Cisco, NetApp mark progress

	10 videoconferencing tools for small groups | DARPA demos lightweight, 94GHz silicon system on a chip
	Network World Cisco				Forward this to a Friend >>>
	Cisco, NetApp mark progress Cisco and NetApp say FlexPod integrated IT infrastructure system generated $3 billion in joint sales in three years Read More   WHITE PAPER: Dell Achieve Deeper Network Security and Application Control Next-generation firewalls (NGFWs) have emerged to revolutionize network security as we once knew it. Yet to safeguard an organization from today's ever-evolving threats, NGFWs must be able to deliver an even deeper level of network security. View Now In this Issue 10 videoconferencing tools for small groups DARPA demos lightweight, 94GHz silicon system on a chip Ericsson hits 5Gbps in 5G labs demo Big data security analytics mantra: Collect and analyze everything Cisco acquires tiny collaboration company The Internet of Things at home: Why we should pay attention INSIDER Hadoop's success drives efforts to make it more secure WHITE PAPER: Fortinet Beyond the Hype: Real-world APT Solution Testing by NSS Labs With data breaches from targeted attacks making the news, there is a lot of noise about "sandboxes" from vendors. But when NSS Labs issued an open invitation to join their independent real-world test, only 6 stepped up. See who they were, how they did and which NSS Labs Recommends. Learn more >> 10 videoconferencing tools for small groups Get everyone on the same page—literally—with these video chat and conferencing solutions. Read More   DARPA demos lightweight, 94GHz silicon system on a chip Looking to bring lighter, more powerful and less expensive systems for various applications such as communications, radar or guidance systems, DARPA said this week it had recently demonstrated an all-silicon, microchip-sized system on a chip that runs at 94 GHz.DARPA claims that this chip is the first time a silicon-only package has achieved such a high frequency, which falls in the millimeter-wave range.+More on Network World: Quick look: NASA tests supersonic Mars flying saucer+"What normally would require multiple circuit boards, separate metal shielded assemblies and numerous I/O cables we can now miniaturize onto one silicon chip about half the size of an adult's thumbnail," said Dev Palmer, DARPA program manager in a statement. "This accomplishment opens the door for co-designing digital CMOS [complementary metal oxide semiconductors] and millimeter-wave capabilities as an integrated system on an all-silicon chip, which should also make possible new design architectures for future military [wireless] systems."To read this article in full or to leave a comment, please click here Read More   WHITE PAPER: Infortrend Top Reasons for Upgrading to Emulex Gen 5 Fibre Channel HBAs Did you know that the decision to purchase a Host Bus Adapter (HBA) can actually enable you to do more with less? With Gen 5 Fibre Channel HBAs you can run more virtual machines and applications per server, cut your HBA installation and management time in half to and protect your valuable data assets. Learn more >> Ericsson hits 5Gbps in 5G labs demo Ericsson says it has succeeded in sending data at 5 gigabits per second over a wireless testbed for future "5G" mobile networks.That's about 50 times faster than today's speediest LTE networks, which operate at around 100 megabits per second and are deployed in Asia and Europe. It's also considerably faster than home Internet connections, including those delivered by fiber optic cable.But don't get too excited. The first 5G networks aren't expected to be deployed for around six years, likely beginning with a demonstration network in Tokyo to coincide with the 2020 Olympic summer games.The Ericsson demo took place at the company's research and development lab in Kista, Sweden, under controlled conditions.To read this article in full or to leave a comment, please click here Read More   Big data security analytics mantra: Collect and analyze everything Sampling security data is no longer adequate or necessary – CISO mindsets are due for a change. Read More   WHITE PAPER: Riverbed Technology Accelerating the Delivery Microsoft Office 365 Many organizations use Office 365's cloud-based mail, collaboration and communication services as the dominant workload. However, as services move to the cloud, data centers are no longer local, and end-user experience can suffer. Learn more >> Cisco acquires tiny collaboration company Assemblage develops one-click web collaboration tools. Read More   The Internet of Things at home: Why we should pay attention Some of the current consumer products could lead into important enterprise tools. An explanation, a slideshow and some data. Read More     INSIDER Hadoop's success drives efforts to make it more secure Talk about big data and it won't take long for Hadoop to appear in the conversation. The Apache open source software is used to orchestrate clusters of commodity computers to crunch information from mountains of data.To read this article in full or to leave a comment, please click here(Insider Story) Read More
	SLIDESHOWS 10 disturbing attacks at Black Hat USA 2014 Attacking car systems, Google Glass for password theft, using free cloud trials to launch botnets, more. JOIN THE NETWORK WORLD COMMUNITIES As network pros you understand that the value of connections increase as the number of connections increase, the so called network effect, and no where is this more evident than in professional relationships. Join Network World's LinkedIn and Facebook communities to share ideas, post questions, see what your peers are working on and scout out job applicants (or maybe find your next opportunity). Network World on Facebook Network World on LinkedIn MOST-READ STORIES 1. Google is killing off Orkut 2. 10 disturbing attacks at Black Hat USA 2014 3. 10 security start-ups to watch 4. The Internet of Things at home: 14 smart products that could change your life 5. 10 Bad Coding Practices That Wreck Software Development Projects 6. 4 key features coming to Windows 9 (hopefully) 7. Microsoft's takedown of No-IP pushes innocents into the crossfire 8. 10 critical security habits you should be doing (but aren't) 9. HP's giant Proliant challenges big iron from IBM, Oracle 10. 8 ways the password is dying
	Do You Tweet? Follow everything from NetworkWorld.com on Twitter @NetworkWorld. You are currently subscribed to networkworld_cisco_alert as security.world@gmail.com. Unsubscribe from this newsletter | Manage your subscriptions | Subscribe | Privacy Policy If you are interested in advertising in this newsletter, please contact: bglynn@cxo.com To contact Network World, please send an e-mail to customer_service@nww.com. Copyright (C) 2014 Network World, 492 Old Connecticut Path, Framingham MA 01701 ** Please do not reply to this message. If you want to contact someone directly, send an e-mail to customer_service@nww.com. **

