RE: OT: Guest network security

2013-02-07 Thread Ziots, Edward
I Love the wildfire piece, its amazing what I get from it. 125% recommend that you turn it on if you haven't. The sandboxing reports I get I review and then update my security controls accordingly. Its been a real eye opener for some here. Z Edward E. Ziots, CISSP, Security +, Network +

RE: OT: Guest network security

2013-02-07 Thread Ziots, Edward
Hell I'd vouche for the PA's for ya, because I have been working with them directly for about a year and done alot of lockdown based on the functionality that isn't in ASA's or other FW's I have worked with. Z Edward E. Ziots, CISSP, Security +, Network + Security Engineer Lifespan

RE: OT: Guest network security

2013-02-07 Thread Ziots, Edward
Adaptive out of Portsmouth NH is who we work with. All they do is PA…. Z Edward E. Ziots, CISSP, Security +, Network + Security Engineer Lifespan Organization ezi...@lifespan.org This electronic message and any attachments may be privileged and confidential and protected from disclosure. If

RE: OT: Guest network security

2013-02-07 Thread Ziots, Edward
I will be learning Fortinet soon enough since we got a bunch of them in as replacements for Juniper's. Z Edward E. Ziots, CISSP, Security +, Network + Security Engineer Lifespan Organization ezi...@lifespan.org This electronic message and any attachments may be privileged and confidential and

RE: OT: Guest network security

2013-02-07 Thread Ziots, Edward
Honestly, the complexity is not that much harder than regular firewall administration. I have been using Palo's for about 1 yr+ and self taught just reading the admin manuals and working with my traffic patterns during work and been able to inspect a lot of traffic and do a lot of lockdown and

RE: Wow. Just what we need

2013-02-07 Thread Ziots, Edward
Just what I was reading, use Ping with a Backtrack R3 machine, I am trying to find a way to see if I can send pings to entire subnets to see if stuff will drop... Z Edward E. Ziots, CISSP, Security +, Network + Security Engineer Lifespan Organization ezi...@lifespan.org This electronic

Re: OT: Guest network security

2013-02-07 Thread Kevin Lundy
Are you still using the free entry level version, or have you upgraded to the paid subscription yet? Thanks for the feedback. On Thursday, February 7, 2013, Ziots, Edward wrote: I Love the wildfire piece, its amazing what I get from it. 125% recommend that you turn it on if you haven’t. The

It gets worse UPNP root access exploit more info

2013-02-07 Thread Ziots, Edward
It gets worse, A few weeks ago, we have announced remote preauth root access exploit for Cisco Linksys (http://www.youtube.com/watch?v=cv-MbL7KFKE). Vulnerability details were disclosed here: http://www.defensecode.com/public/DefenseCode_Broadcom_Security_Advisory.pdf During further research,

Re: OT: blogging

2013-02-07 Thread Pete Howard
congrats James! From: James Rankin kz2...@googlemail.com To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Sent: Wednesday, February 6, 2013 5:13 PM Subject: OT: blogging It's exactly one year today since a thread on this list (and a few of

RE: OT: Guest network security

2013-02-07 Thread Ziots, Edward
Full Subscription... been using for last 3 months. Caught over 1000+ unique malware samples to include payloads and back-channels of what the malware will do and where it comes from. Z Edward E. Ziots, CISSP, Security +, Network + Security Engineer Lifespan Organization ezi...@lifespan.org

Re: Wow. Just what we need

2013-02-07 Thread Ben Scott
On Thu, Feb 7, 2013 at 8:58 AM, Ziots, Edward ezi...@lifespan.org wrote: ... use Ping with a Backtrack R3 machine, I am trying to find a way to see if I can send pings to entire subnets to see if stuff will drop... FYI, on most Linux systems, ping -b will send broadcast packets. So if you're

[OT] Future of wires (was: Guest network security)

2013-02-07 Thread Ben Scott
On Thu, Feb 7, 2013 at 1:21 AM, Kurt Buff kurt.b...@gmail.com wrote: Just as an aside - I think that wired end-point connectivity is going the way of the dodo, except for the most demanding loads ... I disagree. Aside from demanding loads: * Security - Right or wrong, a lot of big orgs

Re: OT: Guest network security

2013-02-07 Thread Andrew S. Baker
LOL It looks pretty good, but I need some more stuff. This will be helpful for me with smaller clients, though. Rich! *ASB **http://XeeMe.com/AndrewBaker* http://xeeme.com/AndrewBaker* **Providing Virtual CIO Services (IT Operations Information Security) for the SMB market…*** On

