Recent content by Woodie

W
Any IT Security professionals out there?

IME...college/education is not a significant factor in hiring for Security. Experience, and good judgement (that thing you get from bad experiences) are more significant. I'm a security pro. Been doing it for ~9 years, one of a staff of about 18, doing Info Sys Security for a large publicly...
- Woodie
- Post #51
- Oct 23, 2007
- Forum: Security
W
Information Security procedure * UPDATED

At my work (corporate)...suspension and probably dismissal. At the hospital where I used to work? Probably nothing, and pray they didn't get sued. IMHO, immediate suspension, followed by termination after review of the events. Then the union would fight it, and she'd probably get her job...
- Woodie
- Post #6
- Sep 21, 2007
- Forum: Security
W
Corporate Antivirus

Macafee enterprise, with EPO here. Not the best product, but not the worst either. Advantages (for us) of the EPO stuff... Centrally managed A/V client, EPO agen, and DATs. Centrally managed Anti-Spyware product Up and coming, centrally managed USB/Port and removal media control...
- Woodie
- Post #12
- Aug 8, 2007
- Forum: Security
W
Server-to-Client Email Encryption

It sort of depends... What underlying protocol are you using for the client to mail-server? POP3? SMTP? HTTP? IMAP? SMTP supports transport over TLS (equivalent of SSL)...but it's generally configured for server to server communications.
- Woodie
- Post #2
- Jul 6, 2007
- Forum: Security
W
So what do you guys use...

WebSense here for internet usage. Digital Guardian for "information leakage control" Macafee for blocking certain programs (pretty much any p2p, including skype.exe)
- Woodie
- Post #9
- Jun 25, 2007
- Forum: Security
W
What Computer Security Certs for a career?

For starters, the SANS courses/certs aren't bad. CISSP is worth more though.
- Woodie
- Post #9
- Jun 14, 2007
- Forum: Security
W
How secure would you consider this?

Change the router password, so it's not the default, and so it's long/strong. Make sure the router doesn't respond to pings from the WAN interface. Most routers come out of the box w/ no inbound ports. That's what you want, generally. Wireless settings: Depending on your environment...
- Woodie
- Post #2
- Jun 6, 2007
- Forum: Security
W
Does anyone want to talk about general security topics?

I agree that manual pen-testing is a waste of $$. It's a nice income stream for the "consulting" companies. IMHO, automated pen testing (aka: input fuzzing, etc) is a useful tool to run against applications before they're put into production use. Shopping carts, etc... Good tool to make sure...
- Woodie
- Post #2
- Jun 6, 2007
- Forum: Security
W
AV-Test.org Reports Stats from Antivirus Roundup

So...was this a "fair" evaluation? According to one commentator, the test set is mostly "malware", while the client software are mostly "virus" detectors. The other piece of it is: Why was WebWasher included in the testing? (It's not client software at all)
- Woodie
- Post #2
- Jun 5, 2007
- Forum: Security
W
WOOT! Finally a place for us to discuss security issues..

Well, this is interesting. I drop off for a while, and look what pops up. Can we post job opportunities?
- Woodie
- Post #11
- Jun 5, 2007
- Forum: Security
W
What are you doing for your Win2000 machines?

Thanks Stash. We actually needed the Exchange patch anyway. Only 2 (Exch) servers left, but they won't be upgraded in time. :( In any case, w/ 33,000 employees, it would be hard to argue "money is a problem". LOL
- Woodie
- Post #14
- Feb 18, 2007
- Forum: Operating Systems
W
What are you doing for your Win2000 machines?

Hmmm. There's a manual way? We just paid ~$40,000 to get the "official" patches for W2K from M$.
- Woodie
- Post #5
- Feb 15, 2007
- Forum: Operating Systems
W
Network Inventory?

What kind of inventory info are you looking for? Device IP, OS? Open ports? Nbt Names? DNS Names? Software (daemons) running? Installed software? How big a network? (approximate # of devices)
- Woodie
- Post #6
- Nov 27, 2006
- Forum: Operating Systems
W
Help setting up CS:S dedicated server

network connection...what broadband service level are you paying for?
- Woodie
- Post #9
- Aug 23, 2006
- Forum: Networking
W
Connecting to office by VPN without losing normal Internet connectivity?

What Cooky said. Unlikely to be able (or be permitted) to change that on the company device. Why would the company permit you full-access VPN w/ your personal machine? That's just as risky as split tunneling (IMPO).
- Woodie
- Post #4
- Aug 23, 2006
- Forum: Networking

RESOURCES

Top Bottom