network_defender ✭✭✭✭✭

Absolutely. I once worked for a four person shop during the whole Y2K thing. We were crazy busy, but the government lead who was in charge of the shop mad it a fun place to work. Gotta have that vibe.

Can't stand that check box mentality. Buying a good SIEM and not taking the time to configure it, is like buying a large Snap-On socket set and only using the 9/16 socket.

“Failure is not an option” I would have to disagree with this one. While active duty in the Navy, failure was not an option. Failure meant lives lost, not getting pilots back to the ship, not providing needed air support for ground troops.

Sometimes, any port in a broadcast storm just doesn't work. Filter, filter, filter.

Now, the powers that be are pushing for Palo Alto. The Saga continues.

Agreed. We can have everything configured and secure, and one user clicks on a link in an e-mail.....

Agreed.

I think number one would be the scariest. 

I've seen this as well. Making the transition from theoretical to practical takes some peolpe more time and hands on.

That is my biggest concern. Who owns the data, andhow is it being used?

I must admit that I work in a different environment than most. I work in network defense for the Department of Defense. Since the Internet originated as a DARPA project, we still have control of 25% of all IPv4 address space. We won't be running out of space soon. So, adoption of v6 has been slow. As for L4 firewalls, I…

Well done.

Well written advice for anybody in the field.

Multiple tools in the tool box. Use the tools that are best for you.

Love "be curious". That's how I got into this field to begin with.

I am not surprised at all about being the best in Ability to Execute. Those of us who have used other products, What's Up Gold, Cisco Works, HP openview, can attest that SolarWinds NPM is a far better product. Kudos to the whole SolarWinds team and the users that provide their input, scripts, and such!

Agreed. Just because the technology exists doesn't mean it needs to be used.

Yes. Traing. The old dilemma, train people and risk losing them, or don't train people and risk keeping them.

Yes. That voice makes me melt.

Private cloud all the way. Since I work on a classified DoD network, the choice has been made for me.

Why such a flop?

Love the article about car free streets. As a bike advocate and bike safety educator, I think this is a step in the right direction.

We are a NetApp shop. We haven't even looked elsewhere.

I can see both sides of the FBI argument. However, is watching the watchers.

It's amazing how many of these home security system cameras get installed with factory default security settings. On a different note, there was an episode of Mr. Robot this season where attackers take control of a smart home. It was amusing on TV, but pretty scary in real life.

Totally agree.

Monitoring is near and dear to my heart.

I agree that automation is the key to running a lot of STIGs quickly and efficiently. Our team has created a powershell script that covers most Windows flavored STIGS. Radix is a tool available to Gov/Mil CAC holders as well. Radix is a Unix\Linux tool that makes short work of those STIGs. It won't address every Vkey, but…

Good Read. Logs are my life.

Agreed. A single pane increases the likelihood of actually being monitored.