Help in Security Solution for N1Kv Design

Hello,
My customer is migrating its Datacenter Environment, similar to the attached picture.
Today, they have a 6500 Core Switch with FWSM providing Security for Inter Vlan access.
Using N1Kv + N7K with the same Inter Vlan connectivity, what is the best option to provide Security Policies and enjoy the 20GB Uplink ?
One ASA 1000v Instance for each VLAN is a good option ? I will not have performance problems ?
Thank you in advance for help ..
Daniel Stefani

ASA 1000V is a tenant edge firewall. It is recommended to isolate tenants from outer world and from each other. An ASA 1000V always has only two interfaces so multiple instances result in a firewall management question.
Simple Inter-VLAN (and even intra-VLAN) filters can be implemented by VSG if protocol inspection (fixup) is not a requirement.

Similar Messages

Security Solutions for different environment / market segment?

Hi all
From what I know, network / server equipments are separated into different kinds of range such as Small Business, Medium Business, Large Enterprise and Telco (ISP) Level / Range.
Some companies have different range of antimalware solutions - such as Standard, NAS, SAN, Exchange and more.
Is there any certain strict need / requirement special clients (such as Military, Government or Telco) asked for? How does those special clients need / requirement compare to Small, Medium or Large Enterprise?
Cheers
Peter
(Current: W520 4284-A99) (Refunded: W510 4876-A11)
=============================================
Does someone’s post help you? Give them kudos as a reward, as they will do better to improve
Mark it as solved if the solution works for you, so it could be reference for others in the future
Dolby Home Theater v4 (ThinkMix V2)!
http://forums.lenovo.com/t5/W-Series-ThinkPad-Laptops/W520-Sound-Enhancement-Thread/m-p/451401#M155...
Solved!
Go to Solution.

Hello,
Yes, goretsky is correct -- larger companies/organizations need to have a good centralized management to monitor all of their machines on a single console/window. Another thing that they consider is a good and detailed report/s from their security solutions. Computer administrators from these large companies/organizations regularly create and submit reports to their superiors, so having a product that generates a good report is a plus for them.
Large companies/organizations also have a different setup since they have equipments that home users usually don't have like File Servers, Exchange Servers, Gateway/Proxy, etc. Having said this, they need additional protection for those types of machines/equipments.
On "special clients", I think their setup is very similar to large companies/organizations. They are just more cautious in terms of security that's why some of them (if budget permits) put on another level of protection which detects and/or prevents zero-day vulnerability attacks.
They will also have a different security software/application for their other "special" devices (machines that don't run on Windows, Virtual Environment, etc.).
Regards,
Cyrus

When Client Security Solution for T61 running on Windows 7 will be released?

Now I clean installed Windows 7 Professional 64-bit on my computer. Anything work fine except for Client Security Solution which I can't install. Does anybody know that when it will be released?
Added: Also, Presentation Director for Windows Vista doesn't work on Windows7 too. When it will be released?
Thanks a lot!
Solved!
Go to Solution.

No Presentation Director for Win 7.
Matt Kohut
Lenovo Product Marketing

Help w/ Security Settings for Mobile Hotspot w/ 2.2

I posted this over on moto's forum yesterday, but so far I've gotten no response. I figured I go ahead & post it here also, to see if some(1) may be able to help me w/ it:
I've searched far & wide, & haven't been able to come up w/ an answer to this. I would very much appreciate any info, advice, or education on this.
When I travel, I use the X to connect my laptop (HP notebook w/ Vista home prem) to the net, thru the hotspot. I've only been able to connect thru the hotspot using the WEP security setting. Since updtg. to (2.2), still can only connect using WEP setting. Now the only post I've been able to find w/ anything @ all about the hotspot & the security settings, was just a post about the steps to initially set it up. That was here on this forum & there were screen shots of pages frm the vzw site that (1) of the vzw employees had posted to answer that question. It showed WAP - 2 being used.
Now frm what I've read & understand, from searching for info on the diff. between the (2) settings, is that WAP / WAP - 2 is a much more secure setting than WEP. Also, I try to read-up on this kind of stuff to learn it, however, I'm still doing just that, learning & don't completely understand the diff. frm a tech. standpnt. I do sometimes do banking & paying bills online while traveling, so this is a major concern for me.
Is the diff. between the security of the (2) settings enough to worry about, as far as the fact that I'm dealing w/ personal info? Obviously, I don't need somebody in next hotel rm., etc., being able to get into my connection & see my info on my laptop. Also, has any(1) had any luck connecting thru the hotspot w/ WAP or WAP - 2 on their laptop? If so, is the problem poss. settings on my laptop? Thank u in advance any help ya'll can offer.
pcw67427

