ATTN Network Nerds (like me)

[drdabbles]

Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances

Cisco has announced multiple vulnerabilities with their ASA 55XX series security devices, many of which have pretty bad consequences. Check out the report at the link below. Be SURE to compare your software versions to those that are not effected.

http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1910c.shtml

[katie.ims]

I don't know why you have to throw around the "n" word

[Myk_e21]

Thanks for the info

[Pulski]

Don't have any here, thankfully. :)

[SRTie4k]

Damnit, we have 2. Thanks for the heads up.

[drdabbles]

Yeah, I have two as well. One for a production network and one for a SCCP phone proxy into a Cisco Unified Call Manager system. Ugh.

And I can use the N word as much as I want. It's YOU people that have lost the right to use it. :unamused:



:rofl:

[Bu11dogg2]

Does he know about this?

http://www.unrealitytv.co.uk/wp-content/uploads/2010/01/Sisqo.jpg

[Pulski]

Yeah, I have two as well. One for a production network and one for a SCCP phone proxy into a Cisco Unified Call Manager system. Ugh.

And I can use the N word as much as I want. It's YOU people that have lost the right to use it. :unamused:



:rofl:
I prefer geek myself. :lol:

[adam]

I hate cisco products, but thankfully none of my clients are using these

[drdabbles]

I prefer geek as well. :lol:

Cisco products can be very useful and worth the investment. Most of the time, they aren't. I'm very used to IOS on their switching equipment, so I don't mind the complexity. And for the most part, you can plug a new virgin switch into your network and it will auto-configure with most of the settings you need. Having a VTP server switch is fantastic, CDP is neat, switches that can do routing on their backplane is cool. :lol: But, 90% of networks don't need any of that complexity.

[AExiOn]

I hate cisco products, but thankfully none of my clients are using these

Are they all running Macs? :lol:
The elementry school of the school system I work at on fridays uses them.. Except in the office where they use PCs, just like the middle and high school :D

I can't hate on cisco too much, they are just effing expensive, but I guess it what you pay for its what you get. Ill take a Cisco or linksys by cisco WAP over sonicwall any day!

Thanks for the cisco tidbit :D
Luckly am just a level 1 that does level 2-3 things but.. They dont allow me near that stuff, and I dont think I want to just yet lol

[drdabbles]

Yeah, we use Cisco, Juniper, and Sonicwall firewall & routing equipment here. That whole "Never rely on one vendor" thing. :lol:

SmartNet is where Cisco's price really ratchets up a notch. Their annual support & maintenance contracts are MUCH more expensive than even Juniper. :(

AExiOn, get a little experience whenever you can. Adding even small bits to a Resume will get you in the door for higher and higher positions. If you say you assisted with maintaining switching & routing equipment, your next place will let you be on a team to manage them, and then you can be lead engineer, and finally you can paint yourself into a corner like I did. Being the ONLY IT person for a company that has 24x7x365 operations needs. :lol:

[AExiOn]

AExiOn, get a little experience whenever you can. Adding even small bits to a Resume will get you in the door for higher and higher positions. If you say you assisted with maintaining switching & routing equipment, your next place will let you be on a team to manage them, and then you can be lead engineer, and finally you can paint yourself into a corner like I did. Being the ONLY IT person for a company that has 24x7x365 operations needs.


I do have some experience with CISCO, ive screwed around with a pix before via console cable. Though it didn't really tickle my fancy. I like sonic wall for the most part, but last year I deployed about 4 WAPS in a company, and had nothing but problems. The firmware you download from sonicwall website for the exact WAP model doesn’t work with it. The tech over the phone told me to load it into a sonicwall with advance OS loaded on it then deploy it, but to bad they have a FORTINET for a firewall, and the dillweed pissed and moaned when he had to email me a firmware file I could upload into the WAPS.. Because its my fault that the firmware they offer on their website isn’t compatible for the model they listed it for, that made my loose my trust in Sonicwall. Watchguard is nice, cheap and gets the job done. Checkpoint firewalls I have little experience with but so far I like it.

haha and I am exposed to allot of things, am not certified in anything, sense Comp TIA certs now expire after a few years. I told my self this year to at least get a microsoft cert, most likely in the 08 SBS server sense so much has changed sense I went to night school for 2003 MCSE +Security, and I work with a lot of small businesses. I am really not liking exchange 2007 so far. But am sure putting 4 years of field experience with maintaining 50+ company networks, different types of software, and being able to remove just about any virus or rootkit I come across will help if I do change who I whore my self out to.

Adam wants to be my pimp.. Maybe one day I’ll work for you sir. Right now am taking advantage of a company vehicle and credit card :p
you know you cant blame me lol

[adam]

drabbles, do you use Barracudas at all? They are my fav spam utility

[drdabbles]

Actually, I built our own in-house anti-spam system. It's tuned very well for our use, so it's almost 100% accurate. I think we see maybe 4 or 5 spam messages per day across 60 user accounts (100 addresses total usable). Total message flow is somewhere north of 5,000 messages per day for those 60 accounts.

I helped our sister company implement a baracuda. Pretty slick unit. He also uses it for mail archive for PCI compliance as well as other compliance issues.

[AExiOn]

Barracudas are the ****!

I love those devices

Most of all I love my shirt, because it says in big letters on the back


EAT SPAM!

[adam]

Yeah i just wish they would send those shirts for fat guys :unamused:


I'm too chubby for it

[drdabbles]

Yeah, I have a coffee mug that my dad stole. It says "I HATE SPAM". :lol: It's literally a never ending war with me.

Actually, yesterday at work I wrote a script that rips through my firewall & anti-virus logs for incoming SMTP traffic, graba any IP addresses that sent me a virus, does a whois lookup for the CIDR (Address range in that netblock), all the contact info, the abuse email addresses, etc. Then, if it finds an address for abuse it automatically shoots off an email explaining that the IP listed sent me an email virus, it gives my firewall and anti-virus log line, and asks for a response.

So far I've received responses from ATT, UUNET (MCI Backbone), a TON of Asian providers, and one in Africa. Probably 75 responses from a total of 300 unique netblocks. :lol: Pretty good stats for a Friday afternoon.

[SRTie4k]

Yeah, I have a coffee mug that my dad stole. It says "I HATE SPAM". :lol: It's literally a never ending war with me.

Actually, yesterday at work I wrote a script that rips through my firewall & anti-virus logs for incoming SMTP traffic, graba any IP addresses that sent me a virus, does a whois lookup for the CIDR (Address range in that netblock), all the contact info, the abuse email addresses, etc. Then, if it finds an address for abuse it automatically shoots off an email explaining that the IP listed sent me an email virus, it gives my firewall and anti-virus log line, and asks for a response.

So far I've received responses from ATT, UUNET (MCI Backbone), a TON of Asian providers, and one in Africa. Probably 75 responses from a total of 300 unique netblocks. :lol: Pretty good stats for a Friday afternoon.

I've tried contacting various ISP's about DoS attacks and heavy port scanning, but they never actually do anything about it. But our firewalls and the IDS/IPS softwares we run are pretty good at filtering out most exploits, so much so that I've had to create exceptions for access from internal sources.