Fortinet All in One Security Appliance
Hi, Anyone familiar with Fortinet Aplliance? They claim to be leading vendore providing Firewall, IPS , Intrusion detection, VPN etc. solution in one single unit at low cost. Although our security engineer is pushing for the proiduct but i have many reservation about the integraity and fear of unknown issues that may be presented in [...]

Answer Question   |  August 24, 2005  9:24 AM
backdoors, Compliance, CRM, Current threats, Disaster Recovery, Hacking, human factors, Intrusion management, Networking, Policies, Risk management, Security, Security Program Management, Spyware, Trojans, Viruses, worms

Detection of ActiveX & other Mobile code
Hi ! I am trying to extend the functionality of a squid-based proxy to filter out ActiveX, JavaScripts and mobile code in general, from the web pages users will download. I am trying to make it an “intelligent” filter, in the sense of not just plainly removing the <OBJECT> tags from the page, but to [...]

Answer Question   |  July 28, 2005  6:27 AM
ActiveX, C, Development, Exchange, Firewalls, Forensics, Incident response, Intrusion management, Java, JavaScript, Network security, Policies, Security management, VPN, Wireless

Cisco 1811/1812 vs Netscreen 5GTE
Hello all, Did any of you have/had any experience with both Cisco 1811/1812 and Netscreen 5GT(E)? Which one is better/faster/has more features/more user friendly according to you? What I need is a router/firewall/IPS appliance that will allow me to set up some DMZ and two LANs and that will serve as a VPN end point [...]

Answer Question   |  July 26, 2005  3:13 AM
Cisco, Firewalls, Forensics, Incident response, Intrusion management, Juniper Networks, NetScreen, Network security, Networking, Product evaluation, Routers, Security, Security products, VPN, Wireless

Accessing MS Exchange Server on DMZ zone of Cisco Pix 515E as local server
Hi, We currently have a MS Small Business Server 2000 (of which Exchange Server is a part) configured on the LAN behind a firewall and use POP3 Connector of MS Exchange to retrieve external mails. Our users connect to the MS Exchange Server within the LAN without requiring to connect to the Internet. The question [...]

Answer Question   |  September 6, 2005  3:48 AM
Firewalls, Forensics, Incident response, Intrusion management, Network security, VPN, Wireless

IM Blocking and URL Filtering
We have Pix515E which is gateway to Internet. We also got IWSS Proxy(Trend Micro) along with URL filtering module. Domain users get directed to IWSS proxy (GPO settings) and restrictions about URL filterings can be imposed as per company’s policy. Those users who are not on the domain, they can not get GPO settings and [...]

Answer Question   |  July 7, 2005  3:18 AM
Administration, Application security, Architecture/Design, Availability, Benchmarking, Biometrics, Cisco, Database, DataCenter, Digital certificates, Documentation, Encryption, Exchange, Features/Functionality, Firewalls, Forensics, Host-based IDS/IPS, Identity & Access Management, IDS/IPS management, Incident response, Installation, Instant Messaging, Internet Security Systems, Intrusion management, Managed security services, Microsoft Windows, Network monitoring, Network security, Network testing, Networking, Protocol analysis, provisioning, Routers, Secure Coding, Security, Security tokens, Service and support, Service contracts, Service evaluation, Single sign-on, TCP, VPN, Vulnerability Assessment & Audit, Wireless, Yahoo

Certificates
I am pretty new to the 2003 Microsoft world, but I am NT 4 MCSE. My setup: 2 W2K3 DC’s 1 Exchange 2K3 member server 1 W2K3 member server–web server about 60 users–single domain some of my users want to use Outlook Web Access to get their mail from home (approx. 10-15) Everything is set [...]

Answer Question   |  July 5, 2005  11:45 AM
Compliance, CRM, DataCenter, Disaster Recovery, Information risk management, Intrusion management, Policies, Risk management, Security, Security management, Security Program Management, VPN, Vulnerability Assessment & Audit

shdocpv.dll – virus – hijack problem
Hi, I’m sorry if I had chosen the wrong recipient. I am running Windows 2000. When I open my browser (IE 6.0) I get this: res://shdocpv.dll/blank.htm Or res://C:WinntSystem32shdocpv.dllsecurity.htm Please help me to get rid of this. Thanks!

Answer Question   |  May 9, 2013  6:23 PM
backdoors, Current threats, Hacking, human factors, Intrusion management, Servers, Spyware, Trojans, Viruses, Windows 2000 Server, worms

Demilitarized zone using iptables?
Hi, I’m the Assistant Editor for SearchEnterpriseLinux.com. One of our users, “ruhi,” posted the following question. Can you help? “I have to plan and design a demilitarized zone using iptables. How can I do this?” You can post your answer here on ITKE, or reply to mailto:editor@searchenterpriselinux.com?subject=iptables Thanks! Amy Kucharik Assistant Editor, SearchEnterpriseLinux.com TechTarget 117 [...]