Microsoft to resume email-based security notifications

	Apple patches iOS, OS X and Safari on Mega Monday | EFF sues the NSA to disclose use of software security flaws
	Network World Security				Forward this to a Friend >>>
	Microsoft to resume email-based security notifications Microsoft has backtracked on a plan to stop sending email-based notifications about security bulletins starting this month.The company informed its customers Friday that beginning Tuesday it would no longer send security-related notifications via email because of "changing governmental policies concerning the issuance of automated electronic messaging."The decision would have affected notifications about upcoming security bulletins, security bulletin summaries, new security advisories, and revisions to security bulletins and advisories.To read this article in full or to leave a comment, please click here Read More   WHITE PAPER: Juniper Networks   Security in the Next-Generation Data Center This white paper examines these trends, and it reveals the key capabilities that today's security teams require to effectively ensure that vital corporate assets remain secure, while at the same time optimizing access, cost, and administrative efficiency. View Now In this Issue Apple patches iOS, OS X and Safari on Mega Monday EFF sues the NSA to disclose use of software security flaws INSIDER Hadoop's success drives efforts to make it more secure Tools catch security holes in open source code Microsoft legal action cramping other hacking campaigns, Kaspersky says Israeli security startup firm Hexadite automates cyber incident response DARPA demos lightweight, 94GHz silicon system on a chip Big data security analytics mantra: Collect and analyze everything Energy providers hacked through malicious software updates WHITE PAPER: HP Why you need a next-generation firewall This white paper explores the reasons for implementing NG firewalls and lays out a path to success for overburdened IT organizations. Learn More Apple patches iOS, OS X and Safari on Mega Monday Apple on Monday updated both OS X and iOS, patching 19 security vulnerabilities in the former and 44 in the latter.OS X 10.9.3, aka "Mavericks," and iOS 7.1.2 each contained several non-security fixes as well.Mavericks received 19 patches, 11 of them rated critical with the description that an exploit may be able to execute "arbitrary code," Apple-speak for the most serious tier of vulnerabilities. The separate Security Update 2014-003 addressed three bugs in Lion and eight in Mountain Lion, the precursors to Mavericks which shipped in 2011 and 2012, respectively.Because Apple has stopped shipping security updates for OS X Snow Leopard, there was no corresponding update for the 2009 edition that still powers about one in every six Macs.To read this article in full or to leave a comment, please click here Read More   EFF sues the NSA to disclose use of software security flaws The Electronic Frontier Foundation, a prominent digital privacy rights group, has filed a lawsuit against the U.S. National Security Agency to get it to specify the extent to which it might exploit software security flaws.The EFF said Tuesday it had filed a Freedom of Information Act lawsuit against the NSA and the Office of the Director of National Intelligence to gain access to documents showing how intelligence agencies choose whether to disclose software security flaws known as "zero days." These early stage flaws are typically discovered by researchers but are not yet patched by developers or the company. A market has even sprung up around the flaws, in which governments will purchase the vulnerabilities to gain access to people's computers, EFF said.To read this article in full or to leave a comment, please click here Read More     INSIDER Hadoop's success drives efforts to make it more secure Talk about big data and it won't take long for Hadoop to appear in the conversation. The Apache open source software is used to orchestrate clusters of commodity computers to crunch information from mountains of data.To read this article in full or to leave a comment, please click here(Insider Story) Read More   WEBCAST: IBM The Next Generation of Big Data Learn about IBM's new and expanded Information Management capabilities now delivered in the cloud. Learn More Tools catch security holes in open source code This year has been the best of times and the worst of times for open source code and security.On the one hand, the latest survey by Black Duck Software and North Bridge Venture Partners shows that 72 percent of industry professionals prefer open source software because it's more secure than proprietary solutions.[Are open-source projects the pathway to better security?]On the other hand, Heartbleed exposed a security flaw in the widely-used, open source OpenSSL encryption tool that affected more than half a million websites. Also this spring, TrueCrypt unexpectedly shut down, citing "unfixed security issues" on its SourceForge page, and a critical bug in Linux, GnuTLS, was finally exposed after having been undiscovered for more than 10 years.To read this article in full or to leave a comment, please click here Read More   Microsoft legal action cramping other hacking campaigns, Kaspersky says Microsoft's seizure of domains from a DNS service provider has also disrupted some state-sponsored cyberespionage campaigns, according to security vendor Kaspersky Lab.A quarter of the long-term malware operations run by hacking groups tracked by the Russian security vendor have been affected by the seizure of domains from No-IP, wrote analyst Costin Rau on a company blog Tuesday.No-IP, run by Nevada-based Vitalwerks, has a free "dynamic DNS" service that updates DNS entries for a domain that has a changing IP address assigned by an ISP. It does that by lending a subdomain to