Ahh, okay, P.C., I see what you are talking about.
Network security is something that I've thrown myself into pretty heavily this year as we are more and more deploying networks within our audio and lighting systems for shows and concerts. In one instance, we have digital mixing consoles that can be controlled via that console's editing software running on a PC (or Mac, if you will). There are times where, instead of having the typical huge mixing console, 3 or 4 racks of power supplies, processing and effects units, and other supplies, I have a nice, comfortable chair and my X200 tablet PC mixing the entire show. I use the basic Linksys router connected to my Gateway notebook, the console, or consoles, and the speaker systems' processors. Then I use the X200 and Remote Desktop to, well, remotely control all of that. One of my purchases later this year will be a real enterprise router, hopefully for more range and speed.
Naturally, it would suck to no end if someone were to hack into my WLAN network, thinking they were logging onto someone's network to steal some internet time. The havoc that this could cause could potentially be a show-stopper. Or in extreme cases, cause some damage from accidental overdriving something.
Unfortunately, I've only been able to learn some very basic things because of my work load, shows, and just time in general. But I have learned that WEP is fairly easy to crack, while WPA is much, much harder, and WPA-2 being even more secure. What I would learn to know is WHY this is the case. I have enabled the WPA-2 security features in all of my routers. I also use the MAC address filters, although, yes, MAC addresses can be spoofed without too much trouble. But it's another layer of protection.
As I mentioned in the PM, I plan to enable the hotspot feature on my account this week and play with the X's hotspot capability during our upcoming state fair. I'll be looking at the security settings pretty closely since I know how those road guys are (since I AM one, LOL), constantly hunting for a connection to log onto, LOL.
As I said, I'm woefully lacking in thorough knowledge about network security. I'll bet there are some real wizs (wizi?) around here that can be more help than I can. I have heard a couple of IT guys say that they never, ever do banking and financial business on ANY wifi connection, regardless of the security method used. One of these guys has said that he'd rather do banking over a good 3G connection that he would any kind of WLAN. Whether there's anything one way or the other to these claims, I simply don't know, but I'd love to find out.
One thing is for certain...Hotels are FULL of folks hunting for internet connections and logging onto anything they can, err, get their hands on. So it goes without saying that you need better encryption than WEP if you plan to do financial stuff online. I haven't looked, but can you turn off the SSID on the X's hotspot feature? That would at least, not tell the world about the network you have, LOL
Hopefully, I'll learn some more next week. In the meantime, I hope some IT types can comment on this subject, And thanx in advance,
Take care,
Geri O

Help with best solution for file read/write in web app (not local files)

Problem in a nutshell...
I have an AIR app to process images.. organize and add information. This information is read and written to local XML files. This is working fine (if still a be messy... still learning this OOP stuff ;O)
So... now I am developing my Web gallery app to consume these files for a web gallery (unique concept huh? ;O)
Reading them in was easy with the Declaration block....
<fx:Declarations>
<fx:XML id="galleryXML" source="gaXML.xml"/>
<fx:XML id="baXML" source="baXML.xml"/>
<fx:XML id="prjXML" source="prjXML.xml"/>
<s:XMLListCollection id="galleryList" source="{galleryXML.item}"/>
<s:XMLListCollection id="baList" source="{baXML.item}"/>
</fx:Declarations>
But I want the owner to have a maintenance mode where information can be added/changed and saved back to the XML file on the server. I have read about all the different services available, but I am not that familiar with them. Also I will have no way of knowing what services the user will have available on their host. So... help me out in understanding what the most universal solution would be to be able to read and write XML files stored on the host along with the application.
I hope that is clear enough, but ask away if any more details will help in the discussion.
Thanks
Bob Galka

