Security is not a product, but a process.

learn more… | top users | synonyms (1)

0
votes
0answers
20 views

How to sandbox internal IPs on the same subnet with one to one NAT [on hold]

I am curious as to what technologies are employed to accomplish this with vendors that provide this service. What kind of LAN subnet restrictions can be imposed so that 2 hosts on the same internal ...
8
votes
6answers
10k views

Group Policy: Administrator Rights for Specific Users on Specific Computers

I'm a programmer stuck trying to administer an Active Directory setup for a small company. The Domain Controller is running Windows Small Business Server 2008. We have a staff of field workers using ...
1
vote
2answers
21 views

Opening outgoing ports on dedicated machine

I have a website where I have been working with another person on a game server listing site. It queries the game servers and shows information etc. Anyway upon talking to the creator of the script he ...
1
vote
2answers
1k views

Bitlocker drive encryption on AWS Windows instance

I'm trying to figure out how best to protect the data of a single Windows Server 2012 instance on AWS and according to "AWS_Securing_Data_at_Rest_with_Encryption.pdf" it says: "Encrypting Amazon ...
3
votes
2answers
1k views

Windows 2008 R2 Server Security Log filling with event 521

I understand that status code 0xc0000008 means Invalid Handle. How do you resolve this issue (besides a restart)? What is the best way to determine the cause for this? Log Name: Security ...
0
votes
0answers
10 views

Linux client for pki certificate auto enrollment from Windows CA

I just set up a Windows Server Certificate Authority. I would like to auto-enroll Ubuntu Linux computers for certificates. Can anyone share the available client options? I found this (old) technet ...
-2
votes
0answers
22 views

Securing the server/domain against sql injection bot [on hold]

I recently had a break-in attack on one of my website, that was performed by a sql injection bot. I was quite luckily to even know about it, since I was at my computer when it happened. What is the ...
3
votes
8answers
1k views

Why do https connections take longer to establish than straight http connections?

Why is it that Secured HTTP Connection (https) is Slower then than typical HTTP (http)? Just interested in knowing only. Thanks.
1
vote
2answers
33 views

building a SIEM, should I send logs or get them from the gathering machine?

I am working in a Linux environment, I would like to gather all the logs from the machine pool on a unique machine X. There are several log files I need to move and I am not sure about the way I ...
0
votes
2answers
3k views

EC2 instance always ask me to enter passphrase for the pem during connection

The pem file is generated by AWS console I was able to connect using the EC2 remote web interface, using the same pem file The permission of pem is 600 already Error.. ssh -i ~/test.pem -v ...
0
votes
0answers
9 views

Access to “Windows Security” logs for “eventlog” group

Security logs are not available for users in eventlog group. I've checked this down to security event log file. eventlog group has all permissions. Unfortunately I cannot add my user to ...
0
votes
0answers
14 views

Why does the Azure Portal not have session timeout? [migrated]

We have been using Azure for almost 5 years, and we are very concerned about security. One thing I really do not understand is why there is no session timeout in the Azure Portal (e.g. automatically ...
0
votes
1answer
23 views

Protect Chef config when a node is compromised

Imagine that one node of a system gets compromised. If I understand correctly hacker will be able to get all configs for all servers in a system using chef's API. Is that correct? If yes, is there a ...
-1
votes
0answers
13 views

things to do to ensure that data is secured on my virtual server [on hold]

I'm not much of an administrator but I'm maintaining a virtual server with Ubuntu OS where my website is hosted. I often connect to it using ssh, ftp and whatever the protocol MySQL uses. As my ...
2
votes
3answers
20k views

How to enable Audit Failure logs in Active Directory?

I have a user account that keeps on getting locked out. I am trying to find out what caused it. So I want to enabled failure audits in event viewer as a start. But, I don't know how! How do I enable ...
1
vote
2answers
564 views

Encrypting SMB traffic with Samba

We use Samba on Ubuntu 14.04 LTS as a PDC (primary domain controller) with roaming profiles. Everything works fine, except for if we try to enforce encryption via setting: server signing = ...
-1
votes
1answer
25 views

Use 1 executable file to be distributed accross 100 client PROS and CONS guys? [on hold]

for easy updates of our internal system I'm planning to use just 1 exe located at the server and just put a shortcut in my clients pointed at the exe in the server. PROS and CONS guys? Server 2008 R2 ...
2
votes
1answer
256 views

Host Header Attack with reverse proxies

So I was tasked with researching a problem that was identified by an Acunetix web security scan. Here are the details about the scan: Host_header_attack Automated Detection of Host Header Attacks I ...
-1
votes
0answers
19 views

Router suggestions for small business capable of blocking https and/or with netflow [on hold]

I'm new in network management. I need a new business router (15 - 50 employees), preferably cisco because im much more familiar with it. Our current router is a Netgear WNR834B wireless N-router. But ...
3
votes
7answers
1k views

What can I do to replace FTP?

