network_defender ✭✭✭✭✭

I agree. Could be a very slippery slope.

Wow. I just sat through a two hour presentation on this very topic. I think it is a great idea. Especially since Cisco acquired Sourcefire. The best part is Sourcefire founder Martin Roesch is still bringing his secret sauce to the table. Can you tell that I'm a Snort fan? The way Cisco has integrated these components…

Fortunately, I work on a classified system. No mobile devices beyond the front door. Very good article though. Makes me appreciate where I am.

Currently we are working towards the cloud. We have no reason not to move the DB's.

Although we have SAM on the network, the people that would benefit the most seem uninterested.

Root cause analysis - you will probably see the problem again.

The 8th? Seriously? I'm on the 9th.

I've been doing the MS 150 bike ride on the Eastern Shore of Virginia since 2009. Beautiful ride, great people, great cause. Love our Motorcycle Marshalls. They are the best. Thanks for your support RT.

Level 17 and number 37. At least I can see you in my ranking window now.

I can relate to that. We just had a blizzard blow through last weekend. Most has melted now, so i'm back to bike commuting again.

Terry, on a different note, where do you bike MS?

and I thought I was OCD. I am not worthy.

Looking for the method I would use to actually implement these. I would like to make this part of our continuous cyber evaluation.

Yep! I guess I need to check the store more often. Looks like a really nice hat.

As a DoD entity, we don't really have customers. However, we do support many users.

We operate on a classified network. If we get phishing emails, we have a bigger problem.

Which of the following best describes your organization BEFORE COVID-19? We use all of our SolarWinds products in a classified environment. We are still on station, working a split shift to maintain proper social distancing.

We have a separate network that is actually name Baseline. It is where all of our final testing happens before anything goes out the door.

SolarWinds cycling jersey. SolarWinds cycling water bottle.

Hell yes

Looks like things are in order again.

"Experienced" sysadmin swears up and down that my firewall is blocking the traffic between his web server and his database server. They both reside in the same subnet/VLAN, are on same switch, and on consecutive ports. After a quick netstat, I told him to restart SQL, problem solved.

My wife has already laid claim to it.

Received mine this morning. Completely forgot about it.

Tenable make a product called Passive Vulnerability Scanner (PVS). Think of it a Snort style sniffer that specifically looks for protocol versioning. Such as SNMPv2 traffic where only SNMPv3 exists. PVS could look for SMBv1 and alert.

Thanks for the points. Now I can get another pair of socks.

Thank you for the update. Points or no points it was still fun.

We use NPM and NCM on a daily basis and have been for a couple of years. I use NPM to monitor my routers, switches, and firewalls. Others on our team use it to monitor storage, VM infrastructure, and so on. I also use the syslog function for monitoring my ACL's. I have several server suite ACL's used to isolate them from…