Risk management Questions


Recommendations on protecting a Microsoft 2003 server with Lotus Domino 6.5
I need advice on where I can find information on how to secure a Domino web server on the internet. We are running on a Windows 2003 server. Is there a checklist or script I can work through to lock down my Domino configurations? Is there some way to know what I can uninstall or [...]

Answer Question   |  October 31, 2005  10:45 PM
Application security, Compliance, CRM, Database, Desktops, Disaster Recovery, Encryption, Exchange, Firewalls, Forensics, Incident response, Instant Messaging, Intrusion management, Lotus Domino, Management, Microsoft Windows, Network security, OS, Policies, Risk management, Secure Coding, Security, Security Program Management, Servers, SQL Server, VPN, Wireless
asked by:
0 pts.

asked by:
0 pts.

asked by:
0 pts.

user password auditing
We have recently purchased LC5 to perform password audits to discover weak passwords. The documentation indicates to use PWDUMP3 to extract password hashes from the Active Directory. I have looked everywhere and cannot find a legitimate site to download this tool nor can I find documentation. Has anyone ever used this tool that can shed [...]

Answer Question   |  October 19, 2005  7:35 AM
Access control, Application security, backdoors, Biometrics, Browsers, Compliance, configuration, CRM, Current threats, Database, Digital certificates, Disaster Recovery, Encryption, Exchange, filtering, Firewalls, Forensics, Hacking, human factors, Identity & Access Management, Incident response, Instant Messaging, Intrusion management, Network security, patching, PEN testing, Platform Security, Policies, provisioning, Risk management, Secure Coding, Security, Security Program Management, Security tokens, Servers, Single sign-on, Spyware, SSL/TLS, Trojans, Viruses, VPN, vulnerability management, Web security, Wireless, worms
asked by:
0 pts.

Denying Internet Access to User on Network
I have a PC on our network that has more than one user. I know how to deny access to the PC itself, but I would like one user be able to access our network, but not the internet. The other user to access both. The server is running Win2003SBS, the PC is running WinXP. [...]

Answer Question   |  October 20, 2005  2:23 PM
Access control, Biometrics, Browsers, Compliance, CRM, DataCenter, Desktop management applications, Desktops, Digital certificates, Disaster Recovery, filtering, Firewalls, Forensics, Identity & Access Management, Incident response, Intrusion management, Management, Microsoft Systems Management Server, Microsoft Windows, Network security, Networking, OS, Policies, provisioning, Risk management, Security, Security Program Management, Security tokens, Servers, Single sign-on, SQL Server, SSL/TLS, Systems management software, VPN, Web security, Wireless
asked by:
0 pts.

Windows 2000 Active Directory customizer
I am working on a Windows 2000 Active Directory and am trying to achieve the following: 1. Users are not allowed to logon to more than 1 PC 2. The PCs must autoshutdown after some idle time, even during logoff 3. Keep track of each user’s login duration 4. All logon accounts should be disabled [...]

Answer Question   |  October 10, 2005  8:34 AM
Active Directory, Application security, Compliance, CRM, Database, Desktop management applications, Development, DHCP, Disaster Recovery, DNS, Encryption, Exchange, Firewalls, Forensics, Incident response, Instant Messaging, Intrusion management, Microsoft Windows, Network applications management, Network management software, Network monitoring, Network security, Networking, Networking services, Novell NDS, Policies, Risk management, Secure Coding, Security Program Management, VPN, Wireless
asked by:
0 pts.

ECPI college…good or bad-2
Good Evening: I’ve recently completed 8 years in the US Navy and I’m looking to complete my degree and I see a lot of talk about ECPI college. It’s a technical college but it’s a 2-year degree. I’m looking to get into computer network design, internet security and computer science and I’m wondering if ECPI [...]