I'd like to replace FTP access with systems that are more secure. Sending passwords in plain text with no encryption is unacceptable and with single-sign-on growing, becoming less acceptable daily. ...
1
vote
1answer
951 views

403 forbidden error going through aws load balancer

I am running a IIS 7 Server behind an aws load balancer. I am using a Verisign SSL certificate which is installed properly but whenever I put in the URL, or the DNS name of the load balancer I get a ...
0
votes
0answers
14 views

Prevent Remote Application Install On Mac OS X [on hold]

I was wondering if there's way to prevent software being install remotely on Mac OS X. I freshly reinstall the OS on the Mac, but my company seem to be still able to install software remotely. A few ...
2
votes
1answer
62 views

IIS 7.5 and above - enable schannel cipher DHE_RSA_AES_128_GCM following patch KB2992611 - Is this safe?

I recently became aware that following the release of patch KB2992611 in November, Microsoft made available four new cipher suites for schannel (and thus IIS); TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 ...
0
votes
1answer
18 views

trace apache access_log file record called by which html or php file

I figured out that my access_log have funny records 118.101.120.86 - - [20/Apr/2015:23:20:57 +0400] "\xed3.\xbd\xd5\xeb\x16\xca\xa4" 200 378 146.185.239.100 - - [20/Apr/2015:23:31:00 +0400] "GET ...
5
votes
1answer
115 views

Error connecting ESX 5.0.0 to domain

I am trying to connect an ESX 5.0.0 to our Domain Controler, in order to give a Domain group specific roles security. But I do not see any groups after the host connects to the domain. Under ...
3
votes
1answer
62 views

VLAN isolation failure with HP Procurve, Juniper Netscreen

I'm having problems with hosts being able to ping other hosts they shouldn't be able to communicate with. Fairly simple network - relevant hardware: HP Procurve 2810-24G switch Juniper Netscreen ...
1
vote
1answer
49 views

Weird server behavior, fear security breach but nothing on logs

These days my hosting (a2hosting) had an issue with the node hosting my VPS and during this period my users noticed a weird behavior other than the several restarts that happened while there were ...
0
votes
1answer
62 views

How can I disable specific file type uploads globally in Apache?

In order to secure my webserver, I would like to block specific file types from being uploaded globally, independent of what FTP users configure in their webpages. Is there a way to globally block ...
1
vote
2answers
31 views

Setting up a network for a Host Server and it's Guest OS

Is there a standard as to how one sets up networking on a Server Host that will have virtual servers within? In the past I've used virtualmin and set up the nic to have multiple alias such as eth0:1 ...
5
votes
2answers
2k views

Applocker vs Software restriction policy

The goal is to prevent users from running unwanted programs on a terminal server. I have read many articles from Microsoft and others saying that the new Applocker feature is 100% better than the ...
-5
votes
1answer
23 views

Is it possible to change wireless router BSSID? [closed]

I suspect someone is trying to hack our wireless network. I've stopped broadcasting the SSID, but assuming they've already attempted to gain access in the past they could have the BSSID stored, which ...
24
votes
1answer
3k views

Is MariaDB a secure replacement for MySQL?

I've been using MariaDB, "an enhanced, drop-in replacement for MySQL" on my Debian stable servers for years, because of its increased performance. However I've noticed that it appears to lag with ...
0
votes
5answers
1k views

Recommend an SFTP solution for Windows (Server & Client) that integrates well with Dreamweaver [duplicate]

Possible Duplicate: SSH / SCP Server on Windows Could you please recommend a secure FTP solution for updating files on a remote windows server from windows workstations? We would like to ...
-2
votes
0answers
29 views

Trying to stop cpanel from sending me useless weekly emails [closed]

I receive the following email from my server about once a week as follows: [check_cpanel_rpms] Altered RPMs found on example.com From: "cPanel on example.com" <cpanel@example.com> ...
6
votes
2answers
1k views

Is CRON secure?

