message is strictly prohibited. No part may be reproduced, adapted or transmitted without the written permission of the owner. If you have received this transmission in error, or are not an authorised recipient, please immediately notify the sender by return email, delete this message and all copies from your e-mail system, and destroy any printed copies. Receipt by anyone other than the intended recipient should not be deemed a waiver of any privilege or protection. Thales Australia does not warrant or represent that this e-mail or any documents, files and previous e-mail messages attached are error or virus free. -- ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~image001.gifimage002.gif
Re: Help with sizing a Windows 2003 Print Server
I don't know of a formula, but I can tell you that our print server is handling about 150 printers and 1600 users on 1GB of RAM and 1 CPU. No joke. It's a VM, and nobody's complaining about print performance. Total commit charge is about 600MB right now; There's little sign that more RAM is needed. RM On Mon, 20 Oct 2008 10:44:53 +1100, McBride, Ryan [EMAIL PROTECTED] roup.com.au said: Hey Guys, Just wondering if anyone knows of a formula that can be used when sizing a print server. I'm looking at approx 200 Printers and 1200-1500 End users. All in the one physical site. Mainly interested in Ram sizing. CPU Disk space will not be an issue. Thanks in advance Ryan McBride Senior Systems Engineer D3S Enterprise Services ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Help with sizing a Windows 2003 Print Server
Same here, we use VM for the print servers and nobody is complaining. NO need to have print servers on physical hardware when you got VM's Z Edward E. Ziots Network Engineer Lifespan Organization MCSE,MCSA,MCP,Security+,Network+,CCA Phone: 401-639-3505 From: RM [mailto:[EMAIL PROTECTED] Sent: Monday, October 20, 2008 9:54 AM To: NT System Admin Issues Subject: Re: Help with sizing a Windows 2003 Print Server I don't know of a formula, but I can tell you that our print server is handling about 150 printers and 1600 users on 1GB of RAM and 1 CPU. No joke. It's a VM, and nobody's complaining about print performance. Total commit charge is about 600MB right now; There's little sign that more RAM is needed. RM On Mon, 20 Oct 2008 10:44:53 +1100, McBride, Ryan [EMAIL PROTECTED] said: Hey Guys, Just wondering if anyone knows of a formula that can be used when sizing a print server. I'm looking at approx 200 Printers and 1200-1500 End users. All in the one physical site. Mainly interested in Ram sizing. CPU Disk space will not be an issue. Thanks in advance Ryan McBride Senior Systems Engineer D3S Enterprise Services ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Help with sizing a Windows 2003 Print Server
I will agree with Disk Space. We are a small shop with only one color printer. This also depends on printers/ and drivers. We have had several times when a large print job was spooled to the color printer that was over 500MB. If you get a few of those without enough disk space you will soon have a BIG problem. -Original Message- From: Joseph L. Casale [mailto:[EMAIL PROTECTED] Sent: Monday, October 20, 2008 9:13 AM To: NT System Admin Issues Subject: RE: Help with sizing a Windows 2003 Print Server Disc space could be more of a concern if for instance you were using ps drivers and had multiple users printing simultaneously. There is a KB article on how to relocate the spool dir on big servers jlc From: Ziots, Edward [mailto:[EMAIL PROTECTED] Sent: Monday, October 20, 2008 8:01 AM To: NT System Admin Issues Subject: RE: Help with sizing a Windows 2003 Print Server Same here, we use VM for the print servers and nobody is complaining. NO need to have print servers on physical hardware when you got VM's Z Edward E. Ziots Network Engineer Lifespan Organization MCSE,MCSA,MCP,Security+,Network+,CCA Phone: 401-639-3505 From: RM [mailto:[EMAIL PROTECTED] Sent: Monday, October 20, 2008 9:54 AM To: NT System Admin Issues Subject: Re: Help with sizing a Windows 2003 Print Server I don't know of a formula, but I can tell you that our print server is handling about 150 printers and 1600 users on 1GB of RAM and 1 CPU. No joke. It's a VM, and nobody's complaining about print performance. Total commit charge is about 600MB right now; There's little sign that more RAM is needed. RM On Mon, 20 Oct 2008 10:44:53 +1100, McBride, Ryan [EMAIL PROTECTED] said: Hey Guys, Just wondering if anyone knows of a formula that can be used when sizing a print server. I'm looking at approx 200 Printers and 1200-1500 End users. All in the one physical site. Mainly interested in Ram sizing. CPU Disk space will not be an issue. Thanks in advance Ryan McBride Senior Systems Engineer D3S Enterprise Services ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Help with sizing a Windows 2003 Print Server
Disc space could be more of a concern if for instance you were using ps drivers and had multiple users printing simultaneously. There is a KB article on how to relocate the spool dir on big servers jlc From: Ziots, Edward [mailto:[EMAIL PROTECTED] Sent: Monday, October 20, 2008 8:01 AM To: NT System Admin Issues Subject: RE: Help with sizing a Windows 2003 Print Server Same here, we use VM for the print servers and nobody is complaining. NO need to have print servers on physical hardware when you got VM's Z Edward E. Ziots Network Engineer Lifespan Organization MCSE,MCSA,MCP,Security+,Network+,CCA Phone: 401-639-3505 From: RM [mailto:[EMAIL PROTECTED] Sent: Monday, October 20, 2008 9:54 AM To: NT System Admin Issues Subject: Re: Help with sizing a Windows 2003 Print Server I don't know of a formula, but I can tell you that our print server is handling about 150 printers and 1600 users on 1GB of RAM and 1 CPU. No joke. It's a VM, and nobody's complaining about print performance. Total commit charge is about 600MB right now; There's little sign that more RAM is needed. RM On Mon, 20 Oct 2008 10:44:53 +1100, McBride, Ryan [EMAIL PROTECTED] said: Hey Guys, Just wondering if anyone knows of a formula that can be used when sizing a print server. I'm looking at approx 200 Printers and 1200-1500 End users. All in the one physical site. Mainly interested in Ram sizing. CPU Disk space will not be an issue. Thanks in advance Ryan McBride Senior Systems Engineer D3S Enterprise Services ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Help with sizing a Windows 2003 Print Server
