SSL/TLS

Exchange smtp using port 465

I am running Exchange server 2003 I have a front end server that sits in my DMZ, and a back end server on my internal network. All incoming and outgoing mail is routed through my front end server. On the front end server I have two virtual smtp servers configured one the default that all outgoing...

AS400 SSL with Vista

Hello, When trying to download the certificate SSL in operation navigator to a PC using Vista it keeps on telling me the password is incorrect. This only happens in Vista PCs. Does any one know what I am missing?

Paranoid about protecting my MAC address--Please read my story

What is the easiest way to protect your MAC address against spoofing? In 2004 I was the victim of a hacker that somehow spoofed my Cable Modem Mac address and used it to cover his identity while serving copyright material thru the internet. I was unsuspecting until my ISP one day suspended my...

Selecting an area within security to start

Hi, I'm studying for an MSc in Information Security from Royal Holloway University of London, I have a B.Engg. degree in computers and a PG Diploma in Networking and Communication as well as the CCSA and CCNA. I'm also studying for the CISSP. Now, with all these qualifications, could you please...

Procedures for a new area.

We are a company where we have expirience on network remote administration and now we have open a new area, The area of security. Now I need to start to make new procedures like when a new customer come to us and ask if we can handle the security for his network... I need to know if some one can...

securing sensitive info ( SS number, credit card number, etc) on an on-line member application form

My client (a University Club) wants an on-line membership application form. Right now the form contains name, address, age, social security number, credit card number, and telephone number + a bunch of other information. The Club administrator is going to get the data and enter the information...

Limiting access to VPN users

Hi, I am using VPN concentrator 3500. Please let me know how to limit access to certain users that have a VPN account on the VPN Concentrator on certain server when they VPN in. Looking forward to hearing from you, With thanks and regards, Helal

Moving into the InfoSec role

I work at a company that currently does not have a position dedicated to information security. I come from a background in networking with a good portion of my focus on firewalls and other security related technologies. I am interested in positioning myself into the role of InfoSec Admin at my...

Blue Socket Gateway and Certificates

We are currently attempting to implement a Blue Socket Gateway in order to authenticate our wireless clients. I have been instructed by Blue Socket that the certificate used by them will not work through a NAT translation and that I should put this device on the outside of my ASA firewall. ...

How to prevent XSRF attacks

I've been hearing more about XSRF (cross-site request forgery) attacks. (Netflix most recently had to fix a flaw related to this.) I'm wondering how you can prevent this type of attack. Do Web application firewalls work?

security problem

Hello, I have small workgroup having 10 computers in my office. I do some personal work in office like using yahoo messenger, checking personal e-mails and some online banking site. But how does one of my senior knows it? I do everything lonely and securely so that nobody in the office knows it....

Dos attack

I have been receiving security alert messages from our firewall nearly everyday. e.g TCP Packet - Source:144.120.8.89,39341 Destination:192.168.1.1,25 - [DOS] TCP Packet - Source:210.7.0.36,3473 Destination:210.7.12.23,135 - [DOS] Thu, 2006-10-19 16:30:03 - UDP Packet -...

Web Server and DC to share database

From what I've read, it is "Best Practice" to keep your web server separate from your AD Domain Controller. What if they need to simultaneously share the database? My local users will be logging in to the AD locally and using an app that accesses a database. No problem. My remote users use a PHP...

FTP using *SSL

I am running v5r3 and am attempting to FTP to a Tumbleweed Securetransport server from our iSeries system using the command: FTP RMTSYS(xxxx) PORT(999) SECCNN(*SSL) I get the following response: Connecting to host xxxx at address xx.xxx.xxx.xx using port 999. ...

Running Syantec Antivirus on a Windows Domain Controller

I am currently in the process of deploying Symantec AntiVirus Corporate edition in my Windows-based network. In the manual it states, Do not install the primary management server on the following: Miscrosoft Exchange Server, Web server, or programs that prevent you from restarting the computer at...

Best practices involving admin rights for user on user system

We are currently in the middle of figuring out the approach we are going to take in regard to a user having admin rights on their system. Typcially we set up a new user as an administrator on their system when they are logged into the domain. They don't have a local admin account on the system,...

MS 2003 FTP server-2

Hi, I have several sites accessing applications to download them, like MS office or Antivirus Applications, from the main site. I would like to set up a MS 2003 FTP server in the main site and give authenticated access to remote sites accordingly. I would like to know if there is a way to limit the...

MS 2003 FTP server

Hi, I have several sites accessing applications to download them, like MS office or Antivirus Applications, from the main site. I would like to set up a MS 2003 FTP server in the main site and give authenticated access to remote sites accordingly. I would like to know if there is a way to limit the...

SECURE FTP SITE ON Windows 2003

We have a Windows 2003 IIS server setup behind our firewarll which is a PIX firewall. What is the best method to establish a secure FTP site on this IIS server? I have reviewed this topic on the internet and actually talked with somebody from IPSWITCH and the best method available is to purchase...

Can I call upon the username of someone logged into the pc, and use it in a web link?

Hi all, Basically, I've got a webpage I'm working on, and I'd like to be able to provide a link in that page, that will take a user into their home folder on the network. Since it'll be different for each user, but it uses their username as their home folder, I'm thinking there must be a way, to...