Answer Question   |  June 16, 2005  5:00 PM
Administration, Architecture/Design, Features/Functionality, Firewalls, Forensics, Incident response, Installation, Intrusion management, Management, Network security, Product/service procurement, Security, Security management, Security products, Signature updating/Management, VPN, Wireless

Consolidated Security Product/Approach? What about layered approach?
Hi Punnet, I’m a It Director at lasrge Media firm in NY. Looking at the security overhaul in the recent months and business looking to cxonsolidate the offices enviornment the talk of the town is to have ALL IN One device which does Firewall,IDS,VPN etc. I thought layerd security approach was the way to go [...]

Answer Question   |  June 20, 2005  10:36 AM
Administration, Architecture/Design, Cabling, Cisco, DataCenter, Desktop vs network-based firewalls, Firewalls, Forensics, Hardware, Hubs, Incident response, Information risk management, Intrusion management, IT architecture, Network security, Networking, Nortel, Product evaluation, Routers, Security, Security management, Security products, Switches, VPN, Wireless

Sendig Mail to user@IP
We have two Mx Record (same ISP) pointing to the same mail server. The Mail Server is REDHAT Linux. I want to send a mail to user@ip address (first or second Mx Record). This is basically to test if first Mx record fails, will the second record be used. I would be sending this mail [...]

Answer Question   |  June 13, 2005  11:29 PM
Biometrics, DHCP, Digital certificates, DNS, E-mail applications, Exchange, Firewalls, Forensics, Identity & Access Management, Implementation/Management, Incident response, Intrusion management, Linux, Linux Distributions, Network security, Network testing, Networking, Networking services, Performance management, Protocol analysis, provisioning, Red Hat Enterprise Server, Red Hat Fedora, Security, Security tokens, Sendmail, Servers, Single sign-on, Tech support, VPN, Wireless

DFs+policy restriction
How do I prevent software download using group polocies Do i use software restriction and window installer policy Also, can i use dfs and a script that map network drives for my clients on logon togetter

Answer Question   |  June 10, 2005  1:13 PM
Active Directory, DHCP, DNS, Intrusion management, Networking, Networking services, Security

problem with exchange sync and pocket pc 2003
i have a HP iPAQ hx4700 with Pocket PC 2003 on it that connect to the internet through my phone cellolar (with bluethooth connection), i want to sync all my contact and my calender on my ipaq to my exchange small buisness server 2003 through the internet,my server connect to the internet and are behind [...]

Answer Question   |  May 25, 2005  1:57 PM
802.11 networking equipment, Auditing, Biometrics, BlackBerry, Corporate Financial Applications, DataManagement, Digital certificates, ERP, Exchange, Firewalls, Forensics, Handheld devices, Help Desk, Identity & Access Management, Imanage, Implementation, Incident response, Intrusion management, IT architecture, Network applications management, Network management software, Network monitoring, Network security, Network testing, Networking, Outsourcing, Palm OS, Planning, Protocol analysis, provisioning, Remote management, RFID, Security, Security management, Security products, Security tokens, Single sign-on, Symbian, Tech support, Third-party services, Vendor support, VPN, Windows Mobile, Wireless, Wireless Access Points, Wireless PC cards, Wireless standards

ping from outside
hi, could you please tell me which command in cisco routers prevent them from being ping from outside networks. and also how can i prevent terminals inside a network to ping outside ips(group policies etc??). thanks

Answer Question   |  May 17, 2005  12:51 AM
Application security, Biometrics, Compliance, CRM, Database, DataCenter, Digital certificates, Disaster Recovery, Encryption, Ethernet, Exchange, Hardware, Identity & Access Management, Incident response, Instant Messaging, Intrusion management, IPv4, Network Interface Cards, Network Management Systems, Network testing, Networking, Networking Equipment, Policies, provisioning, QoS, Risk management, Routers, Secure Coding, Security, Security Program Management, Security tokens, Servers, Single sign-on, TCP, Tech support, Vulnerability Assessment & Audit

Desktop firewalls: Windows XP vs 3rd party
For those with more experience with Windows XP, what do you think of the native personal firewall software? We recently upgraded a remote user to Windows XP from Windows 2000 Pro (actually, he got a new laptop). He connects to the Internet over DSL and we installed a free ZoneLabs firewall when he was running [...]