Yea, I think its best practice to locate the spool directory on its own volume to prevent this... jlc -Original Message- From: Terry Dickson [mailto:[EMAIL PROTECTED] Sent: Monday, October 20, 2008 8:17 AM To: NT System Admin Issues Subject: RE: Help with sizing a Windows 2003 Print Server I will agree with Disk Space. We are a small shop with only one color printer. This also depends on printers/ and drivers. We have had several times when a large print job was spooled to the color printer that was over 500MB. If you get a few of those without enough disk space you will soon have a BIG problem. -Original Message- From: Joseph L. Casale [mailto:[EMAIL PROTECTED] Sent: Monday, October 20, 2008 9:13 AM To: NT System Admin Issues Subject: RE: Help with sizing a Windows 2003 Print Server Disc space could be more of a concern if for instance you were using ps drivers and had multiple users printing simultaneously. There is a KB article on how to relocate the spool dir on big servers jlc From: Ziots, Edward [mailto:[EMAIL PROTECTED] Sent: Monday, October 20, 2008 8:01 AM To: NT System Admin Issues Subject: RE: Help with sizing a Windows 2003 Print Server Same here, we use VM for the print servers and nobody is complaining. NO need to have print servers on physical hardware when you got VM's Z Edward E. Ziots Network Engineer Lifespan Organization MCSE,MCSA,MCP,Security+,Network+,CCA Phone: 401-639-3505 From: RM [mailto:[EMAIL PROTECTED] Sent: Monday, October 20, 2008 9:54 AM To: NT System Admin Issues Subject: Re: Help with sizing a Windows 2003 Print Server I don't know of a formula, but I can tell you that our print server is handling about 150 printers and 1600 users on 1GB of RAM and 1 CPU. No joke. It's a VM, and nobody's complaining about print performance. Total commit charge is about 600MB right now; There's little sign that more RAM is needed. RM On Mon, 20 Oct 2008 10:44:53 +1100, McBride, Ryan [EMAIL PROTECTED] said: Hey Guys, Just wondering if anyone knows of a formula that can be used when sizing a print server. I'm looking at approx 200 Printers and 1200-1500 End users. All in the one physical site. Mainly interested in Ram sizing. CPU Disk space will not be an issue. Thanks in advance Ryan McBride Senior Systems Engineer D3S Enterprise Services ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: blackberry and OCS
We have the client working fine, but did not do a push. We are in the testing stage so we installed the client from the Desktop Manager. From: Kevin Lundy [mailto:[EMAIL PROTECTED] Sent: Friday, October 17, 2008 4:31 PM To: NT System Admin Issues Subject: blackberry and OCS Has anyone managed to get the Blackberry for OCS client installed and working? We installed the latest BES. Configured the options for OCS and are getting no errors on the server. So we then went to install the client. Pushed it out to 3 devices from the BES. Made it mandatory. I watched my 8830 and it had lots of data activity and then ... nothing. Same thing on the other devices. BES reports up to date. We've only been using the BES for about 3 months, so it is very likely something we are doing wrong, or not doing. However, we have pushed other softare using the same steps. Thanks for any pointers Kevin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: exploit tests on security suites
Their point? Yeah, patch :). It also says don't be so ignorant to think your AV will tell you where you're vulnerable, no different than expecting your patch management to tell you when you've got a virus. Until someone packages patch management with AV/Malware and probably even some kind of data encryption there won't be a single app to handle endpoint security. David Lum // SYSTEMS ENGINEER NORTHWEST EVALUATION ASSOCIATION (Desk) 971.222.1025 // (Cell) 503.267.9764 -Original Message- From: Marc Maiffret [mailto:[EMAIL PROTECTED] Sent: Saturday, October 18, 2008 3:25 PM To: NT System Admin Issues Subject: RE: exploit tests on security suites Secunia does sound like they could have done their testing better. However, they are trying to highlight something that is indeed a real problem for most every security suite, AV or otherwise. The fact is that the majority of the solutions people are using from McAfee to NOD32 (VIPRE maybe although I have not played with it yet) do absolutely nothing in the way of preventing systems from being compromised through the use of exploits that leveraging software vulnerabilities. All of these security suites are just better versions of each other in terms of trying to have better ways to more generically detect files that appear to be malicious. That however is not even nearly close to a complete defense against the attacks that organizations face today. Even suites such as McAfee and CSA that have added some level of vulnerability prevention simply fail to prevent anything. Secunia might have done their testing wrong, but their point is real and accurate. -Marc Maiffret -Original Message- From: Stu Sjouwerman [mailto:[EMAIL PROTECTED] Sent: Thursday, October 16, 2008 1:08 PM To: NT System Admin Issues Subject: RE: exploit tests on security suites Alex has some good observations in his Blog: http://sunbeltblog.blogspot.com/2008/10/another-useless-test-grabs- headlines.html Warm regards, Stu From: René de Haas [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 15, 2008 12:11 PM To: NT System Admin Issues Subject: exploit tests on security suites Results are a little disappointing http://computerworld.com/action/article.do?command=viewArticleBasicart icleId=9117042intsrc=hm_list *** The information in this e-mail is confidential and intended solely for the individual or entity to whom it is addressed. If you have received this e-mail in error please notify the sender by return e-mail delete this e-mail and refrain from any disclosure or action based on the information. *** . ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
SOHO Firewall / VPN