Re: OT: Guest network security

2013-02-07 Thread Andrew S. Baker
They bought Astaro a few years back... *ASB **http://XeeMe.com/AndrewBaker* http://xeeme.com/AndrewBaker* **Providing Virtual CIO Services (IT Operations Information Security) for the SMB market…*** On Thu, Feb 7, 2013 at 1:21 AM, Kurt Buff kurt.b...@gmail.com wrote: I didn't know

RE: Wow. Just what we need

2013-02-07 Thread Steven M. Caesare
Great read, and indeed an interesting compliment to Wireshark... good stuff thanks Kurt. -sc -Original Message- From: Kurt Buff [mailto:kurt.b...@gmail.com] Sent: Wednesday, February 6, 2013 8:24 PM To: NT System Admin Issues Subject: Wow. Just what we need A limited threat, but

Re: [OT] Future of wires (was: Guest network security)

2013-02-07 Thread Matthew W. Ross
+1 Wired networking is dead! Long live wired networking. --Matt Ross Ephrata School District - Original Message - From: Ben Scott [mailto:mailvor...@gmail.com] To: NT System Admin Issues [mailto:ntsysadmin@lyris.sunbelt-software.com] Sent: Thu, 07 Feb 2013 07:28:41 -0800 Subject: [OT]

Re: Registry entries to set a WSUS client

2013-02-07 Thread Michael Leone
On Wed, Feb 6, 2013 at 12:51 PM, Andrew S. Baker asbz...@gmail.com wrote: Yes, it still does work if you change the registry manually, but having a separate OU for testing (like everyone else is saying) is the best path. Yes, you're right. So I did this - set up a test OU, and a test GPO,

RE: Registry entries to set a WSUS client

2013-02-07 Thread Webster
Do you have this update? http://blogs.technet.com/b/sus/archive/2012/09/04/an-update-for-windows-server-update-services-3-0-service-pack-2-is-available-kb2734608.aspx Thanks Webster -Original Message- From: Michael Leone [mailto:oozerd...@gmail.com] Sent: Thursday, February 07,

RE: Registry entries to set a WSUS client

2013-02-07 Thread Kennedy, Jim
First and foremost I suggested that before Andrew did. He just copied off me. http://support.microsoft.com/kb/2734608 Then reregister the server. Also that update needs to be on your console machine if that is how you are doing it. Andrew is going to copy, I just know it. -Original

Re: Wow. Just what we need

2013-02-07 Thread Andrew S. Baker
Yes, thanks. This was an awesome read. *ASB **http://XeeMe.com/AndrewBaker* http://xeeme.com/AndrewBaker* **Providing Virtual CIO Services (IT Operations Information Security) for the SMB market…*** On Thu, Feb 7, 2013 at 11:30 AM, Steven M. Caesare scaes...@caesare.comwrote: Great

Re: Registry entries to set a WSUS client

2013-02-07 Thread Michael Leone
On Thu, Feb 7, 2013 at 12:16 PM, Webster webs...@carlwebster.com wrote: Do you have this update? http://blogs.technet.com/b/sus/archive/2012/09/04/an-update-for-windows-server-update-services-3-0-service-pack-2-is-available-kb2734608.aspx I don't see that on my list of WSUS updates, that my

Re: Registry entries to set a WSUS client

2013-02-07 Thread Michael Leone
On Thu, Feb 7, 2013 at 12:17 PM, Kennedy, Jim kennedy...@elyriaschools.org wrote: First and foremost I suggested that before Andrew did. He just copied off me. True. Thanks, first and foremost! :-) http://support.microsoft.com/kb/2734608 Then reregister the server. Also that update needs to

Re: Fortigate (was Guest network security)

2013-02-07 Thread Andrew S. Baker
I will, as soon as I finish setting this device up today. :) *ASB **http://XeeMe.com/AndrewBaker* http://xeeme.com/AndrewBaker* **Providing Virtual CIO Services (IT Operations Information Security) for the SMB market…*** On Thu, Feb 7, 2013 at 12:26 PM, Sam Cayze sca...@gmail.com wrote:

Re: Registry entries to set a WSUS client

2013-02-07 Thread Andrew S. Baker
LOL. Hey, I did give anonymous attributions. :) *ASB **http://XeeMe.com/AndrewBaker* http://xeeme.com/AndrewBaker* **Providing Virtual CIO Services (IT Operations Information Security) for the SMB market…*** On Thu, Feb 7, 2013 at 12:17 PM, Kennedy, Jim

RE: Microsoft Direct Access?

