telnet, ssh, and vpn fail on completely open pix
We are setting up a pix internally in our net. The network behind it is a private range but we aren't doing NAT. The outside address is public and we want external users to VPN to it to reach the private net. My management station is outside of the firewall and I can manage the pix with HTTPS...
We are setting up a pix internally in our net. The network behind it is a private range but we aren't doing NAT. The outside address is public and we want external users to VPN to it to reach the private net. My management station is outside of the firewall and I can manage the pix with HTTPS...
0 pts.
Best practices involving admin rights for user on user system
We are currently in the middle of figuring out the approach we are going to take in regard to a user having admin rights on their system. Typcially we set up a new user as an administrator on their system when they are logged into the domain. They don't have a local admin account on the system,...
We are currently in the middle of figuring out the approach we are going to take in regard to a user having admin rights on their system. Typcially we set up a new user as an administrator on their system when they are logged into the domain. They don't have a local admin account on the system,...
Sub-lease to include non-Domain members
The CEO of my company has asked me to look into some options for accomodating a request by a Non-profit to rent some of our unused office space. For the sake of this question, we have a single floor office and all cubes and offices are wired for voice and data and punched down in a server room on...
The CEO of my company has asked me to look into some options for accomodating a request by a Non-profit to rent some of our unused office space. For the sake of this question, we have a single floor office and all cubes and offices are wired for voice and data and punched down in a server room on...
Monitoring the Network
Hi, I have multiple remote sites. I would like to monitor the network and analyze the traffic and its performance in general. For example, how the bandwidth is consumed, if certain activities are unnecessary and how to improve the networks performance by blocking through the firewall like...
Hi, I have multiple remote sites. I would like to monitor the network and analyze the traffic and its performance in general. For example, how the bandwidth is consumed, if certain activities are unnecessary and how to improve the networks performance by blocking through the firewall like...
VPN & CISCO 2610 setup
Hello Sir/Madam, I cannot access our VPN from the internet outside our organization. I am using Cisco 2610 Router with IOS v12.3. And i created the access-list for the inbound and outbound connections. I have mentioned the access-list below and also i mapped a static IP address with the VPN...
Hello Sir/Madam, I cannot access our VPN from the internet outside our organization. I am using Cisco 2610 Router with IOS v12.3. And i created the access-list for the inbound and outbound connections. I have mentioned the access-list below and also i mapped a static IP address with the VPN...
SECURE FTP SITE ON Windows 2003
We have a Windows 2003 IIS server setup behind our firewarll which is a PIX firewall. What is the best method to establish a secure FTP site on this IIS server? I have reviewed this topic on the internet and actually talked with somebody from IPSWITCH and the best method available is to purchase...
We have a Windows 2003 IIS server setup behind our firewarll which is a PIX firewall. What is the best method to establish a secure FTP site on this IIS server? I have reviewed this topic on the internet and actually talked with somebody from IPSWITCH and the best method available is to purchase...
terminal server and gpo
i have a server 2003 that configure as a terminal server, and i want implement a strict acess to this server from client (xp pro) to that server, i create ou that called "for terminal users" and create for that ou a gpo, now,, i want to know how should i change the gpo to achive the next goals: 1....
i have a server 2003 that configure as a terminal server, and i want implement a strict acess to this server from client (xp pro) to that server, i create ou that called "for terminal users" and create for that ou a gpo, now,, i want to know how should i change the gpo to achive the next goals: 1....
SonicWall TZ170 std VPN SBS 2003
I can establish an VPN connection to my TZ170, but can't access my SBS2003 server (can't ping). My Sonicwall global VPN client ip 192.168.168.x TZ170 ip 192.168.168.x my external nic on server 192.168.168.x my internal nic on server 192.168.1.x The external nic is plugged into TZ170 and...
I can establish an VPN connection to my TZ170, but can't access my SBS2003 server (can't ping). My Sonicwall global VPN client ip 192.168.168.x TZ170 ip 192.168.168.x my external nic on server 192.168.168.x my internal nic on server 192.168.1.x The external nic is plugged into TZ170 and...
Installation and updates
Howdy folks, Tryin to keep things going around here....need some advice. I have Win2003 servers and Active Directory.....single domain....approx. 100 client computers.....one location. Am upgrading all computers from Office XP to Office 2003. My project: Install Office 2003 and all updates...
Howdy folks, Tryin to keep things going around here....need some advice. I have Win2003 servers and Active Directory.....single domain....approx. 100 client computers.....one location. Am upgrading all computers from Office XP to Office 2003. My project: Install Office 2003 and all updates...
Network Connection Freezes
For some reason, at random, among 20 PCs on my network, in the morning or during the day, the network connection stops responding for both intranet and internet communications. The only solution thus far is to remove the NIC from the Device Manager, reboot the PC, and let Windows XP Pro find the...
For some reason, at random, among 20 PCs on my network, in the morning or during the day, the network connection stops responding for both intranet and internet communications. The only solution thus far is to remove the NIC from the Device Manager, reboot the PC, and let Windows XP Pro find the...