Small office network (about a dozen computers) that needs a firewall / VPN solution. They currently have DSL for internet, but its just plugged in to a small LinkSys router. They want to be able to VPN in from the outside to run remote desktop. Doesn't have to be fancy-shmancy, just basic firewall for outbound control, and VPN for remote desktop. Would a Sonicwall be a good fit? If so, which model do y'all recommend? Thanks all! *** John C. Kelsey, MCSE DuBois Regional Medical Center (: 814.375.3073 2 : 814.375.4005 *: [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] *** ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: SOHO Firewall / VPN
Depends on how much you want to spend. A lot of the Draytek routers offer VPN endpointing and are pretty cheap, firewall capabilities may not be quite strong enough though. From: Kelsey, John [mailto:[EMAIL PROTECTED] Sent: 20 October 2008 16:36 To: NT System Admin Issues Subject: SOHO Firewall / VPN Small office network (about a dozen computers) that needs a firewall / VPN solution. They currently have DSL for internet, but its just plugged in to a small LinkSys router. They want to be able to VPN in from the outside to run remote desktop. Doesn't have to be fancy-shmancy, just basic firewall for outbound control, and VPN for remote desktop. Would a Sonicwall be a good fit? If so, which model do y'all recommend? Thanks all! *** John C. Kelsey, MCSE DuBois Regional Medical Center (: 814.375.3073 2 : 814.375.4005 *: [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] *** The information contained in this E-Mail and any subsequent correspondence is private and is intended solely for the intended recipient(s). The information in this communication may be confidential and/or legally privileged. Nothing in this e-mail is intended to conclude a contract on behalf of QinetiQ or make QinetiQ subject to any other legally binding commitments, unless the e-mail contains an express statement to the contrary or incorporates a formal Purchase Order. For those other than the recipient any disclosure, copying, distribution, or any action taken or omitted to be taken in reliance on such information is prohibited and may be unlawful. Emails and other electronic communication with QinetiQ may be monitored and recorded for business purposes including security, audit and archival purposes. Any response to this email indicates consent to this. Telephone calls to QinetiQ may be monitored or recorded for quality control, security and other business purposes. QinetiQ Limited Registered in England Wales: Company Number:3796233 Registered office: 85 Buckingham Gate, London SW1E 6PD, United Kingdom Trading address: Cody Technology Park, Cody Building, Ively Road, Farnborough, Hampshire, GU14 0LX, United Kingdom http://www.qinetiq.com/home/notices/legal.html ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: SOHO Firewall / VPN
I like SonicWALL products but have found their corporate mindset regarding security quite lacking. From: Phil Thompson [mailto:[EMAIL PROTECTED] Sent: Monday, October 20, 2008 11:42 AM To: NT System Admin Issues Subject: RE: SOHO Firewall / VPN Doesn't your Linksys have that? Sonicwall is a good FW. They make inexpensive models. Phil From: Kelsey, John [mailto:[EMAIL PROTECTED] Sent: Monday, October 20, 2008 11:36 AM To: NT System Admin Issues Subject: SOHO Firewall / VPN Small office network (about a dozen computers) that needs a firewall / VPN solution. They currently have DSL for internet, but its just plugged in to a small LinkSys router. They want to be able to VPN in from the outside to run remote desktop. Doesn't have to be fancy-shmancy, just basic firewall for outbound control, and VPN for remote desktop. Would a Sonicwall be a good fit? If so, which model do y'all recommend? Thanks all! *** John C. Kelsey, MCSE DuBois Regional Medical Center (: 814.375.3073 2 : 814.375.4005 *: [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] *** ~~~ Derek Lidbom Director of Technology and Interactive Development, Trone 336.812.2010 [EMAIL PROTECTED] http://www.trone.com/ Confidentiality Notice: This e-mail communication and any attachments may contain confidential and privileged information for the use of the designated recipients named above. If you are not the intended recipient, you are hereby notified that you have received this communication in error and that any review, disclosure, dissemination, distribution or copying of it or its contents is prohibited. If you have received this communication in error, please notify me immediately by replying to this message and deleting it from your computer. Thank you. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: blackberry and OCS
IIRC, sometimes the OCS client will not install by push if the Blackberry Messenger is in place. We have had a similar issue, sometimes the client installs, sometimes it does not. I have not spent a great deal of time on it. We normally do not send a BB out without the OCS client installed. (We connect it to a desktop to get the software and activate for the user before issuing it) Bob Fronk [EMAIL PROTECTED] From: Kevin Lundy [mailto:[EMAIL PROTECTED] Sent: Friday, October 17, 2008 4:31 PM To: NT System Admin Issues Subject: blackberry and OCS Has anyone managed to get the Blackberry for OCS client installed and working? We installed the latest BES. Configured the options for OCS and are getting no errors on the server. So we then went to install the client. Pushed it out to 3 devices from the BES. Made it mandatory. I watched my 8830 and it had lots of data activity and then ... nothing. Same thing on the other devices. BES reports up to date. We've only been using the BES for about 3 months, so it is very likely something we are doing wrong, or not doing. However, we have pushed other softare using the same steps. Thanks for any pointers Kevin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: SOHO Firewall / VPN
