2,383 reputation
417
bio website vaccinetllc.blogspot.com
location
age
visits member for 2 years, 9 months
seen Jun 19 at 19:16

Paul Ackerman, CISSP, GPEN, GCWN, CCNA, MCP, A+. Owner - VacciNet LLC a Network & Security consulting firm, SANS Mentor, Network Supervisor for the Administrative Office of the Courts in the 20th Judicial Circuit of Florida.

Paul is a veteran of IT. He has over 13 years of experience in the IT world ranging from desktop support to his current role, managing the computer network for the Administrative Office of the Courts in the 20th Judicial Circuit, Florida. He is also owner of VacciNet, LLC a network and security design consulting firm and also works as a Mentor for SANS.

His background includes server and network administration, security design and practices, business analysis and software development.

Paul has been primarily responsible for design, implementation and troubleshooting in many different areas of IT such as Active Directory, Exchange, IIS, Networking, Firewalls, SQL, DR and BCS planning and Incident Response.

Tasked with doing much more than security, he has strived to find ways of incorporating security best practices into the daily lives of sysadmins and the average user. His desire is to share his knowledge with other systems administrators, managers and security practitioners in order to improve the overall position of public and private networks while continuing to form new relationships and learn from others in the field.

Currently, Paul holds the Certified Information Systems Security Professional (CISSP), GIAC Certified Windows Security Administrator (GCWN), Cisco Certified Network Associate (CCNA), MCP and A+ certifications. He has been pursuing a BS in Computer Science in the evening hours while working full-time and obtained the CISSP and GCWN certifications during the same period.

Paul is a self motivated, hard working, patient and fast-paced, fun individual who is excited about the opportunity to share his knowledge.


Jan
2
comment Securing LAN by restricting New Users
mac address security is weak as users can unplug a desktop from a port, spoof its mac and connect to the network. It is also an administrative nightmare when machines get moved and replaced. NAC/ACS with certificate-based authentication is the way to go.
Dec
19
comment Several border firewalls in the same network
Why not just use a firewall cluster and BGP/routers to handle the dual Internet connections?
Dec
5
comment Windows Server 2008 R2 Software Deployment on Active Directory - Schema Issue
Did you run forestprep and domainprep before adding the 2008 R2 DC?
Dec
1
comment IIS 7: launch unique site instance per host name
It sounds like you're suggesting that IIS create a copy of an entire website in memory on the fly upon first access. Depending on the size of the site, this seems unreasonable at it could take several minutes to copy the data. Can you clarify?
Nov
28
comment DNS Issue - Windows 2003 environment
@Hanny if you are concerned about this happening in the future, you could look into using dot1x authentication on your access switches. This way, you could prevent a rogue AP or DSL router in this case from being active on the network if it is plugged into the wrong port.
Nov
26
comment DNS Issue - Windows 2003 environment
The rogue DHCP server is most likely a wireless router that someone has brought in and placed on your network...
Nov
16
comment Windows 7 : access denied to ONE server from ONE computer
Since you capitalized one, I'm assuming that this client is able to access other 2003 server shares without issue and also that other clients are able to access this share. Is that correct?
Nov
6
comment roaming profiles + directory backup for a backup solution
You could always just use a logoff script to copy up whatever other folders you need to the roaming profile location or other server location
Nov
6
comment roaming profiles + directory backup for a backup solution
oh so this is more for mobile users to be able to function away from the network while maintaining your ability to restore their profiles if needed?
Oct
3
comment Exchange 2003 and 2010 coexistence - when is there downtime?
Source server was about 4 years old - dual xeon dell box. 1Gb between them. I actually modified the config file at about the 15 hour mark and bumped it from 2 to 15 which seemed to help because it was only about a third of the way through when I made that change. To note, I was moving public folders at the same time.
Aug
16
comment Simple VLAN Trunking between 2 switches
It's gotta be something silly - this should work. On other cisco switches, you must create the vlan on each switch or use VTP. Have vlans 2, 3, 10 and 180 been created on both switches? I know they're being passed by the trunk ports but they need to exist on the switches themselves also.
Aug
16
comment Simple VLAN Trunking between 2 switches
In building 1, what are ports 2-5 on teh SG300 connected to physically? If you unplug the cable that's going into GE2 on the SG300 and plug it into your laptop, do you get an IP?
Aug
8
comment 1 Year DHCP Lease
@HopelessN00b I just don't see how it invites or encourages this behavior when you can do the same thing regardless of the lease time. Its like saying you left your door unlocked so I can TP your house. The attack has nothing to do with the problem. If he's trying to convince his boss why a 1 year lease is stupid, this is not a compelling argument.
Aug
7
comment 1 Year DHCP Lease
I really don't see how this deranged idea is relevant. Even if lease time was one week or even one day, the same student could easily consume all the IPs in the scope using such a method to create downtime. The resolution would be the same in both cases - blow away the bad leases. A longer lease time really has no bearing on this.
Aug
3
comment Cisco AP - No local name resolution when connected on Wifi
You said the DNS server is microsoft. So, your MS DHCP server is handing out IP's on the wireless network too or is the 881 running DHCP/DNS for wifi clients?
Aug
2
comment cisco 2504 wireless controller and android devices
How are you authenticating against radius? Are you using certificates?
Aug
2
comment Cisco AP - No local name resolution when connected on Wifi
can you ping the dns server from the wireless network?
Jul
30
comment How do I dynamically obtain IP addresses for VLAN interfaces?
Alternatively, you could simply use a helper address in the router to forward DHCP broadcasts to the server instead of actually placing it in each subnet.
Jul
28
comment ESXi server under DoS attack, can I use SSH to determine where from?
I don't know the specifics but the vm-support utility can diagnose various performance issues so it may provide insight into the network traffic.
Jul
28
comment ESXi server under DoS attack, can I use SSH to determine where from?
ahh. I see. In that case, can you run vm-support and get VMware to help you diagnose?