Good afternoon.  I just signed up to use Comodo for endpoint security.  One of the products that I get with that is Dome, which is for DNS.  So, my question is, how do I actually set that up without messing up my internal settings?  For instance, if my computers need to resolve to an internal server I know that I need an internal DNS server.  Therefore, do I just change the DNS settings on the DNS server to use Comodo's DNS or do I set it somewhere else?

I need to decide if I should hire a security expert to try and "break" my site.

I have the latest updates for WordPress and WooCommerce and host it at AWS as EC2.

Where kinds of security problems might I have?

I already changed the database username to no longer use "root".

Can you think of things I can do to nail down the site?

Is it worth having a security guy look at it?

Thanks.

Can we create group of endpoints and can we assign policies to that group in trend deep security?

Hi,

Can anybody please help me on this i want to configure checkpoint security gateway as HTTP/HTTPS Proxy in cloud environment.

Thanks in advance
 
SAT

When I try to setup permissions on one clients server and add a user to a security group that is for a certain  share or folder
the user still cannot access the share. Even giving the user modify or full rights not recommended just for testing.
What could cause this? Could there be a policy stopping this? I get no popups or errors.

ive been hit with a ransomware attack
I can still use the computer but all word docs have been encrypted
I can open docs but they are blank
is my only option paying or can I get these back?
they are requesting over £800

Does anyone on here have any experience auditing Mac OSX and MacOS laptops specifically for PCI Compliance? If so, how did you end up logging from them to a centralized server and what did you use? I am attempting to use OSSEC to pull the logs from /var/audit/current but would /var/etc/com.apple.authd be better? Or /var/log/system.log?) The purpose of this is to satisfy PCI DSS req. 10.2.2, 10.1.5. If I use OSSEC will I need to create a custom decoder for OSSEC for using the praudit command on /var/audit/current?

We have a system in place which is hosted (SaaS) by the software manufacturer/supplier.

We have a small internal team in place to run the day-to-day admin and management of the system, like setting up new users, running reports etc.

However I’ve become concerned as I’ve been informed that the host/supplier can access the database, setup users within the database and general write directly to the tables.  This is obviously bypassing all the application controls that are in place.

We can, and probably will run reports on users so we should be able to identify any news users that might have been set up in this way.  However this is only a small fraction of what could possibly be done via the tables, for example changing the bank details for payments to your own etc.

We can try and monitor this as much as possible but it has its limits and it is detective rather then preventative controls.
The problem I think we have is that they developed this system and now they host it, so in theory they can do whatever they want.  Has anyone else been in this situation, is there anything we can put in place to prevent this happening rather than just detecting it?  At the moment the only thing I can think of is making them promise they won’t do this, which is pretty useless.

They do provide some system support so we can’t just remove their access all together and as we don’t have control over the database, we can’t insist access is disabled until they come through us to enable …

Trying to find an official Microsoft product to hash an entire drive in MD5 or SHA256.

CertUtil only works for individual files.
Get-FileHash only works for individual files.

I need something for an entire drive or set of directories and files.

How to block unmanaged switches from network. I have already apply BBDU Guard on interface but where unmanaged switches attached port will not block. and in show spanning-tree interface detail command no BpDU received. So please help is required for block unmaanged switches fron network. Other than port security please

I have a schema (database) in MSSQL that is called PRODUCTION.  I also have security group setup in Active Directory called DB_USERS.  

I am having a problem with the syntax to grant the security group, (and all of the members of it), the rights of SELECT, INSERT, UPDATE, ALTER and DELETE to "all" of the tables inside of this DB.

Can someone provide me with a syntax SQL query command to do that, or alternatively, how I can do that through SSMS?   For some reason I am just not getting the syntax correct.

I tried the following script, and it creates everything, but it errors out on the last line when it comes to the GRANT command.

USE master;
GO
CREATE LOGIN [MYCOMPANY\DB_USERS] FROM WINDOWS;
GO
USE PRODUCTION;
GO
CREATE USER [MYCOMPANY\DB_USERS] FROM LOGIN [MYCOMPANY\DB_USERS];
GO
CREATE ROLE DBACCESS;
GO
EXEC sp_addrolemember 'DBACCESS', 'MYCOMPANY\DB_USERS';
GO
GRANT SELECT, INSERT,UPDATE,ALTER,DELETE ON SCHEMA::PRODUCTION TO DBACCESS;
GO

The error I am getting is "unable to access schema PRODUCTION. It does not exist or you do not have permissions."

I am logged in as SA.

Thank you in advance,
Jeff

Hi Experts,

I am installing new wireless equipment at a very small motel this week. They have AT&T business internet and just want to provide an SSID and password/key to guests to connect. No splash screen or anything like that. They were originally using Netgear signal boosters that you plug into wall outlets, but customers stole them.

I told them I would only use pro-level equipment, so I have ordered 2 UAP-AC-PROs and the Ubiquiti 8-port 60w PoE Switch for 12 rooms. Eight rooms are in a 2-floor building, four on each floor and the other building is just four rooms on a single floor. I plan to install one AP on the ceiling in room 3 (middle, bottom room) of each building, including the two floor building. The rooms are small so I think this will suffice.

Questions:

Do I need to order a security device or new router? Can I use the AT&T provided router and connect it to the Ubiquiti PoE switch and configure the WAPs using the Ubiquiti controller software installed on the office PC? And will that software without a security device or new router be able to provide two SSIDs?

The owners are trying to save money (of course!) so I wanted to see if any other gear was necessary. It appears that the solution I've provided will do the trick, but it is not ideal security-wise. Any advice is appreciated!

Thanks,

Rich