2013-02-07 Thread John Cook
Some ISPs still don't support IPv6, a client may connect fine in one location and the fail at another one. We've seen It take as long as 5 minutes to sync up once someone has logged into the computer. Note that our implementation is via a UAG device, YMMV. John W. Cook Network Operations

Re: Exchange Server 2013: Not quite ready for the data center - Computerworld

2013-02-07 Thread Kurt Buff
It's not hard to guess, when the article is mostly based on what MBS said... Kurt On Thu, Feb 7, 2013 at 9:51 AM, Andrew S. Baker asbz...@gmail.com wrote: Hey, MBS What's your take on this article?I haven't touched Exchange 2013 as yet...

Re: Microsoft Direct Access?

2013-02-07 Thread Kurt Buff
On Thu, Feb 7, 2013 at 10:28 AM, Jeremiah Rumball jdrumb...@gmail.com wrote: Hi all, We are looking into Direct Access as a possible solution for one of our clients. Do any of you have some real world experience with it? Are there any pitfalls to watch out for? Thanks! From an earlier note

RE: Exchange Server 2013: Not quite ready for the data center - Computerworld

2013-02-07 Thread Michael B. Smith
I think that article has made the Exchange team very mad at me. Apparently, not such a big deal when the MVPs blog it and it gets put into Redmond magazine or WindowsIT Pro magazine - but hitting ComputerWorld has caused a lot of angst. From: Andrew S. Baker [mailto:asbz...@gmail.com] Sent:

Re: Exchange Server 2013: Not quite ready for the data center - Computerworld

2013-02-07 Thread Kurt Buff
But it's good for you, right? I mean, how many CW readers have now heard your name (as an Authority!), where they hadn't before... Should be interesting to monitor the comments on that blog post now, I'm guessing... Kurt On Thu, Feb 7, 2013 at 11:46 AM, Michael B. Smith mich...@smithcons.com

RE: Exchange Server 2013: Not quite ready for the data center - Computerworld

2013-02-07 Thread Webster
Troublemaker! Is that why you went out of the country before the article hit? Thanks Webster From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Thursday, February 07, 2013 1:46 PM To: NT System Admin Issues Subject: RE: Exchange Server 2013: Not quite ready for the data center -

Re: Exchange Server 2013: Not quite ready for the data center - Computerworld

2013-02-07 Thread Patrick Salmon
They'll get over it. If you're not afraid to say it when the emperor has no clothes then you become a mouthpiece for the machine. Much of the credibility and value of the MVP role comes from NOT being the mouthpiece. IMNSHO. On Thu, Feb 7, 2013 at 2:49 PM, Kurt Buff kurt.b...@gmail.com wrote:

RE: Exchange Server 2013: Not quite ready for the data center - Computerworld

2013-02-07 Thread Michael B. Smith
I'm definitely not a mouthpiece. :) I think it'll be fine. But I won't be surprised if I don't get re-awarded this june! From: Patrick Salmon [mailto:psal...@gmail.com] Sent: Thursday, February 7, 2013 3:00 PM To: NT System Admin Issues Subject: Re: Exchange Server 2013: Not quite ready for the

RE: Exchange Server 2013: Not quite ready for the data center - Computerworld

2013-02-07 Thread Guyer, Don
Reading that just reaffirms our decision to go from 2k7 to 2k10 and not 2k13. Regards, Don Guyer Catholic Health East - Information Technology Enterprise Directory Messaging Services 3805 West Chester Pike, Suite 100, Newtown Square, Pa 19073 email: dgu...@che.orgmailto:dgu...@che.org Office:

Re: Exchange Server 2013: Not quite ready for the data center - Computerworld

2013-02-07 Thread Kurt Buff
H If you don't, perhaps we should start a campaign... Kurt On Thu, Feb 7, 2013 at 12:11 PM, Michael B. Smith mich...@smithcons.com wrote: I’m definitely not a mouthpiece. J I think it’ll be fine. But I won’t be surprised if I don’t get re-awarded this june! From: Patrick