Yep. Sonicwall or Netscreen. From: Phil Thompson [mailto:[EMAIL PROTECTED] Sent: Monday, October 20, 2008 8:42 AM To: NT System Admin Issues Subject: RE: SOHO Firewall / VPN Doesn't your Linksys have that? Sonicwall is a good FW. They make inexpensive models. Phil _ From: Kelsey, John [mailto:[EMAIL PROTECTED] Sent: Monday, October 20, 2008 11:36 AM To: NT System Admin Issues Subject: SOHO Firewall / VPN Small office network (about a dozen computers) that needs a firewall / VPN solution. They currently have DSL for internet, but its just plugged in to a small LinkSys router. They want to be able to VPN in from the outside to run remote desktop. Doesn't have to be fancy-shmancy, just basic firewall for outbound control, and VPN for remote desktop. Would a Sonicwall be a good fit? If so, which model do y'all recommend? Thanks all! *** John C. Kelsey, MCSE DuBois Regional Medical Center (: 814.375.3073 2 : 814.375.4005 *:mailto:[EMAIL PROTECTED] [EMAIL PROTECTED] *** ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: SOHO Firewall / VPN
To answer your question about model, SonicWALL TZ170 or 190 should do the trick. If you want any sort of granularity with your rules, the Enhanced OS is a must. Sorry to be less than helpful with my last response. Just hoping someone on this list knows someone at SonicWALL so I can get a dialog going with them to get some of my issues addressed. -Derek From: Kelsey, John [mailto:[EMAIL PROTECTED] Sent: Monday, October 20, 2008 11:36 AM To: NT System Admin Issues Subject: SOHO Firewall / VPN Small office network (about a dozen computers) that needs a firewall / VPN solution. They currently have DSL for internet, but its just plugged in to a small LinkSys router. They want to be able to VPN in from the outside to run remote desktop. Doesn't have to be fancy-shmancy, just basic firewall for outbound control, and VPN for remote desktop. Would a Sonicwall be a good fit? If so, which model do y'all recommend? Thanks all! *** John C. Kelsey, MCSE DuBois Regional Medical Center (: 814.375.3073 2 : 814.375.4005 *: [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] *** ~~~ Derek Lidbom Director of Technology and Interactive Development, Trone 336.812.2010 [EMAIL PROTECTED] http://www.trone.com/ Confidentiality Notice: This e-mail communication and any attachments may contain confidential and privileged information for the use of the designated recipients named above. If you are not the intended recipient, you are hereby notified that you have received this communication in error and that any review, disclosure, dissemination, distribution or copying of it or its contents is prohibited. If you have received this communication in error, please notify me immediately by replying to this message and deleting it from your computer. Thank you. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: SOHO Firewall / VPN
Like a lot of companies these days their support is in India and you can't understand what they are saying!!! That is one of the reasons I've dropped Symantec. Phil From: Derek Lidbom [mailto:[EMAIL PROTECTED] Sent: Monday, October 20, 2008 11:44 AM To: NT System Admin Issues Subject: RE: SOHO Firewall / VPN I like SonicWALL products but have found their corporate mindset regarding security quite lacking. From: Phil Thompson [mailto:[EMAIL PROTECTED] Sent: Monday, October 20, 2008 11:42 AM To: NT System Admin Issues Subject: RE: SOHO Firewall / VPN Doesn't your Linksys have that? Sonicwall is a good FW. They make inexpensive models. Phil From: Kelsey, John [mailto:[EMAIL PROTECTED] Sent: Monday, October 20, 2008 11:36 AM To: NT System Admin Issues Subject: SOHO Firewall / VPN Small office network (about a dozen computers) that needs a firewall / VPN solution. They currently have DSL for internet, but its just plugged in to a small LinkSys router. They want to be able to VPN in from the outside to run remote desktop. Doesn't have to be fancy-shmancy, just basic firewall for outbound control, and VPN for remote desktop. Would a Sonicwall be a good fit? If so, which model do y'all recommend? Thanks all! *** John C. Kelsey, MCSE DuBois Regional Medical Center *: 814.375.3073 * : 814.375.4005 *: [EMAIL PROTECTED]mailto:[EMAIL PROTECTED] *** ~~~ Derek Lidbom Director of Technology and Interactive Development, Trone 336.812.2010 [EMAIL PROTECTED] [http://www.trone.com/RemoteImages/TroneSignature.jpg]http://www.trone.com/ Confidentiality Notice: This e-mail communication and any attachments may contain confidential and privileged information for the use of the designated recipients named above. If you are not the intended recipient, you are hereby notified that you have received this communication in error and that any review, disclosure, dissemination, distribution or copying of it or its contents is prohibited. If you have received this communication in error, please notify me immediately by replying to this message and deleting it from your computer. Thank you. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: SOHO Firewall / VPN
FYI: The TZ 170 was EOS'ed a year or 2 a go and was replaced by the TZ 180. The TZ 190 is a sweet box and is only available with the Enhanced OS. Getting a cheaper TZ 180 and putting the Enhanced OS and unlimited user upgrades on it is more expensive than getting a TZ 190. Derek Lidbom wrote: To answer your question about model, SonicWALL TZ170 or 190 should do the trick. If you want any sort of granularity with your rules, the Enhanced OS is a must. -- Phil Brutsche [EMAIL PROTECTED] ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: SOHO Firewall / VPN
Doesn't your Linksys have that? Sonicwall is a good FW. They make inexpensive models. Phil From: Kelsey, John [mailto:[EMAIL PROTECTED] Sent: Monday, October 20, 2008 11:36 AM To: NT System Admin Issues Subject: SOHO Firewall / VPN Small office network (about a dozen computers) that needs a firewall / VPN solution. They currently have DSL for internet, but its just plugged in to a small LinkSys router. They want to be able to VPN in from the outside to run remote desktop. Doesn't have to be fancy-shmancy, just basic firewall for outbound control, and VPN for remote desktop. Would a Sonicwall be a good fit? If so, which model do y'all recommend? Thanks all! *** John C. Kelsey, MCSE DuBois Regional Medical Center *: 814.375.3073 * : 814.375.4005 *: [EMAIL PROTECTED]mailto:[EMAIL PROTECTED] *** ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Windows 2008 Web client service
