<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet href="http://feeds.feedburner.com/~d/styles/rss2full.xsl" type="text/xsl" media="screen"?><?xml-stylesheet href="http://feeds.feedburner.com/~d/styles/itemcontent.css" type="text/css" media="screen"?><rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:wfw="http://wellformedweb.org/CommentAPI/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0">

<channel>
	<title>BumpInTheWire.com</title>
	
	<link>http://www.bumpinthewire.com</link>
	<description>NAC in the Real World</description>
	<pubDate>Fri, 18 Jul 2008 03:52:43 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.5</generator>
	<language>en</language>
			<atom10:link xmlns:atom10="http://www.w3.org/2005/Atom" rel="self" href="http://feeds.feedburner.com/Bumpinthewire" type="application/rss+xml" /><item>
		<title>I’m gonna throw that damn curse…</title>
		<link>http://www.bumpinthewire.com/?p=228</link>
		<comments>http://www.bumpinthewire.com/?p=228#comments</comments>
		<pubDate>Fri, 18 Jul 2008 03:52:43 +0000</pubDate>
		<dc:creator>Mr. Bump</dc:creator>
		
		<category><![CDATA[Vista]]></category>

		<guid isPermaLink="false">http://www.bumpinthewire.com/?p=228</guid>
		<description><![CDATA[into that damn pond.  That&#8217;s a quote from Dumb and Dumber in reference to the briefcase they were returning to Mary Swanson.
That&#8217;s the way I felt today about my laptop.  I&#8217;ve been living with a sporadic yet horribly annoying network disconnect issue with Vista.  I&#8217;ll get dropped off the network and the only way to [...]]]></description>
			<content:encoded><![CDATA[<p>into that damn pond.  That&#8217;s a quote from <a href="http://www.imdb.com/title/tt0109686/">Dumb and Dumber</a> in reference to the briefcase they were returning to Mary Swanson.</p>
<p>That&#8217;s the way I felt today about my laptop.  I&#8217;ve been living with a sporadic yet horribly annoying network disconnect issue with Vista.  I&#8217;ll get dropped off the network and the only way to fix is to reboot. After being disconnected for the fourth time today I finally was annoyed enough to try to figure it out.  I made two changes.  One being modifying the Power Management on the NICs so the OS can not turn them off to save power.  The second was a <a href="http://www.nerdlogger.com/2008/05/vista-network-bluesrepeated-network.html">tip</a> I found over at <a href="http://www.nerdlogger.com">nerdlogger.com</a> to disable the &#8220;autotuning.&#8221;  The command I ran was:</p>
<p style="padding-left: 30px;"><em>netsh int tcp set global autotuninglevel=disabled</em></p>
<p>Now&#8230;if this damn laptop falls off the network one more time I&#8217;m gonna drive across the Missouri river and see if this thing can float.  I&#8217;ve even defended Vista in the past.  What the heck was I thinking?</p>
]]></content:encoded>
			<wfw:commentRss>http://www.bumpinthewire.com/?feed=rss2&amp;p=228</wfw:commentRss>
		</item>
		<item>
		<title>It was only a matter of time…</title>
		<link>http://www.bumpinthewire.com/?p=227</link>
		<comments>http://www.bumpinthewire.com/?p=227#comments</comments>
		<pubDate>Wed, 16 Jul 2008 03:42:14 +0000</pubDate>
		<dc:creator>Mr. Bump</dc:creator>
		