the customer, then updating the DNS record as the IP address for the hostname changes.To read this article in full or to leave a comment, please click here Read More   Israeli security startup firm Hexadite automates cyber incident response Technology developed by an Israeli security firm called Hexadite promises to help companies reduce cyber incident response times by automating security breach investigation and remediation.The company's product, called the Hexadite Automated Incident Response Solution (AIRS), is currently being tested by several U.S. and Israeli-based companies and is expected to be launched around October.However, companies interested in the technology can request a demo starting Tuesday and then potentially join the beta program, said Hexadite's co-founder and CEO, Eran Barak.Large enterprises have a wide range of security products running on their endpoint systems or networks, including anti-malware programs, data loss prevention (DLP) systems, firewalls and intrusion detection systems (IDS). These are further complemented by security information and event management (SIEM) products that analyze data from various applications and systems inside the organization and generate alerts.To read this article in full or to leave a comment, please click here Read More   WEBCAST: Network Instruments   3 Choices for Effective UC Management This webcast discusses five best practices on how to successfully optimize and manage UC, as well as how to gain clear picture of overall performance and quickly troubleshoot when the inevitable issues arise. Learn More DARPA demos lightweight, 94GHz silicon system on a chip Looking to bring lighter, more powerful and less expensive systems for various applications such as communications, radar or guidance systems, DARPA said this week it had recently demonstrated an all-silicon, microchip-sized system on a chip that runs at 94 GHz.DARPA claims that this chip is the first time a silicon-only package has achieved such a high frequency, which falls in the millimeter-wave range.+More on Network World: Quick look: NASA tests supersonic Mars flying saucer+"What normally would require multiple circuit boards, separate metal shielded assemblies and numerous I/O cables we can now miniaturize onto one silicon chip about half the size of an adult's thumbnail," said Dev Palmer, DARPA program manager in a statement. "This accomplishment opens the door for co-designing digital CMOS [complementary metal oxide semiconductors] and millimeter-wave capabilities as an integrated system on an all-silicon chip, which should also make possible new design architectures for future military [wireless] systems."To read this article in full or to leave a comment, please click here Read More   Big data security analytics mantra: Collect and analyze everything In a recent research survey, ESG asked security professionals to identify the most important type of data for use in malware detection and analysis (note: I am an employee of ESG). The responses were as follows: 42% of security professionals said, "Firewall logs" 28% of security professionals said, "IDS/IPS alerts" 27% of security professionals said. "PC/laptop forensic data" 23% of security professionals said, "IP packet capture" 22% of security professionals said, "Server logs" I understand this hierarchy from a historical perspective, but I contend that this list is no longer appropriate for several reasons. First of all, it is skewed toward the network perimeter which no longer makes sense in a mobile device/mobile user world. Second, it appears rooted in SIEM technology which was OK a few years ago, but we no longer want security technologies mandating what types of data we can and cannot collect and analyze.To read this article in full or to leave a comment, please click here Read More   Energy providers hacked through malicious software updates Symantec says the Dragonfly campaign, originating in Eastern Europe, sought to gain persistent access to energy suppliers Read More
	SLIDESHOWS 10 disturbing attacks at Black Hat USA 2014 Attacking car systems, Google Glass for password theft, using free cloud trials to launch botnets, more. JOIN THE NETWORK WORLD COMMUNITIES As network pros you understand that the value of connections increase as the number of connections increase, the so called network effect, and no where is this more evident than in professional relationships. Join Network World's LinkedIn and Facebook communities to share ideas, post questions, see what your peers are working on and scout out job applicants (or maybe find your next opportunity). Network World on Facebook Network World on LinkedIn MOST-READ STORIES 1. Google is killing off Orkut 2. 10 disturbing attacks at Black Hat USA 2014 3. 10 security start-ups to watch 4. The Internet of Things at home: 14 smart products that could change your life 5. 10 Bad Coding Practices That Wreck Software Development Projects 6. 4 key features coming to Windows 9 (hopefully) 7. Microsoft's takedown of No-IP pushes innocents into the crossfire 8. 10 critical security habits you should be doing (but aren't) 9. HP's giant Proliant challenges big iron from IBM, Oracle 10. 8 ways the password is dying
	Do You Tweet? Follow everything from NetworkWorld.com on Twitter @NetworkWorld. You are currently subscribed to networkworld_security_alert as security.world@gmail.com. Unsubscribe from this newsletter | Manage your subscriptions | Subscribe | Privacy Policy If you are interested in advertising in this newsletter, please contact: bglynn@cxo.com To contact Network World, please send an e-mail to customer_service@nww.com. Copyright (C) 2014 Network World, 492 Old Connecticut Path, Framingham MA 01701 ** Please do not reply to this message. If you want to contact someone directly, send an e-mail to customer_service@nww.com. **