Hi there everyone, just wondering if anyone knows how I can install the web client service into Windows 2008 server. I have a program that depends on that service but I can't figure out how to install it for Windows 2008. Any help would be greatly appreciated. Thanks Jonathan ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: SOHO Firewall / VPN
I personally no longer recommend sonicwall due to the crappy support from their non-english speaking call center .. I've had a few horrendous experiences ... if you don't need fancy, maybe even a netgear firewall (FVS) will suffice for under $100 _ From: Kelsey, John [mailto:[EMAIL PROTECTED] Sent: Monday, October 20, 2008 11:36 AM To: NT System Admin Issues Subject: SOHO Firewall / VPN Small office network (about a dozen computers) that needs a firewall / VPN solution. They currently have DSL for internet, but its just plugged in to a small LinkSys router. They want to be able to VPN in from the outside to run remote desktop. Doesn't have to be fancy-shmancy, just basic firewall for outbound control, and VPN for remote desktop. Would a Sonicwall be a good fit? If so, which model do y'all recommend? Thanks all! *** John C. Kelsey, MCSE DuBois Regional Medical Center (: 814.375.3073 2 : 814.375.4005 *:mailto:[EMAIL PROTECTED] [EMAIL PROTECTED] *** No virus found in this incoming message. Checked by AVG - http://www.avg.com Version: 8.0.173 / Virus Database: 270.8.0/1726 - Release Date: 10/20/2008 7:25 AM ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: OCS 2005 via Internet
Slightly different tack but the subject line is right. Do any of you have users that, when connected via VPN, do data sharing with other VPN'd users? Our current config doesn't allow this. Per our network guy: -- The problem is with Microsoft's IM implementation working with Cisco's implementation of vpn. Typically, a single Session Initiation Protocol (SIP) port is required for data sharing through a NAT device. However, a UPnP certified NAT device (cisco) requires two SIP ports to establish a data-sharing session. Communicator 2005 only uses a single SIP port for data sharing. It does not support data sharing through an UPnP certified NAT device. I don't know if pinging is related to this or not. -- We have a business need to have two VPN'd employees be able to do a data share via Communicator - anyone here do that? David Lum // SYSTEMS ENGINEER NORTHWEST EVALUATION ASSOCIATION (Desk) 971.222.1025 // (Cell) 503.267.9764 -Original Message- From: Bob Fronk [mailto:[EMAIL PROTECTED] Sent: Saturday, October 18, 2008 7:00 AM To: NT System Admin Issues Subject: RE: OCS 2005 via Internet Pre-populating the contacts is what I was asking. Especially for new users. Bob Fronk [EMAIL PROTECTED] -Original Message- From: Ken Schaefer [mailto:[EMAIL PROTECTED] Sent: Saturday, October 18, 2008 12:57 AM To: NT System Admin Issues Subject: RE: OCS 2005 via Internet Not sure what's Bob's asking exactly, but if Bob's asking for pre-populating contacts (or groups of contacts) then I think you need to edit the database for that (i think there's a tool in the Res Kit that can do that). If you want to create groups for users, then you can use mail enabled AD groups (provided the users in the group as SIP Uri enabled) Cheers Ken -Original Message- From: Tim Vander Kooi [mailto:[EMAIL PROTECTED] Sent: Saturday, 18 October 2008 7:37 AM To: NT System Admin Issues Subject: RE: OCS 2005 via Internet Bob, What type of a contact list are you referring to? TVK -Original Message- From: Bob Fronk [mailto:[EMAIL PROTECTED] Sent: Friday, October 17, 2008 2:12 PM To: NT System Admin Issues Subject: RE: OCS 2005 via Internet Were you able to deploy a contact list too? If so, how did you do that? Bob Fronk [EMAIL PROTECTED] -Original Message- From: John A. Shaw-Miller [mailto:[EMAIL PROTECTED] Sent: Tuesday, October 14, 2008 10:05 AM To: NT System Admin Issues Subject: RE: OCS 2005 via Internet I have just deployed OCS to 20,000 users, was a lot easier and painless than the LCS deployment John Aaron Shaw-Miller MBCS KtGC OBE IT Consultant, Infrastructure Exchange Specialist Member of the Microsoft IT Advisory Council Mobile: 07896 740 712 Home Office:01952 400511 Email: [EMAIL PROTECTED] MSN: [EMAIL PROTECTED] Website: www.servtec.co.uk Remember, inside every old person is a young person wondering what happened.. idea=`grep -i clue /dev/brain` ; test -z $idea echo sorry, init 6 in progress || sh ./clooless -Original Message- From: Steven Peck [mailto:[EMAIL PROTECTED] Sent: 13 October 2008 22:52 To: NT System Admin Issues Subject: Re: OCS 2005 via Internet We use LCS 2005 but don't use the LCS 2005 web client but from testing and memory, all it needs is a publicly accessible web/ip address and an ssl certificate. (and holes to your LCS server). If possible you are better off putting all your arguments into getting them to go for an upgrade to OCS2007 On Mon, Oct 13, 2008 at 2:38 PM, David Lum [EMAIL PROTECTED] wrote: My Google-Fu is weak today! Does anyone have Office Communicator 2005 web client enabled and available via Internet? Is it possible w/out a VPN connection? David Lum // SYSTEMS ENGINEER NORTHWEST EVALUATION ASSOCIATION (Desk) 971.222.1025 // (Cell) 503.267.9764 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: SOHO Firewall / VPN
MessageMy recent experience as a first time buyer of Sonicwall products and dealing with their so called support led me running back to watchguard. Watchguard makes SoHo products also. I believe its called their Edge line. James - Original Message - From: Erik Goldoff To: NT System Admin Issues Sent: Monday, October 20, 2008 1:11 PM Subject: RE: SOHO Firewall / VPN I personally no longer recommend sonicwall due to the crappy support from their non-english speaking call center .. I've had a few horrendous experiences ... if you don't need fancy, maybe even a netgear firewall (FVS) will suffice for under $100 -- From: Kelsey, John [mailto:[EMAIL PROTECTED] Sent: Monday, October 20, 2008 11:36 AM To: NT System Admin Issues Subject: SOHO Firewall / VPN Small office network (about a dozen computers) that needs a firewall / VPN solution. They currently have DSL for internet, but its just plugged in to a small LinkSys router. They want to be able to VPN in from the outside to run remote desktop. Doesn't have to be fancy-shmancy, just basic firewall for outbound control, and VPN for remote desktop. Would a Sonicwall be a good fit? If so, which model do y'all recommend? Thanks all! *** John C. Kelsey, MCSE DuBois Regional Medical Center (: 814.375.3073 2 : 814.375.4005 *: [EMAIL PROTECTED] *** No virus found in this incoming message. Checked by AVG - http://www.avg.com Version: 8.0.173 / Virus Database: 270.8.0/1726 - Release Date: 10/20/2008 7:25 AM ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: SOHO Firewall / VPN