		<category><![CDATA[NAC]]></category>

		<guid isPermaLink="false">http://www.bumpinthewire.com/?p=227</guid>
		<description><![CDATA[After having LANenforcer 2024s in our environment for almost a year now I finally came across something that I actually wish was different.  And that is the ability to turn on/off the IPS functionality per port pair instead of globally.  It would be nice to be able to turn it off for one port pair and on [...]]]></description>
			<content:encoded><![CDATA[<p>After having <a href="http://www.nevisnetworks.com/products.php?id=2">LANenforcer 2024s</a> in our environment for almost a year now I finally came across something that I actually wish was different.  And that is the ability to turn on/off the IPS functionality per port pair instead of globally.  It would be nice to be able to turn it off for one port pair and on for another port pair.  The basis for this?  We have our IPS in &#8220;detect only&#8221; mode right now.  Today El Sidekick got the external interfaces on the NetScaler demo unit configured.  I was looking at the dashboard and I started seeing SQL Slammer events being logged from outside sources.  After a momentary &#8220;oh shit&#8221; moment I realized what was happening.  I had a short lived freak-out because all of our LE &#8221;bumps&#8221; are behind firewalls at this location.  Seeing port 1433 traffic on a LE behind a firewall caused my heart to skip a beat&#8230;that port is not open on any of our firewalls!  Ahhh, young Grasshopper.  Do not get excited until you fully understand what you are looking at.  The NetScaler straddles the firewall.  As soon as the external IP addresses were live that pesky SQL Slammer traffic started being logged.  That is why I think it  would be nice to turn the IPS on per port pair instead of globally.</p>
<p>Side note #2&#8230;why the hell is that SQL Slammer worm still running wild?  That stupid worm came out over 5 years ago.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.bumpinthewire.com/?feed=rss2&amp;p=227</wfw:commentRss>
		</item>
		<item>
		<title>Its Good to Play Well With Others</title>
		<link>http://www.bumpinthewire.com/?p=226</link>
		<comments>http://www.bumpinthewire.com/?p=226#comments</comments>
		<pubDate>Wed, 16 Jul 2008 03:16:50 +0000</pubDate>
		<dc:creator>Mr. Bump</dc:creator>
		
		<category><![CDATA[Citrix]]></category>

		<category><![CDATA[virtualization]]></category>

		<guid isPermaLink="false">http://www.bumpinthewire.com/?p=226</guid>
		<description><![CDATA[I came across this article tonight about Project Kensho, a set of tools by Citrix Systems that allows virtual environments to be more independent of hypervisors.  I think Simon Crosby, the CTO of the Virtualization and Management Division at Citrix, is spot on with this.
Every large customer I talk to doesn&#8217;t want to bet the [...]]]></description>
			<content:encoded><![CDATA[<p>I came across this <a href="http://www.networkworld.com/news/2008/071508-citrix-aims-to-simplify-mixed.html?hpg1=bn">article</a> tonight about Project Kensho, a set of tools by Citrix Systems that allows virtual environments to be more independent of hypervisors.  I think Simon Crosby, the CTO of the Virtualization and Management Division at Citrix, is spot on with this.</p>
<p style="padding-left: 60px;"><em>Every large customer I talk to doesn&#8217;t want to bet the farm on just one vendor.</em></p>
<p>That&#8217;s us.  We plan on trying XenServer once time allows.  You&#8217;d have to think that XenApp will be better suited for XenServer than ESX, right?</p>
<p>Side note&#8230;am I the only one having trouble adjusting to <a href="http://www.networkworld.com">Network World&#8217;s</a> new layout?</p>
]]></content:encoded>
			<wfw:commentRss>http://www.bumpinthewire.com/?feed=rss2&amp;p=226</wfw:commentRss>
		</item>
		<item>
		<title>A Royal Pain in the…</title>
		<link>http://www.bumpinthewire.com/?p=223</link>
		<comments>http://www.bumpinthewire.com/?p=223#comments</comments>
		<pubDate>Tue, 15 Jul 2008 04:35:55 +0000</pubDate>
		<dc:creator>Mr. Bump</dc:creator>
		