Tracking the computer or source of an email
system: Ex 2003 back-end cluster, Ex 2003 Network Load Balanced Front end. Hi there, A user's account has become comprimised. They have since changed their password, but there are a few mails sent from their account that they did not send. Is it possible to find out the source ie PC hostname or...
system: Ex 2003 back-end cluster, Ex 2003 Network Load Balanced Front end. Hi there, A user's account has become comprimised. They have since changed their password, but there are a few mails sent from their account that they did not send. Is it possible to find out the source ie PC hostname or...
Change Telnet port in Linux (Debian)
Hello everybody. I'm not a Linux expert, and am looking for a way to securely communicate with a Linux machine via Telnet. To avoid sending user and pwd without encryption I'm going to open a ssh tunnel (with putty or plink) forwarding port 22 (ssh) on the linux machine to another port, in which...
Hello everybody. I'm not a Linux expert, and am looking for a way to securely communicate with a Linux machine via Telnet. To avoid sending user and pwd without encryption I'm going to open a ssh tunnel (with putty or plink) forwarding port 22 (ssh) on the linux machine to another port, in which...
Passwords
Hi all, What do you recommend for initial password issue, that is, provided a new user with a password for the first time without compromising it. I find the entire help desk giving password initially or sysadmins doing that is not save enough even though the user will be prompted to change it at...
Hi all, What do you recommend for initial password issue, that is, provided a new user with a password for the first time without compromising it. I find the entire help desk giving password initially or sysadmins doing that is not save enough even though the user will be prompted to change it at...
Port 1894
Hi, Our port scanner has detected '1894' as an open port. We know 1894 is an 'O2Server' port. Could you please throw some light on the port '1894'? Thanks kbs
Hi, Our port scanner has detected '1894' as an open port. We know 1894 is an 'O2Server' port. Could you please throw some light on the port '1894'? Thanks kbs
Laptop Security...
Hi, I am the head of my department and by the nature of the job I hold some confidential information on my laptop. How do I ensure that 1. Nobody can access any files on my laptop from the LAN or the internet (not even sys admins) 2. If somebody tries to access, can I find out /trace who it is or...
Hi, I am the head of my department and by the nature of the job I hold some confidential information on my laptop. How do I ensure that 1. Nobody can access any files on my laptop from the LAN or the internet (not even sys admins) 2. If somebody tries to access, can I find out /trace who it is or...
runnunig application from the web....
Hi, I have an application server that is in my network and is a stand alone server,and I have ISA server 2004 in my domain with an valid IP address. Which access rule I should add to Isa that some external users can running application from the interner by typing our valid ip addressApplication...
Hi, I have an application server that is in my network and is a stand alone server,and I have ISA server 2004 in my domain with an valid IP address. Which access rule I should add to Isa that some external users can running application from the interner by typing our valid ip addressApplication...
Opinions about firewalls and VPN
I currently have watchguard firewalls and IPSec tunnels between them and the other watchguard firewalls. We also have remote users VPN into the firewall for access to our network. Our firewalls are fine but we haven't been that happy with the support over the last 5 or so years. We are joining...
I currently have watchguard firewalls and IPSec tunnels between them and the other watchguard firewalls. We also have remote users VPN into the firewall for access to our network. Our firewalls are fine but we haven't been that happy with the support over the last 5 or so years. We are joining...
How to Block Chat in the Network
Dear All, I am wrting this mail to you all, to know if any you have been successfull in Blocking Chats on your networks, and if so, then how have you acheived it? Could you please tell me which Ports to Block for MSN, Yahoo, Rediff, ICQ, Skype. I am using a NetAPPs Net Cache C 1300, and I am...
Dear All, I am wrting this mail to you all, to know if any you have been successfull in Blocking Chats on your networks, and if so, then how have you acheived it? Could you please tell me which Ports to Block for MSN, Yahoo, Rediff, ICQ, Skype. I am using a NetAPPs Net Cache C 1300, and I am...
Local LAN Vulnerabilities and Open Ports NAT
QUESTION: How someone would go about exploiting a vulnerability within a LAN sitting behind a router running NAT/NAPT...where would you start? Hacking the open port? Routing Tables? Accessing remote administration on the modem? (disable NAT)?? bah... MY SYSTEM/SETUP: I have 1 XP SP2 Machine...
QUESTION: How someone would go about exploiting a vulnerability within a LAN sitting behind a router running NAT/NAPT...where would you start? Hacking the open port? Routing Tables? Accessing remote administration on the modem? (disable NAT)?? bah... MY SYSTEM/SETUP: I have 1 XP SP2 Machine...
Network Printing over VPN
Hello, I am currently having an issue printing to network printers over our new site-to-site VPN tunnels. We have two remote networks with a couple HP network printers and the AS/400 cannot connect to them. I also cannot ping computers on the remote networks but all the computers can connect to...
Hello, I am currently having an issue printing to network printers over our new site-to-site VPN tunnels. We have two remote networks with a couple HP network printers and the AS/400 cannot connect to them. I also cannot ping computers on the remote networks but all the computers can connect to...