They've started the EOL process, but they're not EOS, but your point is still well made. The TZ170 appears to be in Active Retirement Mode for what historically will probably be another year (sometime mid-2009). Then limited retirement mode for usually two years and then End of support. Source: http://www.sonicwall.com/downloads/ARM_NADistributorNotification_TZ170Series.pdf If you're aware of other documentation that indicates contrary, please let me know. -Derek -Original Message- From: Phil Brutsche [mailto:[EMAIL PROTECTED] Sent: Monday, October 20, 2008 12:06 PM To: NT System Admin Issues Subject: Re: SOHO Firewall / VPN FYI: The TZ 170 was EOS'ed a year or 2 a go and was replaced by the TZ 180. The TZ 190 is a sweet box and is only available with the Enhanced OS. Getting a cheaper TZ 180 and putting the Enhanced OS and unlimited user upgrades on it is more expensive than getting a TZ 190. Derek Lidbom wrote: To answer your question about model, SonicWALL TZ170 or 190 should do the trick. If you want any sort of granularity with your rules, the Enhanced OS is a must. -- Phil Brutsche [EMAIL PROTECTED] ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~~~ Derek Lidbom Director of Technology and Interactive Development, Trone 336.812.2010 [EMAIL PROTECTED] http://www.trone.com/ Confidentiality Notice: This e-mail communication and any attachments may contain confidential and privileged information for the use of the designated recipients named above. If you are not the intended recipient, you are hereby notified that you have received this communication in error and that any review, disclosure, dissemination, distribution or copying of it or its contents is prohibited. If you have received this communication in error, please notify me immediately by replying to this message and deleting it from your computer. Thank you. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: blackberry and OCS
Well the push ended up being a package problem. Since we are BB newbies, we tried to get too smart - we opened the package and did things like take out language packs. Tried again with the package as-is from RIM and it went out fine. A couple of devices we had to push 2x but it's there. Now the problem is the BB will send but not receive. Baby steps :) On Mon, Oct 20, 2008 at 11:48 AM, Bob Fronk [EMAIL PROTECTED] wrote: IIRC, sometimes the OCS client will not install by push if the Blackberry Messenger is in place. We have had a similar issue, sometimes the client installs, sometimes it does not. I have not spent a great deal of time on it. We normally do not send a BB out without the OCS client installed. (We connect it to a desktop to get the software and activate for the user before issuing it) Bob Fronk [EMAIL PROTECTED] *From:* Kevin Lundy [mailto:[EMAIL PROTECTED] *Sent:* Friday, October 17, 2008 4:31 PM *To:* NT System Admin Issues *Subject:* blackberry and OCS Has anyone managed to get the Blackberry for OCS client installed and working? We installed the latest BES. Configured the options for OCS and are getting no errors on the server. So we then went to install the client. Pushed it out to 3 devices from the BES. Made it mandatory. I watched my 8830 and it had lots of data activity and then ... nothing. Same thing on the other devices. BES reports up to date. We've only been using the BES for about 3 months, so it is very likely something we are doing wrong, or not doing. However, we have pushed other softare using the same steps. Thanks for any pointers Kevin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Event logging every executable ran
Is it possible to log the full path of every executable a user runs into the security event log? Phillip Partipilo Parametric Solutions Inc. Jupiter, Florida (561) 747-6107 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: SOHO Firewall / VPN
By EOS I meant End Of Sale, not End Of Support. Derek Lidbom wrote: They've started the EOL process, but they're not EOS, but your point is still well made. The TZ170 appears to be in Active Retirement Mode for what historically will probably be another year (sometime mid-2009). Then limited retirement mode for usually two years and then End of support. Source: http://www.sonicwall.com/downloads/ARM_NADistributorNotification_TZ170Series.pdf If you're aware of other documentation that indicates contrary, please let me know. -- Phil Brutsche [EMAIL PROTECTED] ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: SOHO Firewall / VPN
Looks like potential: http://preview.tinyurl.com/43eub3 Roger Wright Network Administrator Evatone, Inc. 727.572.7076 x388 _ From: Kelsey, John [mailto:[EMAIL PROTECTED] Sent: Monday, October 20, 2008 11:36 AM To: NT System Admin Issues Subject: SOHO Firewall / VPN Small office network (about a dozen computers) that needs a firewall / VPN solution. They currently have DSL for internet, but its just plugged in to a small LinkSys router. They want to be able to VPN in from the outside to run remote desktop. Doesn't have to be fancy-shmancy, just basic firewall for outbound control, and VPN for remote desktop. Would a Sonicwall be a good fit? If so, which model do y'all recommend? Thanks all! *** John C. Kelsey, MCSE DuBois Regional Medical Center (: 814.375.3073 2 : 814.375.4005 *: [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] *** ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: SOHO Firewall / VPN