Answer Question   |  September 27, 2005  4:23 PM
Access control, Application security, backdoors, Biometrics, Browsers, Cabling, Career development, Certifications, Compliance, configuration, CRM, Current threats, Data analysis, Data warehousing applications, Database, DataCenter, Dell, Desktop management applications, Desktops, Development, DHCP, Digital certificates, Disaster Recovery, Distribution/logistics applications, DNS, E-business, Ecommerce applications, Encryption, Exchange, filtering, Firewalls, Forensics, Hacking, Hardware, Hubs, human factors, IBM, Identity & Access Management, Incident response, Instant Messaging, Intrusion management, IT careers, Looking for a job, Lotus Domino, Management, Microsoft Office, Microsoft Windows, Mobile, Network management software, Network monitoring, Network protocols, Network security, Network testing, Networking, Networking services, Online transaction processing, OS, Patch management, patching, PEN testing, Platform Security, Policies, provisioning, Risk management, Routers, Sales force automation applications, Secure Coding, Security, Security Program Management, Security tokens, Servers, Single sign-on, Software, Spyware, SQL Server, SSL/TLS, Switches, Systems management software, Tech support, Training, Trojans, Viruses, VPN, vulnerability management, Web security, Web services, Web site design & management, Wireless, worms
asked by:
0 pts.

ECPI college…good or bad
Good Evening: I’ve recently completed 8 years in the US Navy and I’m looking to complete my degree and I see a lot of talk about ECPI college. It’s a technical college but it’s a 2-year degree. I’m looking to get into computer network design and computer science and I’m wondering if ECPI or any [...]

Answer Question   |  October 4, 2005  4:22 PM
Access control, Application security, backdoors, Biometrics, Browsers, Cabling, Career development, Certifications, Compliance, configuration, CRM, Current threats, Data analysis, Data warehousing applications, Database, DataCenter, Dell, Desktop management applications, Desktops, Development, DHCP, Digital certificates, Disaster Recovery, Distribution/logistics applications, DNS, E-business, Ecommerce applications, Encryption, Exchange, filtering, Firewalls, Forensics, Hacking, Hardware, Hubs, human factors, IBM, Identity & Access Management, Incident response, Instant Messaging, Intrusion management, IT careers, Looking for a job, Lotus Domino, Management, Microsoft Office, Microsoft Windows, Mobile, Network management software, Network monitoring, Network protocols, Network security, Network testing, Networking, Networking services, Online transaction processing, OS, Patch management, patching, PEN testing, Platform Security, Policies, provisioning, Risk management, Routers, Sales force automation applications, Secure Coding, Security, Security Program Management, Security tokens, Servers, Single sign-on, Software, Spyware, SQL Server, SSL/TLS, Switches, Systems management software, Tech support, Training, Trojans, Viruses, VPN, vulnerability management, Web security, Web services, Web site design & management, Wireless, worms
asked by:
0 pts.

Pix Firewall and Proxy Server
I need to allow only one IP address (the one for proxy server) to browse through Pix firewall to Internet. What will be the commands in PIX firewall to block the traffic to Internet from all the network 10.2.1.x but only allow 10.2.1.10 (Proxy server). All other computers will use proxy server address to use [...]

Answer Question   |  September 25, 2005  1:49 PM
Access control, Application security, backdoors, Biometrics, Browsers, Compliance, configuration, CRM, Current threats, Database, Digital certificates, Disaster Recovery, Encryption, Exchange, filtering, Firewalls, Forensics, Hacking, human factors, Identity & Access Management, Incident response, Instant Messaging, Intrusion management, Network security, Networking, patching, PEN testing, Platform Security, Policies, provisioning, Risk management, Secure Coding, Security, Security Program Management, Security tokens, Servers, Single sign-on, Spyware, SSL/TLS, Tech support, Trojans, Viruses, VPN, vulnerability management, Web security, Wireless, worms
asked by:
0 pts.