WindowSecurity.com - Managing AppLocker in Windows Server 2012 and Windows 8/8.1 (Part 2)

WindowSecurity.com - Managing AppLocker in Windows Server 2012 and Windows 8/8.1 (Part 2)

Hi Security World,


---------------------------------------------------------
---------------------------------------------------------


Just Published
-----------------------------------------------------------------
Managing AppLocker in Windows Server 2012 and Windows 8/8.1 (Part 2) (on 2 July 2014 by Deb Shinder)
http://www.windowsecurity.com/articles-tutorials/Windows_Server_2012_Security/managing-applocker-windows-server-2012-and-windows-8-81-part2.html
In part one of this series, we began with an overview of AppLocker, how it differs from SRP, system requirements, and how to get started configuring it. Now in Part 2, we’ll take you through the process of planning your AppLocker policies.



Recent Articles & Tutorials
-----------------------------------------------------------------
Kaspersky Security for Mail Server - Voted WindowSecurity.com Readers' Choice Award Winner - Email Anti Virus (on 26 June 2014 by The Editor)
http://www.windowsecurity.com/news/WindowSecurity-Readers-Choice-Award-Email-Anti-Virus-Kaspersky-Security-for-Mail-Server-May14.html
Kaspersky Security for Mail Server was selected the winner in the Email Anti Virus category of the WindowSecurity.com Readers' Choice Awards. Trend Micro InterScan Messaging Security Suite and MailScan were runner-up and second runner-up respectively.

Termination of Windows XP support â€" How does this affect your security? (on 25 June 2014 by Ricky M. & Monique L. Magalhaes)
http://www.windowsecurity.com/articles-tutorials/windows_os_security/termination-windows-xp-support-how-does-affect-your-security.html
This article reflects how the termination of Windows XP support is likely to affect companies or individuals still using the operating system in the interim and any considerations that should be made short term to secure your systems while planning a move to a current and supported version.

Managing AppLocker in Windows Server 2012 and Windows 8/8.1 (Part 1) (on 18 June 2014 by Deb Shinder)
http://www.windowsecurity.com/articles-tutorials/Windows_Server_2012_Security/managing-applocker-windows-server-2012-and-windows-8-81-part1.html
In this, part 1 of a multi-part series, we'll introduce you to AppLocker in Windows Server 2012/2012 R2 and Windows 8/8.1

Improving security through least-privilege practices (on 11 June 2014 by Ricky M. & Monique L. Magalhaes)
http://www.windowsecurity.com/articles-tutorials/authentication_and_encryption/improving-security-through-least-privilege-practices.html
In this article we will consider the successful implementation and management of the least-privilege principle and contemplate the challenges and benefits faced by organisations when addressing security through least-privilege.





WindowSecurity.com Sections
-----------------------------------------------------------------
- Articles & Tutorials (http://www.windowsecurity.com/articles-tutorials/)
- Products (http://www.windowsecurity.com/software/)
- Reviews (http://www.windowsecurity.com/articles-tutorials/Product_Reviews/)
- Free Tools (http://www.windowsecurity.com/software/Free-Tools/)
- Blogs (http://www.windowsecurity.com/blogs/)
- Forums (http://forums.windowsecurity.com/)
- White Papers (http://www.windowsecurity.com/white-papers/)
- Contact Us (http://www.windowsecurity.com/pages/contact-us.html)



Techgenix Sites
-----------------------------------------------------------------
- MSExchange.org (http://www.msexchange.org/)
- WindowsNetworking.com (http://www.windowsnetworking.com/)
- VirtualizationAdmin.com (http://www.virtualizationadmin.com/)
- ISAserver.org (http://www.isaserver.org/)
- CloudComputingAdmin.com (http://www.cloudcomputingadmin.com/)
- WServerNews.com (http://www.wservernews.com/)


--
To unsubscribe: http://www.techgenix.com/newsletter/members.aspx?Task=OOS&SI=78504&E=security.world%40gmail.com&S=1&NL=10
To change your subscription settings: http://www.techgenix.com/newsletter/members.aspx?Task=US&SI=78504&E=security.world%40gmail.com&S=1
WindowSecurity.com is in no way affiliated with Microsoft Corp.
For sponsorship information, contact us at advertising@WindowSecurity.com
TechGenix Ltd. Mriehel Bypass, Mriehel BKR 3000, Malta
Copyright WindowSecurity.com 2014. All rights reserved.