Answer Question   |  May 17, 2005  7:09 PM
Desktop vs network-based firewalls, Firewalls, Forensics, Incident response, Intrusion management, Microsoft Windows, Network security, VPN, Windows XP, Wireless

Data vs. perimeter vs. network security
A short time ago, author Wes Noonan wrote some tips for SearchWindowsSecurity.com about <a href=http://searchwindowssecurity.techtarget.com/originalContent/0,289142,sid45_gci1007026,00.html>deperimeterization</a>. He explained how security is always pitted against business needs, and perimeters have become porous because businesses require traffic from SMTP, HTTP or VPNs to pass through the firewall. He then offered techniques for keeping data safe in spite of [...]

Answer Question   |  May 4, 2005  4:36 PM
Administration, Application security, Architecture/Design, backdoors, Biometrics, Compliance, configuration, CRM, Current threats, Database, Desktop vs network-based firewalls, Digital certificates, Disaster Recovery, Documentation, Encryption, Exchange, Features/Functionality, Firewalls, Forensics, Hacking, Host-based IDS/IPS, human factors, Identity & Access Management, IDS vs IPS, IDS/IPS management, Incident response, Installation, Instant Messaging, Intrusion management, Managed security services, Management, Network security, Network-based IDS/IPS, Networking, Outsourcing/Managed services, patching, PEN testing, Platform Security, Policies, Product evaluation, provisioning, Risk management, Secure Coding, Security, Security management, Security products, Security Program Management, Security tokens, Service and support, Signature updating/Management, Single sign-on, Software vs appliance, Spyware, Trojans, Viruses, VPN, Vulnerability Assessment & Audit, vulnerability management, Wireless, worms

Stuck with WEP – will increasing key lengths help harden WLAN?
I have potential security issues on my wireless LAN because my equipment is older and I can?t use WPA. I’m worried that my data is vulnerable. If I increase my WEP key length from 40 to 128 or greater, will this help?

Answer Question   |  May 4, 2005  7:15 AM
Biometrics, Compliance, CRM, Digital certificates, Disaster Recovery, Identity & Access Management, Intrusion management, Policies, provisioning, Risk management, Security Program Management, Security tokens, Single sign-on

iSeries IP adress restruction
Hi, is there a way to restrict access to iSeries by IP address? I need to configure something on iSeries to prevent one PC to access on our iSeries and think that best way is to restrict IP address of this PC. Please help.

Answer Question   |  June 2, 2005  4:19 AM
AS/400, DataCenter, Intrusion management, Managed security services, Security, Tech support

PIX VPN DHCP Relay not relaying DHCP packets
Hi, I’ve setup a VPN across 2 PIX506e’s using primarily the PDM software. IT is a very basic setup using PDM. I also needed DHCP relay to relay from clients on pix B to pixA and then the dhcp server. So I add in the DHCP relay server address on pixB and point to the [...]

Answer Question   |  May 5, 2005  12:13 PM
Administration, Architecture/Design, Cisco, DHCP, DNS, Firewalls, Forensics, Incident response, Installation, Intrusion management, Management, Network security, Networking, Networking Equipment, Networking services, Routers, Security, Service and support, VPN, Wireless

Is Windows security an afterthought?
As the editor of SearchWindowsSecurity.com, I often speak with users about their Windows security responsibilities. One senior systems analyst in particular sent me an interesting note recently… To give you some background, he’s in charge of configuring and administering desktop systems (primarily Win2000 and XP)for a large company, and he developed many of the security [...]

Answer Question   |  April 21, 2005  3:00 PM
Administration, Application security, Architecture/Design, backdoors, Biometrics, Compliance, configuration, CRM, Current threats, Database, Digital certificates, Disaster Recovery, Documentation, Encryption, Exchange, Features/Functionality, Firewalls, Forensics, Hacking, human factors, Identity & Access Management, IDS/IPS management, Incident response, Installation, Instant Messaging, Intrusion management, Managed security services, Management, Network security, patching, PEN testing, Platform Security, Policies, Product evaluation, Product/Service evaluation, provisioning, Remote users, Risk management, Secure Coding, Security, Security management, Security products, Security Program Management, Security tokens, Service and support, Signature updating/Management, Single sign-on, Spam, Spyware, Trojans, Viruses, VPN, Vulnerability Assessment & Audit, vulnerability management, Wireless, worms

Segmenting the LAN for Security purposes
The worm Mspn32 came in on one machine behind the firewall and spread over e-mail or network to other departments. Could I isolate a worm once it’s inside by dividing up my LAN into departments or sections with either departmental firewalls or managed switches and VLANS? Anyone doing this, experience with either, recommended hardware or [...]

Answer Question   |  April 20, 2005  5:40 PM
Firewalls, Forensics, Incident response, Intrusion management, Network security, VPN, Wireless