Prefferred Anti Virus Program?
Hi All, Can i get any suggestions on what you consider being the BEST Anti virus software with not much hassles! The 2 i`m most interested in is Norton and Mcafee? Any 3rd party app will also be greatly appreciated! I had Norton 2005 Internet Security on my PC,1.7GHZ AMD,Win XP SP2, 384MG RAM and [...]

Answer Question   |  October 14, 2005  6:10 AM
Access control, Application security, Automated, Availability, backdoors, Bandwidth, Billing and customer care, Billing Support Systems, Biometrics, Browsers, Career development, Compliance, configuration, CRM, Current threats, Data analysis, Data warehousing applications, Database, DataCenter, Desktop management applications, Development, Digital certificates, Disaster Recovery, Ecommerce applications, Encryption, ERP, Exchange, filtering, Firewalls, Forensics, Functional, Geographic information systems applications, Hacking, HEAT, Help Desk, human factors, Identity & Access Management, Incident response, Instant Messaging, Intrusion management, Lifecycle development, Manufacturing applications, McAfee, Microsoft Windows, Network security, Networking, patching, PEN testing, Performance/Load, Platform Security, Policies, provisioning, Risk management, Routers, Secure Coding, Security, Security Program Management, Security tokens, Servers, Single sign-on, Software, Software testing, Software testing tools, Spyware, SSL/TLS, Symantec, Systems management software, Tech support, Trojans, Viruses, VoIP, VPN, vulnerability management, Web, Web security, Wireless, worms
asked by:
0 pts.

Need Help – Netscreen 25 with Fortigate 60.
Hi All. Good Morning & Greetings of the season. I recently joined this company as a Network Security Specialist & the 1st task that i got assigned to myself was this. We have 3 locations – A (India) – Indian Operations B (California) – US Operations C (Datacenter) – Web & Media Servers My network [...]

Answer Question   |  October 27, 2005  10:05 AM
Access control, Application security, backdoors, Biometrics, Browsers, Cabling, Compliance, configuration, CRM, Current threats, Database, Digital certificates, Disaster Recovery, Encryption, Exchange, filtering, Firewalls, Forensics, Hacking, Hardware, Hubs, human factors, Identity & Access Management, Incident response, Instant Messaging, Intrusion management, Juniper Networks, Network security, patching, PEN testing, Platform Security, Policies, provisioning, Risk management, Routers, Secure Coding, Security, Security Program Management, Security tokens, Servers, Single sign-on, Spyware, SSL/TLS, Switches, Trojans, Viruses, VPN, vulnerability management, Web security, Wireless, worms
asked by:
0 pts.

Windows 2000 Server logs
Hi All, Basically i want to monitor all the activities of my administrators. Is there any way I can find out all the activities on a Windows 2000 Server eg:- success / failure logs ,which users had logged on to a server , user creation time ,service stopped at what time, what scripts have been [...]

Answer Question   |  September 16, 2005  6:17 AM
Access control, Application security, backdoors, Biometrics, Browsers, Compliance, configuration, CRM, Current threats, Database, DataCenter, Digital certificates, Disaster Recovery, Encryption, Exchange, filtering, Firewalls, Forensics, Hacking, human factors, Identity & Access Management, Incident response, Instant Messaging, Intrusion management, Network security, patching, PEN testing, Platform Security, Policies, provisioning, Risk management, Secure Coding, Security, Security Program Management, Security tokens, Servers, Single sign-on, Spyware, SSL/TLS, Trojans, Viruses, VPN, vulnerability management, Web security, Wireless, worms
asked by:
0 pts.