Hi Jeba,
Whenever u are using *"Thread.currentThread().getContextClassLoader()"* Code inside your application means the Files (Resources) which you are looking right now must be poresent in the CLASSPATH...(Bootstrap classloader/ System ClassLoader/ Application ClassLoader/ Sub Module ClassLoader...).
So when we place a resource (example XML or Properties file) inside the "WEB-INF/classes" directory then it means that file (resource) is available as part of the Module Classloader....So the above code getContextClassloader() will be able to find that resource easily.
Thanks
jay SenSharma
http://middlewaremagic.com/weblogic (Middleware Magic Is Here)

Security solutions - no remote wipe Freeware

Hi,
I have an E61 and I am amazed by the number of different security solutions for locking the phone, sending thief-finding text messages, remotely turning on a siren and all sorts of fancy gadgets.
I´m equally amazed by the fact that up to now a security suite by Kaspersky seems to be the only one offering a feature called "remote wipe", quite simply allowing you to remotely wipe the internal memory of your phone.
Let´s be honest, when your phone is stolen, your chances of getting it back are very bleak at the best. Text messages telling you the location of your phone or automatic locking upon an unsolicited SIM change won´t help you getting it back and turning on a siren in the thief´s pocket in the middle of the night or locking the phone might annoy him a little, but it won´t help you. Finally, when a thief is determined to get to the stuff you have in your phone, every encryption code that can be applied to a PHONE is only a matter of time.
Wouldn´t it be much more reassuring to know that your data is GONE and thus rendered utterly unreachable to a thief?
I would be happy to know your opinions about this - it´s a subject that really interests me.
Regards,
Hendikoischnur
IT will paint our future - either green or black
* ecosia, the eco-friendly search engine (powered by Yahoo/Bing/WWF);
* Searching for pics online? Try ecocho.eu or treehoo.com
* For those who don´t want to miss Google: Try znout.de - it´s Google running on green energy
* CO2-free chatting: Try Jabber-server.de (running on 100% waterpower)

Hi,
does nobody have an opinion on this? Or am I really the only one thinking it´s insufficient to know valuable data that has been stolen is encrypted and it will take a little while to crack it?
That security suite that has a remote_wipe feature is quite costly, but never mind. I would rather pay for an algorithm that will, in the case of theft, destroy my data as close to >beyond recovery as possible than pay for encryption that´s only so much of a consolation when the phone is stolen.
I imagine that should even be reasonably easy to program? [not for me, I´m not a programmer] It´s obviously possible to remotely access the file system as that is what´s needed to lock it down, too, so it should be possible to remotely invoke sth. like the >shred command to destroy the data?
I´ve already entered this as a Software wish on the S60 website, but I haven´t got any kind of answer yet.
Regards,
Hendikoischnur
IT will paint our future - either green or black
* ecosia, the eco-friendly search engine (powered by Yahoo/Bing/WWF);
* Searching for pics online? Try ecocho.eu or treehoo.com
* For those who don´t want to miss Google: Try znout.de - it´s Google running on green energy
* CO2-free chatting: Try Jabber-server.de (running on 100% waterpower)

Client Security Solution - unable to open even see in Windows after succesfull install

Hello,
I just downloaded and successfully installed the latest Client Security Solution for windows 7. After installation it asks for restart, I do it but after reboot I don't see it (!). Under Lenovo ThinkVantage Tools is no CSS at all .. everything others are there, at least I hope. All other features I have are absolutely up to date, since the laptop has only few days and I did careful
updates on everything.
I don't understand, windows install it and there is nothing .. I don't even know where to search for it ... can you help me out
why can't I see the installed CSS?
Password manager 3.20 - but no fingerprint options
Backup and restore 4.31
Downloaded CSS should be 8.30
Solved!
Go to Solution.

you can stop it from auto filling PWs in PWM uncheck the box for auto log in every saved PW should have this option you should see something like this but not exactly LIKE IT this is PWM4 BETA
Thinkpad R61 7733-1GU
Thinkpad X61T 7762-54U
Thinkpad X60T 6363-4GU
Did a member help you today? Thank them with a Kudo!
If a post answers your question, please mark it as an "Accepted Solution"!
Regards,
GMAC

File Encryption with Client Security Solution

Hello,
We've been using ThinkVntage Client Security Solution for file encryption for a while now. I'm setting up some new laptops running Client Security Soliution 8.2 and I can't seem to find the option for data protection/file encryption. I checked a ocuple of users that are using file encryption and they were running Client Security Solution 7.x. Did they remove this feature from 8.x?

