Secure Servers

Security Checklist for Login Module

2013-07-07T12:02:00.002-07:00

While a programmer is proceeding towards architecture of login module design and development, following checklist is quite important not only in terms of security but also to avoid frequent updation in the architecture of login system.

On password reset, all Login Remember must be removed automatically
On password reset, user must be notified on his mail that his/her password has been reset.
On logout, blockage of pressing backward and again sending login credential information must be taken care.
User can check remember me option, but a special variable must be saved instead of password or user id as cookie in the browser.
User can be asked to enter password of at least 6 characters.
After a gap of few months users can be prompted to update their password credentials based on their record over the frequency of invalid password entries.

While sending login details to the user, the data must be sent as POST method. When a login credentials are being sent using normal post method, it is necessary to disable back button or clear previous history.

However with the usage of ajax post method, this browser security mishaps are easily avoidable.

Citrix Terminal Services

2011-04-02T04:04:00.000-07:00

The virtualization is being carried out in various ways by the different organizations. And it is the ask of current portfolios in the end-users requirements. Not only it helps in better monitoring and better performance optimization of the remote desktop, it helps in reducing the overall cost investment and also increases ROI.

The virtual terminal servers have many productive outcome:

All the users are not using maximum RAM, cache, bandwidth, etc at the same time. So every user has the opportunity to better utilize the infrastructure of the cloud resources with the same low cost investment. Here the resources which are not in use are always available to each user. The truth is that any user needs high amount of cloud resources in web hosting and remote login services only for less than 5% of their service period. So the idle infrastructure are available to the other users; may be from different demography, geographic location, business categories altogether.
Citrix allows to better monitor the performance of the users remote desktop and the adding new features, resources, taking back-up is quite effective.
In case any fault is detected then Citrix can be configured to send an email alert to the administrator.
Citrix virtual services provides better performance than their counterpart traditional terminal services. Also it can easily allow the administration of users RDP even when it grows beyond 100 users.

Virtual Dedicated Server Backup

2011-03-07T09:05:00.000-08:00

On a dedicated or virtual dedicated server environment when one runs custom modules, hosted exchange and hosted WSS version of SharePoint, you might be doing the internal backups but there are chances that you may be doing the wrong files backup. So in case of crisis there is completely no one to help.
Its better to setup the backup parameters at the initial stage so that not to forget any basic step.

To make local back-ups on the server's hard drive then have QB Online grab a series of 7 rolling backups(daily back-up with weekly roll-over) off the server.

Back up straight to QB Online and you only get one version.... no history.

Decide the barriers first before moving to the cloud? Branding, Platform, or Cost? To a lot of extent all of them have important role to play during a productive decision making.
As with any change initiative getting people fully on board and sharing a common vision of the future is vital and that means migrating mindsets and behaviors to ensure successful deployment and effective usage across the organization.

Backup options are always there:

You can take a complete backup of the OS, as you have dedicated server running virtually. But now this will involve a lots of unnecessary hard disk storage space accumulation.
Second you can do is to take a record of the version of the OS and only take backup of the Encrypted file only, viz. the database of the clients application.

In fact, the practice should be to take a global weekly/monthly back-up of the version of the OS and daily back-ups of the daily transaction data file. This way the risk of data loss is minimized under any case. Also practice should be to keep every groups of clients must be isolated from the central part and must be monitored separately so that invasion in one will leave other groups unaffected.
For this some criteria must be chosen to categorize the clients group on basis of:

the frequency of their usage/visit,
types of resources often used by them,
interaction level with their IT managed applications present,
Type of service opted for,
Security logs and loop-holes for them by analyzing their behaviours

Asset Management by Cloud Servers

2011-03-07T08:08:00.000-08:00

Cloud Servers are just one step ahead you. Only a small measures to rethink. Before you really begun the exploratory journey, you just need to make sure of receiving the mentioned services from your service providers:

Data Security: AES encryption method.Whether they take extra care to keep your client records safe by closing any and all entry points to our internal network. Must offer data security and managed backup service to provide end-users the highest level of data security available.
System Security
Instant Scalability
Dedicated Servers : Benefits
Location : US
Simple to Use API
Service Guarantee
Control Panel Support
High Bandwidth for our Data Center
Instant Setup
Weekly Backup with no data loss
Encrypted Services
Accounting with Cloud Computing
Idea to Management
Advantages of Concurrent Users

Linux Security for Wamp

2011-03-07T07:36:00.000-08:00

Normally, PHP files are developed on Windows platform using Xamp, Wamp, or so and then they are hosted on a Linux system running WAMP/XAMP/LAMP, but fairly treating the security issue it does not matters Windows or Linux? A malware program can be so potent that it can tempt the administrator to give a command on Linux that will allow the program run its installation with the Administrative rights.

Now on the malware programs are built with such care that even they do not let know how they are trying to hack the important data. They actually keep a mirage in front of the administrator which the administrator actually cleans and removes them and in the prevailing curtain, they actually inject and monitor the important ports.