IT Security
Hi all, Thanks to all those who answered to my question”FTP sites” Can anyone of you let me know about the available products that we can use for our organisations IT security..Also let me know what products are available to find out vulnerabilities in a network. Appreciate your response. Thanks Tarang

Answer Question   |  August 27, 2005  6:03 AM
Access, Access control, Application security, backdoors, Biometrics, Browsers, Certifications, Compliance, configuration, CRM, Current threats, Database, Desktops, Digital certificates, Disaster Recovery, E-business, Encryption, Exchange, filtering, Firewalls, Forensics, Hacking, human factors, Identity & Access Management, Incident response, Instant Messaging, Intrusion management, Management, Microsoft Office, Microsoft Windows, Network security, Networking, OS, patching, PEN testing, Platform Security, Policies, provisioning, Risk management, Secure Coding, Security, Security Program Management, Security tokens, Servers, Single sign-on, Spyware, SQL Server, SSL/TLS, Trojans, Viruses, VPN, vulnerability management, Web security, Wireless, worms
asked by:
0 pts.

Local Admin & passwords
We have recently switched to allowing only Power User rights on notebook computers. We have a set of notebooks we loan out to employees with desktops when they need to travel. Currently those users will login with an account named loaner and use scripts and webmail to access the network. Discussion has come up recently [...]

Answer Question   |  August 19, 2005  3:52 PM
Application security, Biometrics, Compliance, configuration, CRM, Database, Digital certificates, Disaster Recovery, Encryption, Exchange, Firewalls, Forensics, Identity & Access Management, Incident response, Instant Messaging, Intrusion management, Network security, patching, PEN testing, Platform Security, Policies, provisioning, Risk management, Secure Coding, Security, Security Program Management, Security tokens, Single sign-on, VPN, vulnerability management, Wireless
asked by:
0 pts.

asked by:
0 pts.

asked by:
0 pts.

OWA using SelfSSL and Certificate Services removal
Hey there… I am curretly running Exchange 2003 on W2k3 member server. I installed Certificate Services and produced my own certificate and all works well with OWA. I recently found out that SelfSSL is available but not quite as robust, which would probably be good. I removed Cert services and was getting ready to install [...]

Answer Question   |  August 5, 2005  12:41 PM
Application security, Certificates, Compliance, configuration, CRM, Database, Desktop security, Disaster Recovery, Encryption, Exchange, Exchange 2003, Instant Messaging, Internet Security Systems, Managed security services, Outlook, Outlook Mobile Access, patching, PEN testing, Platform Security, Policies, Risk management, Secure Coding, Security, Security management, Security products, Security Program Management, vulnerability management
asked by:
0 pts.

module moves on i5
I wanted to check on a possible solution for a problem we have run into with our module moves. Cause of audit requirements we can’t have pgmr’s in the productions systems. So as a work around I have them creating their code in sourclib on the test partition then I have operations copying it into [...]

Answer Question   |  August 3, 2005  10:40 AM
Application security, Auditing, Compliance, CRM, Database, Development, Disaster Recovery, Encryption, Exchange, Instant Messaging, Networking, Policies, Risk management, Secure Coding, Security Program Management, Tech support
asked by:
0 pts.

Block IE or Internet access with group policy
Is there any way to block Internet access with group policy? I am setting permissions for some of the machines locally to only allow certain users access to the IE executable, but that is a pain in the butt. I have: Win2k3 single domain with 2 DC’s approx 50 XP Pro workstations. I’m guessing this [...]

Answer Question   |  April 18, 2013  9:25 AM
Compliance, CRM, DataCenter, Disaster Recovery, Microsoft Windows, Networking, Policies, Risk management, Security, Security Program Management
asked by:
0 pts.

Fortinet All in One Security Appliance
Hi, Anyone familiar with Fortinet Aplliance? They claim to be leading vendore providing Firewall, IPS , Intrusion detection, VPN etc. solution in one single unit at low cost. Although our security engineer is pushing for the proiduct but i have many reservation about the integraity and fear of unknown issues that may be presented in [...]

Answer Question   |  August 24, 2005  9:24 AM
backdoors, Compliance, CRM, Current threats, Disaster Recovery, Hacking, human factors, Intrusion management, Networking, Policies, Risk management, Security, Security Program Management, Spyware, Trojans, Viruses, worms
asked by:
0 pts.