SBS 2003 Premium...Then they can RDP to their own workstations via the built in vpn...or securely over https. S From: Kelsey, John [mailto:[EMAIL PROTECTED] Sent: Monday, October 20, 2008 12:36 PM To: NT System Admin Issues Subject: SOHO Firewall / VPN Small office network (about a dozen computers) that needs a firewall / VPN solution. They currently have DSL for internet, but its just plugged in to a small LinkSys router. They want to be able to VPN in from the outside to run remote desktop. Doesn't have to be fancy-shmancy, just basic firewall for outbound control, and VPN for remote desktop. Would a Sonicwall be a good fit? If so, which model do y'all recommend? Thanks all! *** John C. Kelsey, MCSE DuBois Regional Medical Center *: 814.375.3073 * : 814.375.4005 *: [EMAIL PROTECTED]mailto:[EMAIL PROTECTED] *** ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: SOHO Firewall / VPN
Try a Fortigate 60b from fortinet (www.fortinet.com). Great SSL vpn, client based VPN, etc. Also the rules configuration are very sweet, and it has categoried filtering built in. Good stuff. From: Kelsey, John [mailto:[EMAIL PROTECTED] Sent: Monday, October 20, 2008 8:36 AM To: NT System Admin Issues Subject: SOHO Firewall / VPN Small office network (about a dozen computers) that needs a firewall / VPN solution. They currently have DSL for internet, but its just plugged in to a small LinkSys router. They want to be able to VPN in from the outside to run remote desktop. Doesn't have to be fancy-shmancy, just basic firewall for outbound control, and VPN for remote desktop. Would a Sonicwall be a good fit? If so, which model do y'all recommend? Thanks all! *** John C. Kelsey, MCSE DuBois Regional Medical Center (: 814.375.3073 2 : 814.375.4005 *: [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] *** For more information about Lewis and Roca LLP, please go to www.lewisandroca.com. Phoenix (602) 262-5311 Tucson (520) 622-2090 Las Vegas (702) 949-8200 Reno (775) 823-2900 Minden (775) 586-9500 Albuquerque (505) 764-5400 This message is intended only for the use of the individual or entity to which it is addressed. If the reader of this message is not the intended recipient, or the employee or agent responsible for delivering the message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this message is strictly prohibited. If you have received this communication in error, please notify us immediately by replying to the sender of this E-Mail by return E-Mail or by telephone. In accordance with Internal Revenue Service Circular 230, we advise you that if this email contains any tax advice, such tax advice was not intended or written to be used, and it cannot be used, by any taxpayer for the purpose of avoiding penalties that may be imposed on the taxpayer. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: SOHO Firewall / VPN
what's pricing for a 60b ? _ From: Stringham, Steven [mailto:[EMAIL PROTECTED] Sent: Monday, October 20, 2008 6:08 PM To: NT System Admin Issues Subject: RE: SOHO Firewall / VPN Try a Fortigate 60b from fortinet (www.fortinet.com). Great SSL vpn, client based VPN, etc. Also the rules configuration are very sweet, and it has categoried filtering built in. Good stuff. _ From: Kelsey, John [mailto:[EMAIL PROTECTED] Sent: Monday, October 20, 2008 8:36 AM To: NT System Admin Issues Subject: SOHO Firewall / VPN Small office network (about a dozen computers) that needs a firewall / VPN solution. They currently have DSL for internet, but its just plugged in to a small LinkSys router. They want to be able to VPN in from the outside to run remote desktop. Doesn't have to be fancy-shmancy, just basic firewall for outbound control, and VPN for remote desktop. Would a Sonicwall be a good fit? If so, which model do y'all recommend? Thanks all! *** John C. Kelsey, MCSE DuBois Regional Medical Center (: 814.375.3073 2 : 814.375.4005 *:mailto:[EMAIL PROTECTED] [EMAIL PROTECTED] *** For more information about Lewis and Roca LLP, please go to www.lewisandroca.com http://www.lewisandroca.com/ . Phoenix (602) 262-5311 Tucson (520) 622-2090 Las Vegas (702) 949-8200 Reno (775) 823-2900 Minden (775) 586-9500 Albuquerque (505) 764-5400 This message is intended only for the use of the individual or entity to which it is addressed. If the reader of this message is not the intended recipient, or the employee or agent responsible for delivering the message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this message is strictly prohibited. If you have received this communication in error, please notify us immediately by replying to the sender of this E-Mail by return E-Mail or by telephone. In accordance with Internal Revenue Service Circular 230, we advise you that if this email contains any tax advice, such tax advice was not intended or written to be used, and it cannot be used, by any taxpayer for the purpose of avoiding penalties that may be imposed on the taxpayer. No virus found in this incoming message. Checked by AVG - http://www.avg.com Version: 8.0.173 / Virus Database: 270.8.0/1726 - Release Date: 10/20/2008 7:25 AM ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: SOHO Firewall / VPN
I did a search on mnjtech.com (where I get them presently) without logging in (so general pricing). Bundled (with updates, web filtering, etc. for one year) - $794. FG-60B-BDL-US Unbundled (one year firmware updates, I think) $559 FG-60B-US Do your own research on pricing. I really can't give you the best you can get. From: Erik Goldoff [mailto:[EMAIL PROTECTED] Sent: Monday, October 20, 2008 3:21 PM To: NT System Admin Issues Subject: RE: SOHO Firewall / VPN what's pricing for a 60b ? From: Stringham, Steven [mailto:[EMAIL PROTECTED] Sent: Monday, October 20, 2008 6:08 PM To: NT System Admin Issues Subject: RE: SOHO Firewall / VPN Try a Fortigate 60b from fortinet (www.fortinet.com). Great SSL vpn, client based VPN, etc. Also the rules configuration are very sweet, and it has categoried filtering built in. Good stuff. From: Kelsey, John [mailto:[EMAIL PROTECTED] Sent: Monday, October 20, 2008 8:36 AM To: NT System Admin Issues Subject: SOHO Firewall / VPN Small office network (about a dozen computers) that needs a firewall / VPN solution. They currently have DSL for internet, but its just plugged in to a small LinkSys router. They want to be able to VPN in from the outside to run remote desktop. Doesn't have to be fancy-shmancy, just basic firewall for outbound control, and VPN for remote