Now the question is how to fight with these issues once the Server gets infected.
From my opinion just plug-out the server from all internet connection. And then go through the following steps:

Block all the ports.
Identify the potential inject using grep command or so.
Use the back of the module with no infection. Replace them if version and OS types are matching. Do not forget to take appropriate backups with each of the "root" user command that you provide.
Now your clints server is running.
Open only those ports that that are actually needed by clients to view their data.
Watch the modified date of the Web Server infected modified module,
Now you can go through the logs to see which of the commands have been issued by the "root" user during that time

If all your files have been injected to call a particular file, then in a jiffy you just take a back-up of that file:

edit that global file and delete its entire content,
save it and through "root" user change its permissions using chmod,
Make that file write protected

When done with all the security measures, never forget to reset important passwords.

Cloud Computing Shared Resources

2011-03-06T12:07:00.000-08:00

Cloud Computing is Internet-based computing, whereby shared resources, software and information on remote web server are provided to computers and other devices on-demand, like the electricity grid. End-users are flexible to move out any where they just need an internet connection. No need for inhouse office to store data and other information.

There are many factors as you do not need to manage the servers, it is reliable and flexible. IT infrastructures are manged automatically. Files are shared with your clients and are moved back and forth on the server itself.
Users can login concurrently and can work on the same file at the same time.

The servers are protected via Security appliances which have Firewall, Anti-virus, Anti-spyware, Anti-phishing, web blocker, Attack Blocker and Protocol Blocker besides dual anti-virus scanners even before the internet traffic reaches the servers.

VPN Access to Enterprise Software

2011-03-06T11:59:00.000-08:00

Such kinds of services are there where trying to do a download of new leads in the server.. can print from local computer but mail merge in the server slows to a hault.

Suppose we have offices in 5 cities in Texas. We all connect to Houston by VPN to access our enterprise software that runs on a SQL server database. I am researching the possibility of using Cloud Computing to host the SQL Database and offer Terminal Services as a virtual desktop.

Another angle, the online quickbooks has one ID online login that mult people can use just not at the same time.....!! each user has his/her own login information for the desktop log in... each user has their own level of security in regards to the information they are allowed to view
Now will that all work the same on the online..... or when you type in the online user id will quickbooks automatically appear; with no second log in, also if in the future we add another business/ quickbooks application will be able to use the same host online ID or will we just have another one.

You can access mutliple QB files with one online ID, but if you want other person to access your QB files, you will need a second login if both of you want to access the QB simultaneously.

Virtual Desktop Cleanup Process

2011-03-06T11:51:00.000-08:00

Sometimes you might have accessed QB via the virtual desktop and the cleanup process is running. It is easier to condense the QB file. Problem with your file may be that you cannot print certain reports b/c it takes too long and the program freezes up. And then you may stick several of the following issue:

Netdrive doesn't seem to be working,
What happened to my Outlook set up?
Why can't I copy and paste between the Server and my PC?
What happened to my client data folder?
Outlook suddenly isn't set up any longer?
I can't copy and paste from the server to my PC.
My client data folder disappeared from the desktop.
I am getting the following error message when I try to close out the compilation letter in financial services: address 0013F033
you have to go into financial statements. when you do you will see a compilation letter on the screen. when you try to close the letter out by clicking on the x in the upper right hand corner the error message will pop up.
Get your desktop remote controlled by tech experts to screw up your RDP connection.

Access Violation for Financial Performance Center

QB is not always updated to the latest release automatically
- You need a QB professional who looks after the updates and takes proper measures so that you need not invest your efforts in that issue.

Doing a comparison; to get yourself and your clients onto this type of service. Other than cost, you need to take a tour of the service, performance and consistency. And this is not possible unless you choose the right IT support.

So the question is:

are there issues with updating QB releases?
if you switch from the online version to a Windows desktop version- 2010 that Mac users at a different location will be able to log in from their MAC computers and access and work on the file.
The new issue is that we've had to make several backups of a very very large file.

Since I cannot move files around any longer I will have to ask support each time this is needed. This is going to cause hardship on tech support.
I check many folders manually and you have access to all of them
I do not see any change in the permissions. YOu still have full access to the folders
are you trying to move the file when they are open in QB?

Best Hosting Practices

2011-03-06T11:06:00.000-08:00

What can be termed as the best hosting practices?

Best hosting practices criteria to moderate:

Space utilization
Security Proxy Check Switching
Automatic Back-up Server Control
Smart Back-up Time Cycle Sharing
Bandwidth Sharing

A quality performer has the self talking ability. Talking to himself he troubleshoots his problems & keep adding to the quality of his performance.

