Blocking rewriteable drives across entire network
How can I block CDRW/DVDRW and USB drives from being used in our Windows XP machines across the entire network?

Answer Question   |  October 14, 2011  7:37 PM
Network security, Network Security Management, Network Security Policies, USB port security, USB security, Windows XP

How Many Information Security Policies Do I Need?
I need some advice from other security experts. I was recently hired to work for a small company where our data and infrastructure is at a managed hosting facility. The hosting service has a SAS 70 that is regularly audited.  My company in the past relied – almost solely – on the managed service security [...]

Answer Question   |  January 5, 2011  3:49 AM
ISO 17799, Network security, Network Security Policies, SAS 70, SAS 70 Type II audit compliance, Security Program Management

Scanning Active Directory for weak passwords
Is it possible to scan our active directory and see if people have weak passwords? We have upped the password policy but what about for users that already have passwords and are not scheduled to changed them yet?

Answer Question   |  December 29, 2010  9:06 PM
Active Directory, Active Directory security, Network security, Network Security Management, Network Security Policies, Password Complexity, Password policies

Open IT Forum: How much of your sensitive information can you trust to outside organizations?
What is your limit for how much of your information security program you outsource to contractors? Is it better to develop information security expertise solely in your employees or is it acceptable to outsource to an external expert? Hiring security service providers and contractors to manage portions of your enterprise information security program (incident response, [...]

Answer Question   |  January 4, 2011  9:21 PM
Network security, Network Security Management, Network Security Policies, Open IT Forum, Outsourcing, Outsourcing services

Application data security versus network security
What are the pros and cons of application data security versus network security? Which do you recommend devoting more budget funds to?

Answer Question   |  December 29, 2010  9:13 PM
Application security, Data Security Program, Network security, Network Security Management, Network Security Policies

Should I disable macros on a network-wide basis?
Just wondering if it is generally a policy to disable macros from Word, etc. Is there a safe macros list or should they all be disabled? How would I go about doing this across the network?

Answer Question   |  December 15, 2010  2:26 PM
Macros, Network Policies, Network security, Network Security Management, Network Security Policies

Open IT Forum: How do you raise awareness for security compliance in the enterprise?
We’ve gotten your opinions on network security from the hardware and software side, but now we want to know what you’re doing for compliance. From what your compliance policies are to the creative ways you raise awareness about those policies, share your stories and you might get 100 knowledge points in time for the final [...]

Answer Question   |  December 17, 2010  5:48 PM
Compliance, compliance management, Network security, Network Security Management, Network Security Policies, Open IT Forum, Security compliance

Corporate laptop security/encryption
Please can anyone offer any guidance or know what are the best products in the market place for encrypting/securing corporate laptops, preferably the solution should include hard disk wiping.

Answer Question   |  December 14, 2010  4:49 PM
Encryption, Encryption Software, Hard disks, hard drive wiping, Laptop Security, Network security, Network Security Management, Network Security Policies

Open IT Forum: What are your suggestions for server hardening?
Do you have a checklist or a favorite set of server hardening tools in your arsenal? Share with us what you think are the most important considerations when creating a server security baseline. Be sure to include what hardware and software you’re using! Helpful suggestions and innovative ideas will you earn you a whopping 100 [...]

Answer Question   |  December 13, 2010  3:27 PM
Network security, Network Security Management, Network Security Policies, Open IT Forum, Server Hardware, Server Security

Encryption software for corporate laptops
Is there free encryption software for our corporate laptops? Does it offer remote wiping capabilities?

Answer Question   |  May 22, 2011  2:45 PM
Encryption, Encryption Software, Network security, Network Security Policies, Remote access, Security, Security management

Preventing command prompt access except by domain admin
Can we prevent command prompt access on all servers except for when run by a domain administrator?

Answer Question   |  December 7, 2010  3:05 PM
command prompt, Command Prompt window, Domain Administration, Domain Administrator, Network security, Network Security Management, Network Security Policies

Blocking remote connections to other computer from our network
How can we block users from any remote connections to other computers from our office or laptops? We want to block logmein, remote desktop etc for our windows 7 machines.

Answer Question   |  December 3, 2010  9:38 PM
LogMeIn, Network security, Network Security Management, Network Security Policies, Remote connection, Windows 7, Windows 7 security

Scanning for up-to-date antivirus before connecting to network
Can we prevent computers that do not have up to date antivirus definitions or no antivirus at all from connecting to the network or Internet? We are using Mcafee 871 with an EPO server. Can this be done?

Answer Question   |  September 12, 2010  8:21 PM
McAfee, Network Security Management, Network Security Policies, Networking, Security in 2010

Blocking Active Sync from our network
Can we block activesync from being used on the network? Desktops are running Windows XP SP3 and we do not want contacts and data transferred to users personal devices for secrecy reasons.

Answer Question   |  September 11, 2010  2:43 PM
ActiveSync, ActiveSync Policy, Data Transfer Function, Network security, Network Security Management, Network Security Policies, Security in 2010, Windows XP SP3

Blocking spyware and inappropriate sites
Can we monitor and filter our wireless network? Are there free tools for this? We want to block porn and spyware sites.

Answer Question   |  September 21, 2011  2:32 PM
Network Security Management, Network Security Policies, Wireless in 2010, Wireless networking, Wireless security

Blocking instant messaging on Windows Server 2003 machines
I need to block instant messenger on all networked machines. Can this be done in a Windows Server 2003 environments? Is there a step by step guide out there?

Answer Question   |  August 20, 2010  8:45 PM
Instant Messaging, Network Security Policies, Windows Server 2003, Windows Server 2003 Group Policy, Windows Server 2003 security

Blocking USB drives or any removable media on Active Directory network
Can I block the use of USB drives or flash drives or any removable media on our active directory network across the board. We are using group policy but I do not know how to configure it.

Answer Question   |  November 14, 2011  1:51 PM
Active Directory, Active Directory security, Network security, Network Security Policies, USB devices, USB drive, USB security, Wireless in 2010

Checking when PIX/ASA rules were accessed on a PIX 515e
I’m a recent hire, and now I’ve been asked to clean up our PIX/ASA rules. Aside from the show access-list, is there a command  that can help me determine the last time the rule was accessed? Any other tips when cleaning up rule clutter?

Answer Question   |  December 4, 2010  5:56 PM
ASA/PIX, Cisco Configuration, Network Security Policies, Networking in 2010, PIX 515E

L2 versus L3 on your WAN
We are running Comcast Fiber between sites.  I was wondering what the best practice is for using Layer 2 or Layer 3 across the link.  We current use both.  Are there security reasons for doing one versus the other?  Also interested in hearing general thoughts on it.

Answer Question   |  February 20, 2010  6:53 PM
L2 Switches, L3 Switches, Layer 2, Layer 3, Network Security Policies, Networking security, WAN, Wide Area Networks

Educating your users on security policies
What measures do you/your organization take to educate employees on network security policies? Do you include this information in new hire training? Do you hold special training? Does your include any unique or particular provisions?

Answer Question   |  November 25, 2009  7:37 PM
Network security, Network Security Management, Network Security Policies, Open IT Forum, Security policies, Security training