desktop. Would a Sonicwall be a good fit? If so, which model do y'all recommend? Thanks all! *** John C. Kelsey, MCSE DuBois Regional Medical Center (: 814.375.3073 2 : 814.375.4005 *: [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] *** For more information about Lewis and Roca LLP, please go to www.lewisandroca.com http://www.lewisandroca.com/ . Phoenix (602) 262-5311 Tucson (520) 622-2090 Las Vegas (702) 949-8200 Reno (775) 823-2900 Minden (775) 586-9500 Albuquerque (505) 764-5400 This message is intended only for the use of the individual or entity to which it is addressed. If the reader of this message is not the intended recipient, or the employee or agent responsible for delivering the message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this message is strictly prohibited. If you have received this communication in error, please notify us immediately by replying to the sender of this E-Mail by return E-Mail or by telephone. In accordance with Internal Revenue Service Circular 230, we advise you that if this email contains any tax advice, such tax advice was not intended or written to be used, and it cannot be used, by any taxpayer for the purpose of avoiding penalties that may be imposed on the taxpayer. No virus found in this incoming message. Checked by AVG - http://www.avg.com Version: 8.0.173 / Virus Database: 270.8.0/1726 - Release Date: 10/20/2008 7:25 AM ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: exploit tests on security suites
Your missing the point completely. It has nothing to do with AV telling you where you are vulnerable. It has everything to do with these solutions being marked to IT people as actually having the capability to prevent attacks against your systems. Most people these days are not simply buying the latest AV because it will protect them against executables that signatures exist for. People are buyin these new security suites because they are suppose to protect you from the attacks we all read about day in and day out. And the fact of the matter is that most of these suites do not merely miss a thing here or there but simply DO NOT DO ANYTHING in the way of preventing real world attacks. And if everyone is paying attention they will also have noticed that an increasing number of vulnerabilities are surfacing before a vendor has had a chance to create a patch and therefore patch management is useless in that sense. Security software vendors continue to release garbage that offers little in terms of real world protection for the exact reasons of responses like yours. I am not trying to be overly harsh but instead I am passionate and hate seeing time after time IT people being way off the mark in their understanding of these issues. Just as it was sad to see so many IT people screwed over into believing they had to buy anti-virus and anti-spyware even though the detection technology underneath is the same. Yet another sham and to many people, just as they do with Microsoft security, chalks it up to being the way things are. Let me put it another way in the form of a question... I can take anyone of the major security suites that exists right now and use 2+ year old, or 2+ week old vulnerabilities to compromise systems running the suites. Do you think that is right or that is snake oil? I don't think Secunia was cut out to ask or answer that question, however the problem remains. -Marc -Original Message- From: David Lum [mailto:[EMAIL PROTECTED] Sent: Monday, October 20, 2008 8:35 AM To: NT System Admin Issues Subject: RE: exploit tests on security suites Their point? Yeah, patch :-). It also says don't be so ignorant to think your AV will tell you where you're vulnerable, no different than expecting your patch management to tell you when you've got a virus. Until someone packages patch management with AV/Malware and probably even some kind of data encryption there won't be a single app to handle endpoint security. David Lum // SYSTEMS ENGINEER NORTHWEST EVALUATION ASSOCIATION (Desk) 971.222.1025 // (Cell) 503.267.9764 -Original Message- From: Marc Maiffret [mailto:[EMAIL PROTECTED] Sent: Saturday, October 18, 2008 3:25 PM To: NT System Admin Issues Subject: RE: exploit tests on security suites Secunia does sound like they could have done their testing better. However, they are trying to highlight something that is indeed a real problem for most every security suite, AV or otherwise. The fact is that the majority of the solutions people are using from McAfee to NOD32 (VIPRE maybe although I have not played with it yet) do absolutely nothing in the way of preventing systems from being compromised through the use of exploits that leveraging software vulnerabilities. All of these security suites are just better versions of each other in terms of trying to have better ways to more generically detect files that appear to be malicious. That however is not even nearly close to a complete defense against the attacks that organizations face today. Even suites such as McAfee and CSA that have added some level of vulnerability prevention simply fail to prevent anything. Secunia might have done their testing wrong, but their point is real and accurate. -Marc Maiffret -Original Message- From: Stu Sjouwerman [mailto:[EMAIL PROTECTED] Sent: Thursday, October 16, 2008 1:08 PM To: NT System Admin Issues Subject: RE: exploit tests on security suites Alex has some good observations in his Blog: http://sunbeltblog.blogspot.com/2008/10/another-useless-test-grabs- http://sunbeltblog.blogspot.com/2008/10/another-useless-test-grabs- headlines.html Warm regards, Stu From: René de Haas [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 15, 2008 12:11 PM To: NT System Admin Issues Subject: exploit tests on security suites Results are a little disappointing . http://computerworld.com/action/article.do?command=viewArticleBasicart http://computerworld.com/action/article.do?command=viewArticleBasicar t icleId=9117042intsrc=hm_list *** The information in this e-mail is confidential and intended solely for the individual or entity to whom it is addressed. If you have received this e-mail in error please notify the sender by return e-mail delete this e-mail and refrain from any disclosure or action based on