Unless the latest edition was released before my previous post then your statement is incorrect. My computer was using the latest edition because I downloaded it form your site only a few days before the post. Since my initial post I have had to replace my laptop and Lenovo, unfortuantely, treats Canadians like **bleep** step children so I had to buy an HP. If you can pass on a message, Lenovo lost the sale of a very high end system a few days ago becuase of a corporate choice to only sell a stripped down selection of computers to Canadians. You have a good 5 years or so now to think on that and come up with a better solution than cripling your Canadian resellers.

Help in Function Module for Sending Email to Supplier afetr Registration

Hi Team
I am beginner in ABAP, need your help in finding solution for the below issue.The Scenario is between MDM to SRM(R/3 System)
External supplier when registers, system need to generate a unique identification number ( Registration Number / Profile Number ) for the supplier and also generate a PIN ( password ) for the Registration Number, so that users from supplier company can request a user id to be created.These user idu2019s will be then linked to the supplier profile using the registration number.Also, supplier needs to be communicated with the Registration and PIN number via email.
FOr the email we are using the FM"ZGVMP_SUPPLIER_REGISTRATION".
My query is when the supplier is receiving the email , he is getting the email from the name GVMPUIDC(i.e the system id, it is being sent by the syetm id or user id of the program).
I want the mail to be sent by the following name to the supplier by different name instead of GVMPUIDC.
please help in solving the problem
Thanks
Edited by: VArjun86 on Dec 5, 2011 11:12 AM

Hi Kesshav
The FM which i am using is zgvmp_supplier_registration..
Below is the code which is being used to send the emails.
Send emails to Registration from Suppliers only
    if not wa_contact-name1 is initial and
       not wa_contact-name2 is initial.
      if sy-sysid = 'NSP'.
        perform send_email.
      else.
        perform send_html_email.
      endif.
    endif.
please let me know if you require any more details

Solution for a SQL Query needed immediately

Dear Friends...
I am in help of a solution for the Query which has been asked me in an interview..I failed to find the solution for the query mention below..
Query...
col1 col2
a 0
a 0
a 0
a 0
b 0
b 0
b 0
c 0
c 0
d 0
write a query to get the output as
col2 value shud be the no of occurences of col1 values...
Solution shud be like this
col1 col2
a 4
a 4
a 4
a 4
b 3
b 3
b 3
c 2
c 2
d 1
Kindly anybody plz do give me the solution immediately..
Srinivas

Set up the table
SQL> create table a ( col1 CHAR(1) );
Table created.
<< insert data >>
SQL> select * from a;
C
a
a
a
a
b
b
b
c
c
d
10 rows selected.A SELECT statement with a simple GROUP BY will get counts for each letter
1 select col1, count(*)
2    from a
3* group by col1
SQL> /
C   COUNT(*)
a          4
b          3
c          2
d          1Now, join that GROUP BY statement to the original table
SQL> ed
Wrote file afiedt.buf
1 select a.col1, grp_a.cnt
2    from a,
3         (select col1, count(*) cnt
4            from a
5           group by col1) grp_a
6* where a.col1 = grp_a.col1
SQL> /
C        CNT
a          4
a          4
a          4
a          4
b          3
b          3
b          3
c          2
c          2
d          1
10 rows selected.Justin
Distributed Database Consulting, Inc.
http://www.ddbcinc.com/askDDBC

How to find solution for avoiding WARNING J2EE SECUR-00100 ********** user-manager (see application/server descriptors) will no longer be supported in the next release of this product

HI All,
We are using Oc4j version 10g 10.1.3 , and while starting conatiner getting below warning , let me know if anyone have solution for this,.
14/01/10 01:01:29 ********** user-manager (see application/server descriptors) will no longer be supported in the next release of this product!
Please take the appropriate actions to migrate to an alternative strategy! **********
2014-01-10 01:01:29.833 WARNING J2EE SECUR-00100 ********** user-manager (see application/server descriptors) will no longer be supported in the next release
of this product!