RE: Exchange Server 2013: Not quite ready for the data center - Computerworld

2013-02-07 Thread Michael B. Smith
What? You didn't read my initial post on January 6? I'm insulted! :) From: Guyer, Don [mailto:dgu...@che.org] Sent: Thursday, February 7, 2013 3:18 PM To: NT System Admin Issues Subject: RE: Exchange Server 2013: Not quite ready for the data center - Computerworld Reading that just reaffirms

RE: Exchange Server 2013: Not quite ready for the data center - Computerworld

2013-02-07 Thread Miller Bonnie L .
Oh, he probably will get awarded when he answers all of my Exchange 2013 questions come Spring XO The decision has been made and we're heading down that road. We're still on E2k7 on an old box. Were looking at E2k10 when 13 was announced. At this point, when the updates come out for

RE: Exchange Server 2013: Not quite ready for the data center - Computerworld

2013-02-07 Thread Guyer, Don
LOL I said reaffirms not affirms... : ) Regards, Don Guyer Catholic Health East - Information Technology Enterprise Directory Messaging Services 3805 West Chester Pike, Suite 100, Newtown Square, Pa 19073 email: dgu...@che.orgmailto:dgu...@che.org Office: 610.550.3595 | Cell: 610.955.6528 |

Domain upgrade: 2008 R2 or 2012 ?

2013-02-07 Thread Christopher Bodnar
Has anyone done this evaluation recently? We are a 2003 R2 shop. We were in the process of planning a migration to a 2008 R2 domain last year (hardware was bought and deployed), when the funds got cut. From what I hear, we will have funding and approval this year for the project. So the

RE: Domain upgrade: 2008 R2 or 2012 ?

2013-02-07 Thread Brian Desmond
I would go straight to WS2012. From an AD perspective, you can take advantage of new features like virtualization safeties, group managed service accounts, and dynamic access control. Thanks, Brian Desmond br...@briandesmond.commailto:br...@briandesmond.com w - 312.625.1438 | c - 312.731.3132

RE: Domain upgrade: 2008 R2 or 2012 ?

2013-02-07 Thread Webster
+1, plus you will be ready for the next version of Citrix stuff set to be released on *%%#%$!)*#%@$^$ (oops looks like my NDA filter garbled that date!). Thanks Webster From: Brian Desmond [mailto:br...@briandesmond.com] Sent: Thursday, February 07, 2013 3:43 PM To: NT System Admin Issues

Highly recommended - I have a paper copy

2013-02-07 Thread Kurt Buff
-- Forwarded message -- From: InfoSec News ale...@infosecnews.org Date: Wed, Feb 6, 2013 at 11:41 PM Subject: [ISN] Security Engineering -- The Book - For Free! To: i...@infosecnews.org http://www.cl.cam.ac.uk/~rja14/book.html Security Engineering -- The Book ‘I'm incredibly

RE: Exchange Server 2013: Not quite ready for the data center - Computerworld

2013-02-07 Thread Michael B. Smith
There are some mitigations coming Real Soon Now. :) -Original Message- From: Miller Bonnie L. [mailto:mille...@mukilteo.wednet.edu] Sent: Thursday, February 7, 2013 4:05 PM To: NT System Admin Issues Subject: RE: Exchange Server 2013: Not quite ready for the data center - Computerworld

Re: Passsword Meter

2013-02-07 Thread S Powell
it says that mine, qwerty123 is not very good... odd that... or what a great way to collect passwords... - Sub ubi semper ubi On Thu, Feb 7, 2013 at 2:56 PM, Crawford, Scott crawfo...@evangel.edu wrote: If you don't mind typing your password into a web form, this is a pretty

RE: Passsword Meter

2013-02-07 Thread Crawford, Scott
Yeah, I'm not too crazy about it, but its not like you put a username in to match. -Original Message- From: S Powell [mailto:powe...@gmail.com] Sent: Thursday, February 7, 2013 5:22 PM To: NT System Admin Issues Subject: Re: Passsword Meter it says that mine, qwerty123 is not very

Re: Exchange Server 2013: Not quite ready for the data center - Computerworld

2013-02-07 Thread Steven Peck
We're in a gray area ourselves. We have Exchange 2007 and have an Exchange 2010 infrastructure built but are having issues with the F5 load balancers which have devolved into a fight about costs so we're stalled. At this rate the service packs may come out before we move more then test users. If

Re: Domain upgrade: 2008 R2 or 2012 ?