Project

I have been trying to contact you

Regards,

Xuog

Groupon Indonesia Deals Kategori Nasional Rabu 02 July 2014

Groupon harian untuk Kategori Nasional | Buka di website | Mobile version | Start your deal Tambahkan noreply@indogroupon.com ke dalam address book supaya email dapat diterima dengan baik

Deal Nasional Rencanakan kegiatan bersama, rekomendasikan ke teman, bonus Rp.10.000 / orang Rabu 02.07.2014 follow us

Diskon - Sajian Khas Ramadhan dan Idul Fitri Ada Kurma Date Crown Khalas Hanya Rp 67.000         Apakah kamu ingin makan kurma untuk berbuka puasa ? Tapi malas untuk pergi ke pasar ? Tenang saja sekarang ada Kurma Date Crown Khalas, hidangan spesial dan istimewa untuk menemani waktu berbuka puasa, santap sahur dan sangat cocok juga umtuk suguhan tamu anda sekeluarga di hari idul fitri. Hanya Rp 67.000 dan bisa kamu dapatkan di indogroupon.com   Diskon - Abadikan Momen Kamu Dimanapun Dengan Tongkat narsis (Tongsis Monopod) hanya Rp 132.000         Ingin berselfie ria ? Tapi susah untuk mendapatkan angle yang tepat ? Pakai saja Tongkat narsis (Tongsis Monopod) dan abadikan setiap momen kamu dimanapun dan kapanpun tanpa harus meminta bantuan orang disekitar anda. Mudah digunakan dan bisa digunakan untuk kamera digital/handphone/android. Hanya Rp 132.000 dan bisa kamu dapatkan di indogroupon.com.   Diskon - Untuk Jaga Diri Pakai Senjata Kejut Lisrik Type 800 Hanya Rp 110.000         Stun Gun type 800 High Voltage adalah gadget berupa alat setrum berbentuk Seperti Gadget HP dan bertegangan original tinggi yang didesain untuk memberikan kemudahan bagi pemakainya untuk melindungi diri. Mengingat susahnya mendapatkan ijin kepemilikan senjata api, stun gun adalah gadget yang sangat cocok bagi kaum pria, wanita, pelajar, pengusaha, dan berbagai kalangan lainnya. Hanya Rp 110.000 dan bisa kamu dapatkan di indogroupon.com   Diskon - Lindungi Diri Kamu Dengan Belt Hidden Knife Valois Stainless Steel Hanya Rp 125.000         Apakah kamu buruh alat pertahanan diri ? Tapi tidak mau yang ribet - ribet ? Tenang sekarang ada Belt Hidden Knife. Sabuk ini selain berfungsi sebagai aksesoris pada celana pada umumnya dengan desain yang stylish dan elegan, tetapi dapat juga menjadi alat perlindungan diri dengan adanya pisau yang tersembunyi pada kepala sabuk, yang tidak terlihat oleh orang lain. Hanya Rp 125.000 dan bisa kamu dapatkan di indogroupon.com   Diskon - Memancing Lebih Mengasikkan Dengan 1 Set Alat Pancing + Umpan Jitu Hanya Rp 200.000         Apakah kamu termasuk orang yang hobi memancing ? Tapi tidak punya joran yang pas ? Tenang sekarang ada 1 Set alat pancing lengkap dengan umpan jitu, di kemas didalam tas yang keren. Tungkai joran yang empuk tidak membuat capek di cengkeram. Tinggal langsung mancing saja. Hanya Rp 200.000 dan bisa kamu dapatkan di indogroupon.com.

Customer Care: konsumen@indogroupon.com, SMS: 0878-0840-5008, Senin - Jumat pukul 09.00-16.00 wib Anda menerima email penawaran diskon harian dari Indogroupon karena telah mendaftar di website http://indogroupon.com. Setiap saat Anda dapat unsubscribe dengan klik disini. Groupon Indonesia  |  Penyedia Diskon Setiap Hari  |  Deal Kategori Nasional

Add your name against the Hobby Lobby decision

http://my.democrats.org/Sign-On-for-Obamacare

Paid for by the Democratic National Committee, 430 South Capitol Street SE, Washington DC 20003 and not authorized by any candidate or candidate's committee. This email was sent to securityworld@gmail.com. If this isn't the best email address at which to reach you, update your contact information. Our email list is the best way we have of staying in regular contact with supporters like you across the country and letting you know about the work President Obama and other Democrats are doing. Click here to unsubscribe from our supporter list. This organization is powered by you, and we'd love to hear your ideas. Send us any comments, criticisms, or feedback here. Thanks for supporting President Obama and other Democrats.