Many things must be taken into the consideration prior to decide to go for the programs available for use. There are lots of problems with the current Mac and other Linux based services: difficulty in transferring to your back-up and copy, the interface is different (like the 1999 version of the pc version), online banking is not at the same level, and it doesn't have networking (multi-users). The 2009 version is due out in October and is supposed to have better online banking and the navigators are supposed to be similar to the pc version. Networking has not been addressed. So, depending on what you need, the 2009 version my satisfy your needs.

Other packages like MyOB may be more than good as an alternative. They works exactly the same on PC and Mac, but there is a learning curve when moving from one package to the other. It should be able to handle what you need. The biggest frustration I find in some packages is the reporting is a lot more "locked down" than in QuickBooks.

If you love the pc product, you can always run it through Parallels or use a companies services to host the windows version. Depending on the size of your company and how much you want to spend, online programs may be a good way to go too. Net Suite or NetBooks might be good options for you as well.

Now that the world is getting confined into the iPad/iPhone and other technologies and the technology getting degraded quickly with the evolving new ones in this competitive market situation, you need to to make an immediate decision on the practices to use. These are only a glimpses of what/how a hosting practices can be helpful in!

Topics of Interest:
Categorized Optimization	Virtual Servers Load Balance

Secured Applications on the Cloud

2011-03-01T11:24:00.000-08:00

There are a lots of opinions on whether to migrate your entire data onto the cloud. A further discussion will let you choose the best option.

Normally, a small biz like to invest all the small input and needs required to run the business smoothly. At this time a couple of Top Level Management have direct interaction with the bottom level executives. The control flow is fantastic. When the organization starts growing, there comes middle level managers, and here starts the fun, this does not stops here either, this is only beginning of the complexities.

Now organization looks forward for outsourcing, and more security mechanism which could be such robust and also optimized that not even top-level managers could break into any of the loop holes.

At the beginning an organization wants to keep everything into his own control. But slowly-and-slowly everything becomes quite fleshy and confusing. Here comes the need of specialization and cloud hosting is one of the techniques where one can put their data and get their applications insured.

This is the first step to switch towards the new evolving technology which frees the organization of much of the day-to-day security maintenance and updates look-up. Here a lots of experts are available to check for the potential risks and identify, correct them and provide regular feedback to the end-users prior to the risk invasion.

Password Security

2011-02-21T10:12:00.000-08:00

Password security is one of the headache for all the organizations. Now each organization are using IT services, so top level management have sleepless nights when they start thinking over security and firewall settings for their office.

However when thinking of password security unknowingly they indulge in such practices that in fact makes their data more prone to attacks from the potential risks and hack.

In fact small ?/ unique passowrds pay more to the risks encapsulation and security than the lots of bad practices used / prevalent in lots of the companies. In making the system more robust, people with incomplete technical know-about are most likely to add to the potential risks. The best option is to have the username and password to be unique and the most you can do.... one can follow these steps to make your system more robust:

Create unique Username/Passowrd.
Take everything into the session.
Keep a note of the username which has been accessed more number times with wrong passowrd and use a third option as a field of input, if user enters incorrect passowrd authentication consecutively for three times.
Here using smart scripts using Cookie... one can use AI to find the fault skewness for each userID and place with the userID so that it can be regularly updated keeping it average for the user response to the login for his/her ID. This scripts can know whether to block the login to the user or not and next time when he logs in you can tell the user itself that your login authentication was challenged. So that they can change the passowrd in that case.

Security has a lots more than only login. Changing the Password or recovery email ID is much more cumbersome than the hacking of user details. The smart scripts using AI can be better programmed to find if the user trying to change his her recovery emailID must be allowed or not. These fields can be decided on a lots of factors:

Scripts must save the user's preferences his nature of moves when logs
Even if user changes the recovery password, his old email ID must be attached there only for atleast some time until the actual user re-enters the ID.
How long a user takes to reach his account can be better calculated with the smart scripts and data trends for the individual IDs.

New Natkhat Club

Location Coverage for Online QuickBooks

2011-02-18T19:48:00.000-08:00

Instant Scalability As Benefits of online quickbooks

The online quickbooks has one ID for online login that multiple users can consider it just not at the same time...!! each user has their own login details for desktop log in... each user has his/her own level of security restrictions as to the context of information they are allowed to view.

Either a Multi User (2 users) license or 2 single users licenses

When you type the online user ID the quickbooks automatcally appears. Also if in future the user adds another business/ quickbooks application they will be able to use the same host online ID. One can access multiple QB files with the online ID, but if user want other person to access his/her QB files, they will need a second login if both of the users want to access the QB simultaneously.Users can login concurrently and can work on the same file at the same time.

Reduced Managed Services Cost

There are many factors as you need not need to manage the servers, online QuickBooks is reliable and flexible. IT infrastructures are manged automatically. Files are shared with your clients and are moved back and forth on the server itself; included integrated with the service which rather adds to the faster result.

Location Coverage

You are flexible to move out any where you just need an internet connection.

No need for inhouse office to store your data and other informations and removes back-up management all together at once. Access all of your estimates and invoices from a remote location with quickbooks web hosting