Security - We will get there

I found conflict between Foudnstone and Shavlik when Foundstone reported missing patch while Shavlik reported patch installed. The bad news is you have no clue how Foundstone determines that so I had to call the support. Fourtunately the support is quite helpful and here is the signature they are looking for:

Here are the risks presented by IM: 1. Viruses and worms over IM.     It provide new spreading path and faster than traditional path. 2. Identity theft/authentication spoofing     Identify of public IM users is not controlled by corporate security measures. 3. Firewall tunnelling:     IM software are designed to bypass firewall/proxy controls. But if you are not limiting employee's Internet usage by firewall control, this won't apply.

Risk matrix

1. Some fine tune examples:

From http://storagemojo.com/?page_id=415   StorageMojo.com Is Not A Dealer or Reseller. Please Do Not Request Bids. Please read the Price List intro (click on Price List above) to understand these numbers and their limitations. Please comment if this list isn’t meeting your needs. Updated about every 6 months. Let me know if there is something you are interested in that isn’t on the list. You can comment or email.

The dot1qTpFdbTable (mib-2.17.7.1.2.2) contains the information regarding the MAC addresses learned the switch. The dot1qTpFdbPort OID (mib-2.17.7.1.2.2.1.2) lists the bridge address table. When you walk this OID, the values returned represent the MAC addresses in decimal form. You need to convert the last 6 decimal values to hex to get the MAC address. The INTEGER value is the port number on which the address was learned.

I tried this on both Dell powerconnect 3448 and 5324. They both works as for example:

This is from http://www.linuxquestions.org/questions/showthread.php?t=45261 and this local copy is for my convenience. Security references

IDS and IPS application tips Links:

• Snortcenter original homepage
• Snortcenter v2 at sf.net
• http://www.securityfocus.com/ids
• http://midas-nms.sourceforge.net/

ntop

tips tricks