ISAserver.org - Integrating Exchange 2010 Edge Transport with Forefront Threat Management Gateway (TMG) 2010

ISAserver.org - Integrating Exchange 2010 Edge Transport with Forefront Threat Management Gateway (TMG) 2010

Hi Security World,


---------------------------------------------------------
---------------------------------------------------------


Just Published
-----------------------------------------------------------------
Integrating Exchange 2010 Edge Transport with Forefront Threat Management Gateway (TMG) 2010 (on 1 July 2014 by Richard Hicks)
http://www.isaserver.org/articles-tutorials/configuration-general/integrating-exchange-2010-edge-transport-forefront-threat-management-gateway-tmg-2010.html
In this article we will look at how to install and configure Exchange Edge Transport integration with TMG.



Recent Articles & Tutorials
-----------------------------------------------------------------
TMG Firewall Access Control Policies and Rules (Part 2) (on 24 June 2014 by Deb Shinder)
http://www.isaserver.org/articles-tutorials/general/tmg-firewall-access-control-policies-and-rules-part2.html
In this article, Part 2 of a series, we'll take a closer look at the components of the rules that enable both inbound and outbound access.

Monitoring Strategies for Forefront Threat Management Gateway (TMG) 2010 (on 10 June 2014 by Richard Hicks)
http://www.isaserver.org/articles-tutorials/configuration-general/monitoring-strategies-forefront-threat-management-gateway-tmg-2010.html
This article looks at some simple strategies along with tips and tricks for monitoring your production TMG deployment.

TMG Firewall Access Control Policies and Rules (Part 1) (on 27 May 2014 by Deb Shinder)
http://www.isaserver.org/articles-tutorials/general/tmg-firewall-access-control-policies-and-rules-part1.html
In this article we'll take a look at policy and rule types.

Support boundaries for Forefront UAG (on 20 May 2014 by Marc Grote)
http://www.isaserver.org/articles-tutorials/installation-planning/support-boundaries-forefront-uag.html
In this article the author writes about Forefront UAG support boundaries.





ISAserver.org Sections
-----------------------------------------------------------------
- Articles & Tutorials (http://www.isaserver.org/articles-tutorials/)
- Products (http://www.isaserver.org/software/)
- Reviews (http://www.isaserver.org/articles-tutorials/product-reviews/)
- Free Tools (http://www.isaserver.org/software/Free-Tools/)
- Blogs (http://www.isaserver.org/blogs/)
- Forums (http://forums.isaserver.org/)
- Contact Us (http://www.isaserver.org/pages/contact-us.html)



Techgenix Sites
-----------------------------------------------------------------
- MSExchange.org (http://www.msexchange.org/)
- WindowsNetworking.com (http://www.windowsnetworking.com/)
- WindowSecurity.com (http://www.windowsecurity.com/)
- VirtualizationAdmin.com (http://www.virtualizationadmin.com/)
- CloudComputingAdmin.com (http://www.cloudcomputingadmin.com/)
- WServerNews.com (http://www.wservernews.com/)


--
To unsubscribe: http://www.techgenix.com/newsletter/members.aspx?Task=OOS&SI=78504&E=security.world%40gmail.com&S=1&NL=6
To change your subscription settings: http://www.techgenix.com/newsletter/members.aspx?Task=US&SI=78504&E=security.world%40gmail.com&S=1
ISAserver.org is in no way affiliated with Microsoft Corp.
For sponsorship information, contact us at advertising@ISAserver.org
TechGenix Ltd. Mriehel Bypass, Mriehel BKR 3000, Malta
Copyright ISAserver.org 2014. All rights reserved.

firewall-wizards Digest, Vol 70, Issue 1

Send firewall-wizards mailing list submissions to
firewall-wizards@listserv.icsalabs.com

To subscribe or unsubscribe via the World Wide Web, visit
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards
or, via email, send a message with subject or body 'help' to
firewall-wizards-request@listserv.icsalabs.com

You can reach the person managing the list at
firewall-wizards-owner@listserv.icsalabs.com

When replying, please edit your Subject line so it is more specific
than "Re: Contents of firewall-wizards digest..."


Today's Topics:

1. Re: Quiet (David Hills)
2. Re: Quiet (Timothy Shea)


----------------------------------------------------------------------

Message: 1
Date: Tue, 24 Jun 2014 14:05:28 +1200
From: David Hills <list@chippo.net.nz>
Subject: Re: [fw-wiz] Quiet
To: Firewall Wizards Security Mailing List
<firewall-wizards@listserv.icsalabs.com>
Message-ID:
<CAMQCHecXMb_qnUUvzS=id4Jr-3NberWm+7OofFx3ex+Mp9p9qw@mail.gmail.com>
Content-Type: text/plain; charset="utf-8"

Okay, I'll bite.