		<category><![CDATA[Citrix]]></category>

		<category><![CDATA[NAC]]></category>

		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://www.bumpinthewire.com/?p=223</guid>
		<description><![CDATA[I tell you&#8230;when a person that knows every admin/root password in an environment leaves it is a real pain.  Well, its a real pain if you do the smart thing and change all of the passwords.  It is nothing short of ridiculous the number of passwords that are in a &#8220;mature&#8221; environment.  Today we managed [...]]]></description>
			<content:encoded><![CDATA[<p style="text-align: left;"><a href="http://www.bumpinthewire.com/wp-admin/None"><img class="alignnone size-medium wp-image-225 alignleft" style="float: left;" title="23303775" src="http://www.bumpinthewire.com/wp-content/uploads/2008/07/23303775.jpg" alt="" hspace="13" width="141" height="188" /></a>I tell you&#8230;when a person that knows every admin/root password in an environment leaves it is a real pain.  Well, its a real pain if you do the smart thing and change all of the passwords.  It is nothing short of ridiculous the number of passwords that are in a &#8220;mature&#8221; environment.  Today we managed to cut off access to our <a href="http://www.nevisnetworks.com/products.php?id=2">LANenforcer 2024s</a> with our domain accounts for a short while.  We changed a service account password and I was fairly certain that our LANenforcer 2024s used this account but a quick look through the user interface didn&#8217;t reveal where it was configured.  Fortunately there is a local account that can be used to log in if domain access is ever interrupted&#8230;like when you change the password that the LE uses to query the domain.  We found the place to change the password and all was well.  Well, almost all was well.  We did have a fallout on one of our LEs after the password change.  A defined user was unable to login to the interface after we changed this password.  All connections to the authentication servers passed a &#8220;test&#8221; but this user still could not log in to this one LE.  He could get in no problem to the other LE.  The solution was to remove his account from the LE and re-add it.  A little strange.</p>
<p>We had another strange thing happen today.  We are in the process of evaluating a <a href="http://www.citrix.com/English/ps2/products/product.asp?contentID=21679">Citrix Netscaler</a> and today while we were doing some configuration and testing it went &#8220;banana sandwich&#8221; on us.  I was in the middle of assigning an IP address to a VLAN and all of a sudden it went unresponsive.  El Sidekick went back to look at it and the display on the unit was dark.  It had to be rebooted.  That doesn&#8217;t exactly give a person evaluating a warm fuzzy feeling.  Also, when it came back up all of the external IPs and VLANs were gone.  El Sidekick swears he hit save on the config so I have to chalk this one up in the &#8220;strange&#8221; category as well.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.bumpinthewire.com/?feed=rss2&amp;p=223</wfw:commentRss>
		</item>
		<item>
		<title>Its About Time</title>
		<link>http://www.bumpinthewire.com/?p=222</link>
		<comments>http://www.bumpinthewire.com/?p=222#comments</comments>
		<pubDate>Thu, 10 Jul 2008 03:37:59 +0000</pubDate>
		<dc:creator>Mr. Bump</dc:creator>
		