2013-02-07 Thread Andrew S. Baker
Seconded. *ASB **http://XeeMe.com/AndrewBaker* http://xeeme.com/AndrewBaker* **Providing Virtual CIO Services (IT Operations Information Security) for the SMB market…*** On Thu, Feb 7, 2013 at 4:43 PM, Brian Desmond br...@briandesmond.comwrote: *I would go straight to WS2012.* * *

Re: Highly recommended - I have a paper copy

2013-02-07 Thread Andrew S. Baker
Thanks! *ASB **http://XeeMe.com/AndrewBaker* http://xeeme.com/AndrewBaker* **Providing Virtual CIO Services (IT Operations Information Security) for the SMB market…*** On Thu, Feb 7, 2013 at 5:20 PM, Kurt Buff kurt.b...@gmail.com wrote: -- Forwarded message -- From:

RE: Domain upgrade: 2008 R2 or 2012 ?

2013-02-07 Thread Webster
Copycat! :) Thanks Webster From: Andrew S. Baker [mailto:asbz...@gmail.com] Subject: Re: Domain upgrade: 2008 R2 or 2012 ? Seconded. ASB http://XeeMe.com/AndrewBakerhttp://xeeme.com/AndrewBaker Providing Virtual CIO Services (IT Operations Information Security) for the SMB market...

Re: Passsword Meter

2013-02-07 Thread Andrew S. Baker
It's not like they won't grab IP info... Plus, are you *sure* your browser is not giving away username info? *ASB **http://XeeMe.com/AndrewBaker* http://xeeme.com/AndrewBaker* **Providing Virtual CIO Services (IT Operations Information Security) for the SMB market…*** On Thu, Feb 7,

Re: Domain upgrade: 2008 R2 or 2012 ?

2013-02-07 Thread Andrew S. Baker
Why should I waste words to concur with the right answer? :) *ASB **http://XeeMe.com/AndrewBaker* http://xeeme.com/AndrewBaker* **Providing Virtual CIO Services (IT Operations Information Security) for the SMB market…*** On Thu, Feb 7, 2013 at 6:57 PM, Webster webs...@carlwebster.com

RE: Passsword Meter

2013-02-07 Thread Webster
I use Internet Exploder and trust Microsoft to have a safe and secure browser that affords me plenty of security on the Internet. What more do I need? Thanks Webster From: Andrew S. Baker [mailto:asbz...@gmail.com] Subject: Re: Passsword Meter It's not like they won't grab IP info... Plus,

RE: Exchange Server 2013: Not quite ready for the data center - Computerworld

2013-02-07 Thread Michael B. Smith
Tsk tsk tsk From: Andrew S. Baker [mailto:asbz...@gmail.com] Sent: Thursday, February 7, 2013 7:38 PM To: NT System Admin Issues Subject: Re: Exchange Server 2013: Not quite ready for the data center - Computerworld Funny thing is, I remember him posting that article, and I bookmarked it, but I

RE: Passsword Meter

2013-02-07 Thread Crawford, Scott
True. Like I said, I'm not real crazy about it, but it is a nice interface and could be useful to some. From: Andrew S. Baker [mailto:asbz...@gmail.com] Sent: Thursday, February 7, 2013 6:37 PM To: NT System Admin Issues Subject: Re: Passsword Meter It's not like they won't grab IP info...

Re: Passsword Meter

2013-02-07 Thread Kurt Buff
And I believe every word you say, too. Kurt On Thu, Feb 7, 2013 at 4:45 PM, Webster webs...@carlwebster.com wrote: I use Internet Exploder and trust Microsoft to have a safe and secure browser that affords me plenty of security on the Internet. What more do I need? Thanks Webster

RE: Bad Kaspersky update?

2013-02-07 Thread Eldridge, D K,
Absolutely this week. They acknowledge to my team after a lengthy wait on their Q. Glad I'm in class to observe from remote. :) d From: Greg Olson [mailto:gol...@markettools.com] Sent: Thursday, February 07, 2013 6:21 PM To: NT System Admin Issues Subject: Bad Kaspersky update? Anyone else see

RE: Domain upgrade: 2008 R2 or 2012 ?

2013-02-07 Thread Ken Schaefer
Are you doing a technical evaluation or a business case? From a technical PoV, I think the posts already have this covered: there are some incremental enhancements and no real downsides (platform is stable, covered in your EA etc.) From a broader perspective, is your project going to have to