Risk Management

User Auditing/Journaling

I'm new to security on the AS/400 (730). We need to have a record of what program a user calls through our ERP system or what objects are changed and who changed them. I've read some on journaling but not sure if that will work for what we need. Suggestions? Thanks Mark

Would you use temporary / generic user accounts? How do u deal with this regarding compliance

We have remote offices that have one generic domain account. One of them has it because they have people filling in. Sometime we have temporary employee's and they request temporary accounts. Since we went public, now we need to be compliant with SOX policies. Regarding this, do you think this...

Penetration Testing Career

Hi Friends I want an advice from you guys. I have work exp in Web Developement and Quality Assurance. But my interest lies in security and penetration testing. Could you guys guide me where to start from. If there is any good material which can help me doing the same or some site where I can...

Virus scanning the iSeries IFS

Do you know of any products that will allow me to scan my IFS for viruses? If so, are you using the product(s) and are you satisfied with their performance? THANKS! for your help.

Fixing violation errors found with CHKOBJITG

I have just begun running the command to check object itegrity on my system. I have encountered 2 basic errors - BADSIG & ALTERED. Can you please explain how I now correct these errors? The objects are basic IBM supplied code (i.e. ADDTCPLNK in QTCP library). I have no idea how these objects...

In VPN Which protocol to be used......??

Hiiiii everybody..... I am Bala new member of this group I have got one small querry regarding VPN, in my organization i am trying to implement VPN for the remote access, in the bangalore office i wanted to install concentrator Cisco 3015 and in the bombay and pune office i wanted to configure VPN...

Symantec Resources

Our company has just partnered with Symantec and being new to their products, I'm finding myself a bit overwhelmed. Are there any websites that offer mailing lists or online forums that can help with some of the issues I'm running into? This seems like an interesting concept for user-to-user...

Looking for good HIP.

Hi, I am looking for a good Host-based Intrusion Prevention System to be implemented on Intel Servers in my Company. Is there anything you would recommend...?

User profile / Paswwords

We need to check to see which users have they passwords EQ to they user profiles ID's. Would we use IBM API's QSYRUPWD and QSYCUPWD for this process? Thanks

need an outsourced managed security vendor

Looking at a managed security service provider that can help with GLBA regulatory requirements

Group Policy Management

Has anyone looked into Group Policy Management products (outisde of the functionality provided by Microsoft's Active Directory)? I'm trying to choose a product, and wanted to compare based on what current users thought (rather than what the sales departments tell me). The products I've been able...

AOL Spammer IP Identification

Concerning the ever increasing amount of received spam, to battle this I have a program with which I can extract the IP address from the sender for reporting purposes, however, I have been receiving an increasing amount from AOL proxy server for which I cannot aquire the senders IP address. Is...

SPAM

I am running Exchange 2003 and Win2k3 servers. we get a ton of spam, and I want to stop it. What in your opinion are the best SPAM softwares and why? (such as strong points and weak points) let's hear it....

layer 2 & layer 3 switch

Hi All, what is the basic difference between layer 2 & layer 3 switch. how can configure layer 2 & layer3 managable switch

Uninstallation of norton wmi update

respected recipient, I am currently having a trouble in uninstalling norton anti virus wmi update. My company got norton anti virus software installed on the system from the norton anti virus software cd and it was not norton system works , just the norton anti virus software.After somedays, it...

Company policies on protecting personal data

I'd like to know what policies other companies have in place to protect personal data of employees, customers, etc.(data such as Social Security numbers, credit card numbers and the like) For example, is encryption required for transfer outside the company? How about inside the company? It is...

Seeking SAP SEM configuration help

Recently, Manish, a SearchSAP.com user, sent in the following question on SAP SEM. <p> "Apart from standard SAP help, does anyone know of a SEM-BCS step-wise configuration guide? <p> Is there anything I can order online? I want to start on SEM-BCS as soon as possible." <p> Do...

Penetration Testing.

Hi!! Good Morning. I have a simple question for you today. I intend to have a penetration testing done for all of my 3 sites - My US Office, My India Office & My US Datacenter. Can you suggest any trustworthy site which can offer me a free reliable scan? Also, I would like to have you...

Recommendations on protecting a Microsoft 2003 server with Lotus Domino 6.5

I need advice on where I can find information on how to secure a Domino web server on the internet. We are running on a Windows 2003 server. Is there a checklist or script I can work through to lock down my Domino configurations? Is there some way to know what I can uninstall or remove from the...

Windows 2000 / 2003 Server Log Management

Hi All, I am an IT Security Administrator of my company. i need to audit more than 100 Windows servers for systems logs, event logs , anti virus server logs almost every month. I am looking out for automated tools that can help me make my work easier. A product with a good reporting tool will be...