I want to install cron on my live web server to run a daily backup script of a local folder. Are there any security considerations I need to be aware of when installing cron? My web server uses ...
3
votes
4answers
6k views

How Ubuntu cloud version enforces the “no root login” over ssh?

I'm looking to tweak ubuntu cloud version default setup where is denies root login. Attempting to connect to such machine yields: maxim@maxim-desktop:~/workspace/integration/deployengine$ ssh ...
1
vote
1answer
2k views

MS SQL Server configured for secure (SSL) connection allows non-secure connection from JDBC Client

I need to connect to the MS SQL Server 2008 r2 using the secure communication. I have been able to do the same using the following connection string: jdbc:sqlserver://<<db server ...
3
votes
7answers
11k views

How can I prevent explorer starting as a shell in a kiosk setting?

I'm using an alternative shell (a simple program that restarts a kiosk application if it dies) for a project I'm working on. I've set it via the Shell value in the registry, and I'm not using ...
-6
votes
1answer
103 views

Does a tool like ansible make it possibly to get a secure server, without knowing a lot about security? [closed]

If I modified something like this into a server similar to the one described here with a minimal set of services (what you need for ssh, basically) would it be reasonably secure? sovereign: A set ...
9
votes
6answers
668 views

DDoS. Are we that helpless? [duplicate]

With recent DDoS incidents related to wikileaks, I can't help but feel that pretty much all sites online are very vulnerable to such attacks. Visa, MasterCard (to name a few) have shut down because of ...
0
votes
0answers
24 views

How can I setup a High-availability cluster [closed]

I am looking to improve security for the system on my webserver, I have been told to look into 'HA SETUPS' I have done some research and I am still no closer to actually achieving this setup... I am ...
1
vote
0answers
30 views

Am I being picked up by a proxy sending my IP/request URLs to China? Sketchy

I spun up a new machine on Digital Ocean today which is pre-configured with a web environment. I made an initial request to the new site and found the following (IP address redacted) in my nginx ...
3
votes
4answers
2k views

WMI permissions: Select CommandLine, ProcessId FROM Win32_Process returns no data for CommandLine

I am gathering performance data via WMI and would like to avoid having to use an account in the Administrators group for this purpose. The target machine is running Windows Server 2003 with the latest ...
0
votes
0answers
16 views

Rogue external service showing up in New Relic that I can't track down [on hold]

I am working on a CentOS 5.1 dedicated server that uses WHM/cPanel to host 75'ish sites. There is an external service, matvsub.wang, that is showing up in New Relic external services that has a ...
6
votes
2answers
671 views

Do I have to buy a second wildcard certificate for a subdomain?

We already have a wildcard certificate for *.mycompany.com. Our network has hosts that are only reachable internally. All of them belong to the internal.mycompany.com subdomain. There is a private ...
3
votes
4answers
4k views

Unknown and strange RDP successful logins in EventViewer

I have a Windows Server 2008 R2 with a valid IP, and recently I've found hundreds of unknown and strange RDP successful logins logged in EventViewer. Here are some details: They are not similar to ...
0
votes
1answer
10 views

Secure elasticsearch but allow remote CRUD

I'm going to run a bit of software on server A to add and remove entries from elasticsearch on server B. How can I allow these remote create and delete operations, but still keep ES secure? Is ...
-1
votes
0answers
17 views

My VPS sends huge spam :( [duplicate]

since I am not tech guy I am trying to find someone who can help me but with no success so far. My VPS sends spam. Like a lot. 1,4TB in two days even though we restart immediately it when we see huge ...
1
vote
2answers
41 views

How can I stop ansible from writing passwords to the logfiles?

I am setting up a MySQL server and want Ansible to set the mysql-root password during installation. With the help of the internet I came up with this solution: - name: Set MySQL root password before ...
0
votes
2answers
4k views

Windows: disable remote access of local drive, even by domain admin

We have a network of Windows 7 PCs that are managed as part of a domain. What we want is for the domain admin to be unable to view the PC's local drive (C:) unless he is physically at the PC. In ...