		<category><![CDATA[Email]]></category>

		<category><![CDATA[Exchange]]></category>

		<guid isPermaLink="false">http://www.bumpinthewire.com/?p=222</guid>
		<description><![CDATA[I&#8217;ve decided after much reluctance to hone my Exchange skills and actually learn Exchange 2007.  I&#8217;ve been reading &#8220;Mastering Exchange Server 2007&#8221; by Sybex to get myself up to date with what&#8217;s new and different from Exchange 2003.  So far this afternoon I got about halfway through Chapter 1 which really is not very far but [...]]]></description>
			<content:encoded><![CDATA[<p>I&#8217;ve decided after much reluctance to hone my Exchange skills and actually learn Exchange 2007.  I&#8217;ve been reading &#8220;<a href="http://www.amazon.com/Mastering-Microsoft-Exchange-Server-2007/dp/0470042893/ref=pd_bbs_sr_1?ie=UTF8&amp;s=books&amp;qid=1215660977&amp;sr=8-1">Mastering Exchange Server 2007</a>&#8221; by Sybex to get myself up to date with what&#8217;s new and different from Exchange 2003.  So far this afternoon I got about halfway through Chapter 1 which really is not very far but I did read the part about the new features.</p>
<p>We&#8217;ve been talking recently around the office about &#8220;What the hell took you so long to do it that way&#8221; type things.  Like the peel back top on a bag of oreos that are out now.  What in the hell took so long to figure that out?  Or puting the console connection for a Cisco router on the front of the router instead of on the back.  What the hell took so long to figure that design out?  Some of these new features of Exchange 2007 fall into that &#8220;What the hell&#8221; category.  Some of the new features of Exchange 2007 that caught my eye were:</p>
<ul>
<li>Message classification - message transport rules can take action based on sender, recipient, content, etc, etc</li>
<li>Smaller transaction logs - tlogs decrease from 5120 KB to 1024 KB</li>
<li>Out of Office Assistant improvements - the ability to schedule when to turn it off and on</li>
<li>Autodiscover - users can put their name and email address in their Outlook profile and it will configure the correct Exchange server automatically</li>
<li>Edge Transport Services - spam filtering, virus scanning, recipient filtering, real time IP blocking, etc, etc</li>
</ul>
<p> </p>
<p>So there you have it.  I think a couple of those are key improvements&#8230;particularly the Out of Office Assistant scheduling and the Autodiscover for Outlook profile creation.  I&#8217;m late to the table with Exchange 2007 but better late than never is what I say!!</p>
]]></content:encoded>
			<wfw:commentRss>http://www.bumpinthewire.com/?feed=rss2&amp;p=222</wfw:commentRss>
		</item>
		<item>
		<title>A Change at the Top</title>
		<link>http://www.bumpinthewire.com/?p=212</link>
		<comments>http://www.bumpinthewire.com/?p=212#comments</comments>
		<pubDate>Wed, 09 Jul 2008 04:09:36 +0000</pubDate>
		<dc:creator>Mr. Bump</dc:creator>
		
		<category><![CDATA[VMware]]></category>

		<guid isPermaLink="false">http://www.bumpinthewire.com/?p=212</guid>
		<description><![CDATA[A well covered event today was the ousting of Diane Greene, VMware CEO and Co-founder.  She was replaced by somebody from Microsoft yada, yada, yada.  About the only thing I see this affecting is one less mind numbing key note speech at VMworld this year.  VMware will be kicking and slapping at Microsoft &#38; Hyper-V [...]]]></description>
			<content:encoded><![CDATA[<p>A well covered event today was the ousting of Diane Greene, VMware CEO and Co-founder.  She was replaced by somebody from Microsoft yada, yada, yada.  About the only thing I see this affecting is one less mind numbing key note speech at VMworld this year.  VMware will be kicking and slapping at Microsoft &amp; Hyper-V regardless of who the captain of the ship is.  What really catches me is the Co-founder being kicked off the thrown.  I guess that is the life you live when you sell out to &#8220;the man&#8221; and then go public.</p>
<p>You&#8217;ll notice at the top I&#8217;ve added a page to BITW.  You can now contact Mr. Bump via a form!  I&#8217;m really classing things up around here.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.bumpinthewire.com/?feed=rss2&amp;p=212</wfw:commentRss>
		</item>
		<item>
		<title>A Large Mountain to Climb</title>
		<link>http://www.bumpinthewire.com/?p=208</link>
		<comments>http://www.bumpinthewire.com/?p=208#comments</comments>
		<pubDate>Tue, 08 Jul 2008 03:43:55 +0000</pubDate>
		<dc:creator>Mr. Bump</dc:creator>
		