I just checked my BIOS and my current setting is set at IDE although it also mentions that the default should be AHCI. Currently I have a dual boot of Windows 7 (need it for Tax software) and Arch
So I guess, when I get the new HDD, I will first set it to AHCI and then install the OSes on it. See if NCQ helps any, and if not I will turn it back and re-install (if I have to). I am planning to have Windows only in virtualbox in the new drive.
Anyhoo, while I was in the BIOS I found two things which I had questions about :
1) Under Onboard Devices --> Integrated NIC , my setting is currently set at "On w/PXE" and it says the default should be just "On". Would it be ok to change it back to On since its a single machine and its not booting an OS on any server. I just don't want to have to re-install anything now since I will be doing that in the new HDD.
2) How would I know whether my BIOS would support a 64 bit OS in Virtualbox? I checked some setting under Virtualization, but they weren't very clear.
I will edit this post and let you know exactly what settings were present under the Virtualization sub-section.

Reporting & Audit Compliance Solutions for Cisco Secure ACS

The Cisco Secure ACS Access Control Server is probably the worlds best selling remote access security solutions and its quite likely that you're already using it! Wouldn't it be great to know exactly what it was doing? Further still, when you have to provide audit documentation regarding your policies and how effective they are, how long does this take and what valuable data remains locked inside the ACS database and logs?
extraxi offer a range of products that deliver a complete solution for harvesting, managing and analyzing your ACS/SBR log data to meet the increasing demands for regulatory compliance (SOX, COBIT) and overall enterprise monitoring and security.
We are proud to supply customers including Intel, Ford, Lego, T-Mobile, US Dept of State, US Army, British Telecom, First Energy, TNT Express, Kodak and JP Morgan and many more so why not take a look at our industry leading solutions and evaluate the benefits for your organization...
Featured Products:
* aaa-reports! enterprise edition - Automated Reporting
The best reporting system for Cisco Secure ACS and Funk SBR just got a whole lot better! Improved reports, enhanced filtering and query builder and now with up to 48GB internal storage based on SQL Server technology makes this the ideal solution for large or complex AAA deployments and those that need the additional functionality from the standard aaa-reports! tool.
With aaa-reports! enterprise you have a complete application for reporting including many canned reports (each with flexible filtering options) and a point-n-click query builder for designing custom reports.
For historic trending, forensics and audit compliance there simply is no better reporting application for Cisco Secure ACS or Funk/Juniper SBR.
* csvsync - Automated ACS Database & Log File Collection
csvsync allows you to download CSV log data (RADIUS, TACACS+, Passed/Failed Attempts etc) directly from any number of Cisco Secure ACS servers (Windows & Appliance) via http(s). Version 3.0 now supports the collection of ACS database itself for import into aaa-reports and detailed reporting based on the ACS security policies. Simple, secure and efficient, csvsync is the best solution for harvesting log data from your Cisco Secure ACS servers.
Download fully working 60 day trial versions at http://www.extraxi.com/rq.asp?utm_source=technet&utm_medium=forum
Fore more information please visit http://www.extraxi.com/?utm_source=technet&utm_medium=forum

bump

HT5467 I forgot my security answers for itunes. Please help.

I got a new ipod and because my other one broke but i used the same apple acount. I reedemed my iTunes card and went to by some music but this sucrity thing showed up. It tell me to put in my secerity questions but i can't remember them so i try and try again but can't get them. and i have no idea how to figure them out again so i can buy music. PLEASE HELP ME!!!!

Frequently asked questions about Apple ID - http://support.apple.com/kb/HE37 --> Can I change the answers to the security questions for my Apple ID? --> Yes. You can change the answers to the security questions provided when you originally signed up for your Apple ID. Go to My Apple ID (http://appleid.apple.com/) and click Manage your account.
Some Solutions for Resetting Forgotten Security Questions - https://discussions.apple.com/docs/DOC-4551
Rescue email address and how to reset Apple ID security questions - http://support.apple.com/kb/ht5312 - "If you can't recall your Apple ID security questions and answers, the optional rescue email provides a way to reset them. Additionally, all future security-related emails for your Apple ID will be sent to the rescue email address."
Jan 2014 post about contacting Apple to reset security questions - https://discussions.apple.com/message/24543247 and https://discussions.apple.com/message/24671039

