| bio | website | vaccinetllc.blogspot.com |
|---|---|---|
| location | ||
| age | ||
| visits | member for | 1 year, 5 months |
| seen | Mar 29 at 20:47 | |
| stats | profile views | 133 |
Paul Ackerman, CISSP, GPEN, GCWN, CCNA, MCP, A+. Owner - VacciNet LLC a Network & Security consulting firm, SANS Mentor, Network Supervisor for the Administrative Office of the Courts in the 20th Judicial Circuit of Florida.
Paul is a veteran of IT. He has over 13 years of experience in the IT world ranging from desktop support to his current role, managing the computer network for the Administrative Office of the Courts in the 20th Judicial Circuit, Florida. He is also owner of VacciNet, LLC a network and security design consulting firm and also works as a Mentor for SANS.
His background includes server and network administration, security design and practices, business analysis and software development.
Paul has been primarily responsible for design, implementation and troubleshooting in many different areas of IT such as Active Directory, Exchange, IIS, Networking, Firewalls, SQL, DR and BCS planning and Incident Response.
Tasked with doing much more than security, he has strived to find ways of incorporating security best practices into the daily lives of sysadmins and the average user. His desire is to share his knowledge with other systems administrators, managers and security practitioners in order to improve the overall position of public and private networks while continuing to form new relationships and learn from others in the field.
Currently, Paul holds the Certified Information Systems Security Professional (CISSP), GIAC Certified Windows Security Administrator (GCWN), Cisco Certified Network Associate (CCNA), MCP and A+ certifications. He has been pursuing a BS in Computer Science in the evening hours while working full-time and obtained the CISSP and GCWN certifications during the same period.
Paul is a self motivated, hard working, patient and fast-paced, fun individual who is excited about the opportunity to share his knowledge.
|
Jan 2 |
comment |
Securing LAN by restricting New Users mac address security is weak as users can unplug a desktop from a port, spoof its mac and connect to the network. It is also an administrative nightmare when machines get moved and replaced. NAC/ACS with certificate-based authentication is the way to go. |
|
Dec 19 |
comment |
Several border firewalls in the same network Why not just use a firewall cluster and BGP/routers to handle the dual Internet connections? |
|
Dec 5 |
comment |
Windows Server 2008 R2 Software Deployment on Active Directory - Schema Issue Did you run forestprep and domainprep before adding the 2008 R2 DC? |
|
Dec 1 |
comment |
IIS 7: launch unique site instance per host name It sounds like you're suggesting that IIS create a copy of an entire website in memory on the fly upon first access. Depending on the size of the site, this seems unreasonable at it could take several minutes to copy the data. Can you clarify? |
|
Nov 28 |
comment |
DNS Issue - Windows 2003 environment @Hanny if you are concerned about this happening in the future, you could look into using dot1x authentication on your access switches. This way, you could prevent a rogue AP or DSL router in this case from being active on the network if it is plugged into the wrong port. |
|
Nov 26 |
comment |
DNS Issue - Windows 2003 environment The rogue DHCP server is most likely a wireless router that someone has brought in and placed on your network... |
|
Nov 16 |
comment |
Windows 7 : access denied to ONE server from ONE computer Since you capitalized one, I'm assuming that this client is able to access other 2003 server shares without issue and also that other clients are able to access this share. Is that correct? |
|
Nov 6 |
comment |
roaming profiles + directory backup for a backup solution You could always just use a logoff script to copy up whatever other folders you need to the roaming profile location or other server location |
|
Nov 6 |
comment |
roaming profiles + directory backup for a backup solution oh so this is more for mobile users to be able to function away from the network while maintaining your ability to restore their profiles if needed? |
|
Oct 3 |
comment |
Exchange 2003 and 2010 coexistence - when is there downtime? Source server was about 4 years old - dual xeon dell box. 1Gb between them. I actually modified the config file at about the 15 hour mark and bumped it from 2 to 15 which seemed to help because it was only about a third of the way through when I made that change. To note, I was moving public folders at the same time. |
|
Aug 16 |
comment |
Simple VLAN Trunking between 2 switches It's gotta be something silly - this should work. On other cisco switches, you must create the vlan on each switch or use VTP. Have vlans 2, 3, 10 and 180 been created on both switches? I know they're being passed by the trunk ports but they need to exist on the switches themselves also. |
|
Aug 16 |
comment |
Simple VLAN Trunking between 2 switches In building 1, what are ports 2-5 on teh SG300 connected to physically? If you unplug the cable that's going into GE2 on the SG300 and plug it into your laptop, do you get an IP? |
|
Aug 8 |
comment |
1 Year DHCP Lease @HopelessN00b I just don't see how it invites or encourages this behavior when you can do the same thing regardless of the lease time. Its like saying you left your door unlocked so I can TP your house. The attack has nothing to do with the problem. If he's trying to convince his boss why a 1 year lease is stupid, this is not a compelling argument. |
|
Aug 7 |
comment |
1 Year DHCP Lease I really don't see how this deranged idea is relevant. Even if lease time was one week or even one day, the same student could easily consume all the IPs in the scope using such a method to create downtime. The resolution would be the same in both cases - blow away the bad leases. A longer lease time really has no bearing on this. |
|
Aug 3 |
comment |
Cisco AP - No local name resolution when connected on Wifi You said the DNS server is microsoft. So, your MS DHCP server is handing out IP's on the wireless network too or is the 881 running DHCP/DNS for wifi clients? |
|
Aug 2 |
comment |
cisco 2504 wireless controller and android devices How are you authenticating against radius? Are you using certificates? |
|
Aug 2 |
comment |
Cisco AP - No local name resolution when connected on Wifi can you ping the dns server from the wireless network? |
|
Jul 30 |
comment |
How do I dynamically obtain IP addresses for VLAN interfaces? Alternatively, you could simply use a helper address in the router to forward DHCP broadcasts to the server instead of actually placing it in each subnet. |
|
Jul 28 |
comment |
ESXi server under DoS attack, can I use SSH to determine where from? I don't know the specifics but the vm-support utility can diagnose various performance issues so it may provide insight into the network traffic. |
|
Jul 28 |
comment |
ESXi server under DoS attack, can I use SSH to determine where from? ahh. I see. In that case, can you run vm-support and get VMware to help you diagnose? |