		<category><![CDATA[Routing]]></category>

		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://www.bumpinthewire.com/?p=208</guid>
		<description><![CDATA[We&#8217;ve got a doozy of a task in front of us.  We are losing a member of our team that has had the highest level of clearance for over four years.  That&#8217;s right&#8230;a whole heap of passwords have to be changed now.  Its going to be ugly.  Routers, switches, firewalls, servers, service accounts, sql accounts, [...]]]></description>
			<content:encoded><![CDATA[<p>We&#8217;ve got a doozy of a task in front of us.  We are losing a member of our team that has had the highest level of clearance for over four years.  That&#8217;s right&#8230;a whole heap of passwords have to be changed now.  Its going to be ugly.  Routers, switches, firewalls, servers, service accounts, sql accounts, application accounts, so on and so forth.  There will be some fallout but I think through due diligence we can keep the collateral damage to a minimum.  If its in the name of sound security isn&#8217;t it worth it?</p>
<p>Thought I&#8217;d share a few tips from over the holiday weekend involving El Sidekick replacing a router.  For his first time it went fairly well except for a few &#8220;Doh!&#8221; moments.</p>
<ul>
<li>&#8220;copy run tftp&#8221; is your friend.  Backup the config.  Its easy and free.</li>
<li>If you change the configuration register to recover a password, change it back after you&#8217;ve recovered the password.</li>
<li>When changing a password or deleting a local user, start a different connection to test the change.  Don&#8217;t exit out of your current connection.  You may lock yourself out of the router!</li>
<li>Be careful with the &#8220;write&#8221; or &#8220;copy run start&#8221; statement.  If you&#8217;re not sure of something you can always reboot the router and go back to the startup config.</li>
</ul>
<p> </p>
<p>Hopefully next time these tips will help!</p>
]]></content:encoded>
			<wfw:commentRss>http://www.bumpinthewire.com/?feed=rss2&amp;p=208</wfw:commentRss>
		</item>
		<item>
		<title>Happy 4th of July</title>
		<link>http://www.bumpinthewire.com/?p=207</link>
		<comments>http://www.bumpinthewire.com/?p=207#comments</comments>
		<pubDate>Thu, 03 Jul 2008 21:14:37 +0000</pubDate>
		<dc:creator>Mr. Bump</dc:creator>
		
		<category><![CDATA[Nonsense]]></category>

		<guid isPermaLink="false">http://www.bumpinthewire.com/?p=207</guid>
		<description><![CDATA[Mr. Bump has been on hiatus this week. For good reason as well&#8230;after doing the BBQ contest last weekend I ended up with tonsillitis.  I won&#8217;t get into the details on how I got it.  There is a valid reason that Mrs. Bump has been treating me like an idiot the past few days.  Let [...]]]></description>
			<content:encoded><![CDATA[<p>Mr. Bump has been on hiatus this week. For good reason as well&#8230;after doing the BBQ contest last weekend I ended up with tonsillitis.  I won&#8217;t get into the details on how I got it.  There is a valid reason that Mrs. Bump has been treating me like an idiot the past few days.  Let your imaginations run wild.</p>
<p>We did well in the BBQ contest.  We finished 29th overall out of 187 teams and we get &#8220;a call&#8221; in brisket with a 4th place finish. Getting a call at a big contest like that is a pretty big deal so it was exciting for us to accomplish that.  Unfortunately myself and the two other husbands of the &#8220;Three Angry Wives&#8221; missed the call.  We figured we save some time and go pack about halfway through the awards ceremony because we figured we wouldn&#8217;t finish in the top 10 of any category.  Boy were we wrong.  Then the insanity continued after everyone got back and we were celebrating.  A team member put our ribbon and prize money envelope in the truck of another team and they drove off with it.  Luckily we hunted it down yesterday and took possession of it today.</p>
<p>Here is how we placed in each category:</p>
<p>36th in Chicken</p>
<p>52nd in Pork Ribs</p>
<p>142nd in Pork Butt</p>
<p>4th in Brisket</p>
<p>44th in Sausage</p>
<p>29th Overall</p>
<p>Not to shabby for our first competition ever.</p>
<p>Have a great holiday weekend!!</p>
<p> </p>
]]></content:encoded>
			<wfw:commentRss>http://www.bumpinthewire.com/?feed=rss2&amp;p=207</wfw:commentRss>
		</item>
		<item>
		<title>Burning Both Ends</title>
		<link>http://www.bumpinthewire.com/?p=206</link>
		<comments>http://www.bumpinthewire.com/?p=206#comments</comments>
		<pubDate>Wed, 25 Jun 2008 03:52:02 +0000</pubDate>
		<dc:creator>Mr. Bump</dc:creator>
		
