JANUARY MONTHLY MISSION
PRIZES
January 15: Phillips Smart Bulb Kit
January 22: CORSAIR Gaming Keyboard & Mouse
January 29: Hyper X Gaming Head Set
Grand Prize
MISSION SHORTCUT
MISSION RULES
Correctly answer all 20 questions by February 4 and get entered to win the Grand Prize! Nest Cam Indoor Security Camera
Monthly Mission Terms and Conditions: US, UK, and Canada | Germany | Australia
Mission Shortcut Terms and Conditions: US, UK, and Canada | Germany | Australia
Loving this new mission!!! And the prizes are even better.
No seatbelts? Ridiculous!
Kobe Beef - YouTube
Well, that would be the reason there is nothing on the Web about Lula. I swear I was not on anything back then...and I'm from Colorado!!!
rschroeder wrote:But the commands which RW can accomplish can also be done via NCM as it executes scripts, and THAT has full TACACS AAA going for it--which snmp does not.
rschroeder wrote:
But the commands which RW can accomplish can also be done via NCM as it executes scripts, and THAT has full TACACS AAA going for it--which snmp does not.
I totally agree with you there - I have never given Orion RW SNMP in any of the environment I've worked as NCM does the job, unless there is a specific need, and I can't think of one that would make me change the entire estate.
Back when I was the only guy with access to an NMS, and the network I'd built and supported wasn't one in the 7x24 Critical Health Care realm, I leveraged the NMS's ability to make my life more efficient through R/W permission.
Now that more people have access to my current Solarwinds NMS, and now that even enabling or disabling a port can mean a major impact to a business or clinic or hospital, I want the full AAA incident tracking log of what happens to switch, router, or firewall.
TACACS provides that for us, no matter whether we issue the commands to the device directly, or whether we have NCM do it with a service account.
NPM with SNMP can leverage parts of AAA, but it doesn't provide what our documentation and Change Management and Incident Control solutions require.
If I were back in the earlier environment, where I was the only guy supporting 14,000 users at 33 geographic sites, on a network I designed and built and installed, I'd be comfortable enabling Read/Write SNMP-v3 with NPM. Perhaps I'm just too much of a security / control person, but in that environment I could rely on myself to not make mistakes, and not try to cover them up through an NMS. Here in Health Care, though, I want every one of my team using processes and protocols that are fully logged and fully transparent. It prevents "cowboy networking" (see James T. Kirk's "Cowboy Diplomacy"), and helps ensure everyone knows what anyone else is doing on the network.
NCM's Real-Time Change Detection can be part of that solution, too, but we've tried it and found it doesn't meet our needs as well as the combination of NCM's Daily Change Reports and AAA's TACACS logs.
We really appreciate some of the guidance on where to start looking in long docs as well like for today's question. It helps a LOT. Thanks everyone!
Hear, hear! As much as I'd like to read the whole document (and intend to) I don't always have time in the morning to invest in that manner.
Control F is your friend
As long as wabbott keeps tossing us soft lobs. I'm waiting for the fast ball down main street!
With the graphics on this mission it's pretty appropriate that my son just gave me this.
Cmon baby... momma needs a new keyboard
See this is the week that I am like Eh, I am holding out for the big prize....
When I finally won a few months back I think I got a good prize... it was the new hammock before everyone else and a 50$ Amazon gift card... I liked the gift card idea a LOT! I wouldn't mind maybe getting one of those cameras that go on the outside of the house and you can talk to the people out there. The keyboard and mouse do look good though!
I'd do some research on those. You've got to be careful with them as it turns out quite a few models will set up a P2P connection with a host server which, obviously, exposes your internal network (not to mention the risk of the server owner (or someone who compromises the server) viewing/storing your video). Apparently they're quite good at poking holes in your firewall all on their lonesome, too. I have no idea if the prize falls into this category but I firmly believe that any IoT device should be fully vetted (what ports does it require, can I change the local credentials, are there any backdoors, etc) before connecting it to the same network your banking or tax data may traverse. Worst case? If your router offers a guest WiFi option connect it to that. The only issue is that you wouldn't be able to view it at home unless you're on the same SSID - but that's not exactly what they're for.
I plan on setting up some cameras at my next house. I'm going to use a DVR and wired cameras, though. Ideally I'll be able to generate email alerts but there won't be any access from the open internet. If I want to view cameras remotely I'll VPN to the thing. I'm very lucky in that my boss let me participate in the Meraki demo webinars and let me keep the hardware. My home network is all Meraki - MX64, MS220-8P and MR33. It gives me quite a lot of flexibility in my network design ... and it makes me very, very happy to see that my external IP yields zero results when I put it into Shodan or Censys (NMap results are pretty awesome, too ).
I love the 23 window bus! The most classy of hippie vans.
With the paint job on the model you should hack some RGB LEDs underneath and a bluetooth speaker in there
Nice idea.
Have you seen Gabriel Iglesias' collection
Jay Leno Admires Comedian Gabriel Iglesias's VW Collection | CNBC Make It. - YouTube
Your Hyper X link is missing a colon and therefore doesn't work.https//www.amazon.com/HyperX-Cloud-Gaming-Headset-Line/dp/B01MTLMV89/ref=dp_ob_title_ce
These demos don't work for DoD users.
i do not see any of the mac addresses on the list i am wondering if i am looking in the wrong spot
Here's the pertinent info:
Look at the 5th one down. I'm not saying it is the correct answer but it is the only one on the list.
Yes look at the rouge device list specifically as pictured. I do not have the module and was looking it all over and my eyes locked onto MAC addresses in the "Active Alerts" area filled with rogue MAC's over 16 days old. The question is definitely referring to within the last 7 days.
Thank you for letting us know!
I'm always surprised when I find rouge access points... usually they're beige or black-ish...
Mine are all a pretty pale white. A little rouge would do them some good, I think.
Wow sounds like a nice setup and hardware you got to keep!
I love the US Cyber Command logo. The AF Cyber Warfare Training logo is neat too:
That's satisfactorily creepy.
Alert Cleared.htmlHello, I would like to share the HTML template details we have prepared so that Solarwinds alarms can become more meaningful. It can list alarm object details and connected device details separately in HTML template. Except for object and device details, you can easily add custom property information…
Cisco ASR Devices.pollerCisco ASR Devices
SWQL is built on the framework of SQL and as such supports most of the standard clauses as part of a query. A very simple example query is: SELECT Caption, IPAddress, Vendor, ResponseTime FROM Orion.Nodes Dissecting this query is relatively straightforward: show some fields (Caption, IP address, Vendor, and Response Time)…
Active SSL Tunnels-ASA.UnDPThis poller *should* display the number of Active SSL VPN (Anyconnect) Tunnels currently connected to your box. However, I tried it with my 5520 running 8.0.4 and for some reason I get a OID Not Supported. Here's my post in the forum: *EDIT* This is confirmed working with at least Interm release…