Better activation solution for F-Secure Freedome

From the forum posts, internet posts, and user reviews it seems that one thing is very apparent. There is a major need for a better activation solution for F-Secure Freedome. Currently, if your HDD crashes, or you need to re-install Windows, or you upgrade to Windows 10 (coming up in July), or even if an F-Secure Freedome update fails and you need to re-install it, you lose the code and/or license. Currently, it is not possibly to free it up per se'. Evaluation periods make a huge difference on whether or not I decide to purchase a product. A 90 day trial is very helpful so that I know I am making a good purchase, since it incorporates different network protocols especially. If you un-install Freedome, you lose the code. Period. This is counterproductive. You end up losing potential users. For those with a paid license, there is a problem that the license server shows that even though Freedome has been uninstalled or is no longer used, the license is not "freed up" by the server. The server or whatever mechanism currently in place lacks the functionality to recognize these changes. I am actually about to re-install my OS, possibly add hardware and get a new HDD. I am also in the market for a new PC. F-Secure SAFE was a bit of a disappointment for me (no offense), and used a good bit of resources. - I do respect the people, and the company who makes it though. They make significant efforts, especially with the marketing of Freedome. The solution should be productive, but not cumbersome or overzealous (like Microsoft or worse). It is a good way to: 1) Expose customers to your products2) Get them to purchase them3) Retain that customer It costs more to gain a new customer than to retain a current one. I am not complaining, nor do I feel entitled. I am just trying to make a suggestion on how to improve the product, and its workflow. I don't intend to rant or to create a flood of posts. This was meant to be constructive, and to see what I could do/could be done about solving my licensing issue.I am sure that others also have some questions as well. I am satisfied with the initial install experience of Freedome, and the GUI is nice, I will say that .

Hello infosec,
Thank you for your honest the feedback. We really appreciate it. I'll pass it on.
We are aware that currently the subscription management is not optimal and our development team is working hard to bring a better solution to subscription reset and reinstalaltion scenario. Unfortunately for the time being you'll need to post on this community if you are reinstallating too many times your subscription.

Help with setup of the X60s Client Security Solution

I recently restored my X60s HDD using the Product Recovery CD from
the Lenovo Service Center here in Singapore. Prior to the recovery
I had to reset the Security Chip thru the BIOS setup.
I did not setup any password in the system during the recovery
process. Part of the recovery process I did was to upgrade the
Rescue and Recovery (R&R) to Version 4.21.0016.00 and the Client
Security Solution (CSS) to Version 8.20.0023.00
Now that I have restored the Windows XP system and all of my
application software, I tried to setup my Windows password and also
use the CSS for added security of my notebook.
When I initiate the CSS, it ask me for my Windows password so that
the userid can be enrolled in CSS. When I enter the password and
press the OK button, I got this message ... "The user could not be
enrolled with Client Security Solution"
I think that the error is related to the resetting of the embedded
chip, called the Trusted Platform Module (TPM) in the notebook.
How do I now resolve this issue of using the CSS?
By the way, I just bought my X60s last Aug 23 2008 and the reason
why I had to recover my HDD is also because of the problem with the
CSS password which for some reason it always fails to authenticate.
Regards
Rodney

railman wrote:
I have a Zen Micro 4GB setup and working great on our desktop computer. I have the Creative Media Source v3.0.9 and Zen Micro Media Explorer v4.00.22 software installed. I purchased two Zen Micro 6GBs at Christmas for my kids. I have been through the manual and these forums, but no help on how to setup the two new Zen Micros to work with the existing software. The new Zens do show the popup "Creative Media Device Detected", and I can see the new Zens in Windows Explorer. The new Zens do not show up in the Zen Micro Media Explorer. Do I have to install the Zen software for each of the three Zens? If not, any ideas? Thanks
It appears that you may have both PlaysForSure Zen Micro and non-PlaysForSure Zen Micro. As such, you should install both plugins for MediaSource. A newer version of MediaSource is also available to you.
Here is what you should do:
- Download and install the latest Creative MediaSource Player/Organizer 3.30.2 from your product download site.
- Download and install the latest Creative Zen and NOMAD Jukebox plugin 2.00.20 for Creative MediaSource from your product download site.
- Download and install the latest Creative MediaSource Plugin for PlaysForSure devices (version .00.8) from your product download site.

Help in Security Solution for N1Kv Design

Similar Messages

Maybe you are looking for