		<category><![CDATA[Citrix]]></category>

		<guid isPermaLink="false">http://www.bumpinthewire.com/?p=206</guid>
		<description><![CDATA[This has been quite a week so far.  Not only is it the week of the BBQ cookoff I&#8217;m in but work has been a real butt kicker.  Between two Exchange outages and an apparent over-saturation of a storage area network causing multiple cluster problems there has been plenty to do.  The XenApp session reliability [...]]]></description>
			<content:encoded><![CDATA[<p>This has been quite a week so far.  Not only is it the week of the BBQ cookoff I&#8217;m in but work has been a real butt kicker.  Between two Exchange outages and an apparent over-saturation of a storage area network causing multiple cluster problems there has been plenty to do.  The <a href="http://www.bumpinthewire.com/?p=196">XenApp session reliability issue</a> has been resolved.  I was lucky enough to have the product manager for XenApp Platinum Edition, Jill Alexander, leave a comment.  The resolution was to apply <a href="http://support.citrix.com/article/CTX116289">Hotfix Rollup Pack PSE450W2K3R02</a>.</p>
<p>As I mentioned earlier its BBQ week.  If anyone is going to be in Lenexa, KS at the Great Lenexa BBQ Battle stop by pit 226 and have a beer with Mr. Bump.  This isn&#8217;t grilling a few brats in your backyard.  This is a two day gut check.  We will check in at 7:00 AM Friday morning, finish getting set up as soon as possible to have the smoker fired up by about noon to start smoking ribs for a 5:30 dinner.  Then we party the rest of the night and start cooking the competition meat at about midnight or so.  Its an all night affair and is going to be real test of the stamina.  Mind over matter.  If you don&#8217;t mind it doesn&#8217;t matter.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.bumpinthewire.com/?feed=rss2&amp;p=206</wfw:commentRss>
		</item>
		<item>
		<title>Fear?  Not Bloody Likely.</title>
		<link>http://www.bumpinthewire.com/?p=201</link>
		<comments>http://www.bumpinthewire.com/?p=201#comments</comments>
		<pubDate>Sat, 21 Jun 2008 05:07:35 +0000</pubDate>
		<dc:creator>Mr. Bump</dc:creator>
		
		<category><![CDATA[NAC]]></category>

		<guid isPermaLink="false">http://www.bumpinthewire.com/?p=201</guid>
		<description><![CDATA[From another SSAATY post commenting about a GNUCITZEN post about fear and the security industry.  Fear drives the security industry?  Not bloody likely!  I can&#8217;t speak for the rest of humanity but I know it doesn&#8217;t drive me.  Do I lock the front door of my house when I&#8217;m gone because I&#8217;m afraid of my [...]]]></description>
			<content:encoded><![CDATA[<p>From another <a href="http://www.stillsecureafteralltheseyears.com/ashimmy/2008/06/is-fear-the-onl.html#reply">SSAATY post</a> commenting about a <a href="http://www.gnucitizen.org/blog/fear/">GNUCITZEN post</a> about fear and the security industry.  Fear drives the security industry?  Not bloody likely!  I can&#8217;t speak for the rest of humanity but I know it doesn&#8217;t drive me.  Do I lock the front door of my house when I&#8217;m gone because I&#8217;m afraid of my things being stolen?  Heck no.  I lock my front door because I want to KEEP my things.  I&#8217;m not afraid of my TV showing up missing one day.  I don&#8217;t want to go through the hassle of filing insurance claims, police reports and coughing up the dough to replace my items.  It has nothing to do with fear.  It has to do with logic.  The same applies to the tech security world.  I/We do not deploy security measures because we are afraid.  We deploy them because we use logic and reason to realize what is good for business and our well being.</p>
<p>&#8220;An ounce of prevention is worth a pound of cure.&#8221;  &#8212; Benjamin Franklin</p>
]]></content:encoded>
			<wfw:commentRss>http://www.bumpinthewire.com/?feed=rss2&amp;p=201</wfw:commentRss>
		</item>
	</channel>
</rss>