> Thoughts on IPv6?
You mean you aren't doing this yet? You're still using Windows XP and Fax
as well, right?

Platforms like the XBox One are already using IPv6 almost exclusively for
P2P communications. Even my 3 year old printer which barely does WiFi
reached out for DHCPv6 and gave itself an IP address when V6 was turned on
at home.

> Thoughts on "Cloud Firewalls?"
I always use Cloud firewalls to protect my cloud assets. Otherwise those
cloud bad actors might cloud my cloud product.

My real IT though, uses real firewalls. Physical, Virtual, On-Site or in
the Datacenter, frankly I don't care. But being "VMX" doesn't make you
partly cloudy with a chance of rain.

> Thoughts on Web Application Firewalls?
If they serve a purpose, SURE! They make great SSL offloadning and Load
Balancing appliances. Wherever I can use the PCIDSS budget from the
security team to make my customer experience better, that can't be a bad
thing, right?

Doesn't reduce the need for good code and server patching though.

> 1. Have any of you used the IPv6 IPSEC equivalent yet? Tunnel or
transport mode? Vendor hardware? Difficulties?
Vendors that don't have IPv6 hardware in at least their ISP / Datacenter
products are probably looking at some hard times ahead. Most of the u

> 2. I've pondered a cloud based service for web acceleration/filtering.
Perhaps it would use Riverbeds for bandwidth optimization via compression,
dedupe, etc....? Anything like that out there?
CloudFlare? Akamai? I think the Microsoft Azure CDN even offers much of
this. The advantage in context for this list? Takes your IPv4 only
Datacenter provider and makes your website IPv6 without you evening
noticing. Woo!

> 3. If it doesn't do WAP, then it's an old fashioned firewall--and quite
possibly obsolete. These days, the firewall has to encompass the whole
stack (except layer 8--the user). I guess you could make specific cases
like for networks that don't exchange HTTP/S traffic. But seriously, if
your firewall doesn't understand the protocols it is passing, if it doesn't
enforce RFCs to some extent, if it doesn't do sanity checking on bounds,
and true protocol inspection... then what is it doing? :-)
UInless you've been asleep and you're still buying Cisco - all the big
network security vendors have moved to this model. Fortinet barely
advertise themselves as being a firewall anymore, it's all about
"Application Control". In their case, they also have full parity in their
UTM between both IPv4 and IPv6.

It's a brave new world.

So, my question then - Who's doing VoIP over IPv6? Are you seeing
advantages once we get NAT out of the way?

David



On 24 June 2014 05:16, Paul D. Robertson <paul@compuwar.net> wrote:

> It's quiet here- I'd like to stir up some discussion...
>
> Thoughts on IPv6?
> Thoughts on "Cloud Firewalls?"
> Thoughts on Web Application Firewalls?
>
> Paul
> _______________________________________________
> firewall-wizards mailing list
> firewall-wizards@listserv.icsalabs.com
> https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://listserv.icsalabs.com/pipermail/firewall-wizards/attachments/20140624/f24a5c8c/attachment-0001.html>

------------------------------

Message: 2
Date: Mon, 23 Jun 2014 18:37:43 -0700
From: Timothy Shea <tim@tshea.net>
Subject: Re: [fw-wiz] Quiet
To: Firewall Wizards Security Mailing List
<firewall-wizards@listserv.icsalabs.com>
Message-ID:
<CAHxuY53JdvHGATT-=rS616w5MVqk=ftpLQYOk8oekMXpOo91zQ@mail.gmail.com>
Content-Type: text/plain; charset="utf-8"

> Thoughts on IPv6?

Meh. Is this the year of IPv6? Or was that last year? Or next year? I'm
sure it will come up in some meeting and we will table it to next year.
But I'm sure someone here will spend a lot of text here to inform that I
must absolutely convert now even though it provides no value to our
business nor are we seeing any demand (even in our asian markets).

> Thoughts on "Cloud Firewalls?"

Meh. For office perimeter protection - most vendors that offer "firewall
as a service" fail at the basics. Like keeping their service up. Or
advance notice of changes. Or even returning phone calls.

As for our cloud hosting properties we are moving network ACL's to the
individual hosts (we are moving to this model at our physical properties as
well). I have noticed with some amusement vendors trying to dump all their
bloated code unto an image to deliver a 'cloud firewall' without any
optimization or enhancements to take advantage of cloud features (*cough*
checkpoint *cough*).

> Thoughts on Web Application Firewalls?

Wouldn't implement a web app without one. Its vital to rapidly react to
application issues, implement rate limiting, enforce white/black listing,
keep software engineering honest, and provide visibility into the web
stack.

