RADIUS VS TACACS+

Saturday, August 25, 2007 11:46:08 PM (Pacific Daylight Time, UTC-07:00)
by Ray Zadjmool
There are a lot of good reasons for implementing a AAA (authentication, authorization, and accountability) solution in your network - not the least of which is to make the management of user accounts easier.
Read more ...
Posted in Authentication | General Security |     

Sync Me Up Scotty!

Thursday, August 16, 2007 8:12:02 AM (Pacific Daylight Time, UTC-07:00)
by Jason Pittman
A former work colleague phoned me the other day and asked for some advice regarding NTP. Here's a quick overview of the problem he faced and what I have done in the past to move forward in this type of situation.
Read more ...
Posted in PCI |     

The Next thing...

Wednesday, August 15, 2007 5:53:09 PM (Pacific Daylight Time, UTC-07:00)
by Ray Zadjmool
It seems to me that the security industry releases a new "tickle me elmo" every year. Suddenly its all that anyone is talking about. Never mind that you have been in business for 40 years without one, but suddenly you are asked why you dont have one by every auditor and their mother.
Read more ...
Posted in Security Rants |     

Splunk

Saturday, August 11, 2007 5:32:52 PM (Pacific Daylight Time, UTC-07:00)
by Ray Zadjmool
Log management is one thing, making use of them is another. A couple of years ago I was doing an investigation for a client on about 4 gigs of logfiles from 3 webservers, a router, and an IDS. After that I was on a mission to find something that I can use to aid in post event analysis and not over think the process for me
Read more ...
Posted in Incident Reponse |