I'm going to grab some popcorn and see where this discussion goes. :)


On Mon, Jun 23, 2014 at 10:16 AM, Paul D. Robertson <paul@compuwar.net>
wrote:

> It's quiet here- I'd like to stir up some discussion...
>
> Thoughts on IPv6?
> Thoughts on "Cloud Firewalls?"
> Thoughts on Web Application Firewalls?
>
> Paul
> _______________________________________________
> firewall-wizards mailing list
> firewall-wizards@listserv.icsalabs.com
> https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards
>



--
Tim Shea, CISSP, ISSAP, CISM
442-400-9096
tim@tshea.net

http://www.linkedin.com/in/timothyshea
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://listserv.icsalabs.com/pipermail/firewall-wizards/attachments/20140623/34ee9416/attachment-0001.html>

------------------------------

_______________________________________________
firewall-wizards mailing list
firewall-wizards@listserv.icsalabs.com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards


End of firewall-wizards Digest, Vol 70, Issue 1
***********************************************

Hi

I have a project for you.

WindowsNetworking.com - Getting More Out of Your Network

WindowsNetworking.com - Getting More Out of Your Network

Hi Security World,



Just Published
-----------------------------------------------------------------
Getting More Out of Your Network (on 1 July 2014 by Eric Geier)
http://www.windowsnetworking.com/articles-tutorials/netgeneral/getting-more-out-your-network.html
This article looks at other ways you can utilize your wired or wireless network other than traditional browsing and file sharing.



Recent Articles & Tutorials
-----------------------------------------------------------------
Assessing the impact of schema changes (on 26 June 2014 by Mitch Tulloch)
http://www.windowsnetworking.com/articles-tutorials/windows-server-2012/assessing-impact-schema-changes.html
This article helps administrators of Active Directory environments assess the possible impact of upgrading the schema when they migrate their forest to a newer version of Windows Server.

Microsoft Virtual Machine Converter 2.0 (on 24 June 2014 by Scott D. Lowe)
http://www.windowsnetworking.com/articles-tutorials/netgeneral/microsoft-virtual-machine-converter-20.html
As a part of the effort to make migrating of server resources between environments easier, Microsoft has provided the new Microsoft Virtual Machine Converter 2.0 to extend their migration and management tools and ease the burden for transitioning from one virtualization hosting environment to another.

Cluster Aware Updating for Windows Server 2012 R2 (on 19 June 2014 by Brien M. Posey )
http://www.windowsnetworking.com/articles-tutorials/windows-server-2012/cluster-aware-updating-windows-server-2012-r2.html
Cluster Aware Updating can greatly simplify the process of applying operating system patches to Windows Server 2012 or 2012 R2 failover cluster nodes. This article series explains how Cluster Aware Updating works and will eventually walk you through the process of implementing Cluster Aware Updating in a Windows Server 2012 R2 environment.

Acronis Backup - Voted WindowsNetworking.com Readers' Choice Award Winner - Data Recovery Software (on 18 June 2014 by The Editor)
http://www.windowsnetworking.com/news/WindowsNetworking-Readers-Choice-Award-Data-Recovery-Software-Acronis-Backup-May14.html
Acronis Backup was selected the winner in the Data Recovery Software category of the WindowsNetworking.com Readers' Choice Awards. Veeam Backup &amp; Replication v7 and ShadowProtect Server were runner-up and second runner-up respectively.



WindowsNetworking.com Sections
-----------------------------------------------------------------
- Articles & Tutorials (http://www.windowsnetworking.com/articles-tutorials/)
- KBase Tips (http://www.windowsnetworking.com/kbase/WindowsTips/)
- Products (http://www.windowsnetworking.com/software/)
- Reviews (http://www.windowsnetworking.com/articles-tutorials/product-reviews/)
- Free Tools (http://www.windowsnetworking.com/software/Free-Tools/)
- Blogs (http://www.windowsnetworking.com/blogs/)
- Forums (http://forums.windowsnetworking.com/)
- White Papers (http://www.windowsnetworking.com/white-papers/)
- Contact Us (http://www.windowsnetworking.com/pages/contact-us.html)



Techgenix Sites
-----------------------------------------------------------------
- MSExchange.org (http://www.msexchange.org/)
- WindowSecurity.com (http://www.windowsecurity.com/)
- VirtualizationAdmin.com (http://www.virtualizationadmin.com/)
- ISAserver.org (http://www.isaserver.org/)
- CloudComputingAdmin.com (http://www.cloudcomputingadmin.com/)
- WServerNews.com (http://www.wservernews.com/)


--
To unsubscribe: http://www.techgenix.com/newsletter/members.aspx?Task=OOS&SI=78504&E=security.world%40gmail.com&S=1&NL=24
To change your subscription settings: http://www.techgenix.com/newsletter/members.aspx?Task=US&SI=78504&E=security.world%40gmail.com&S=1
WindowsNetworking.com is in no way affiliated with Microsoft Corp.
For sponsorship information, contact us at advertising@WindowsNetworking.com
TechGenix Ltd. Mriehel Bypass, Mriehel BKR 3000, Malta
Copyright WindowsNetworking.com 2014. All rights reserved.