Security Management Software

Any suggestions appreciated.
I am running a wireless network using a LinkSystem WRVS4400N. I would really love a software application where I could monitor the router traffic from from my laptop and hopefully translated to something a bit more organized and useful then what is sent now as a log file.
I would love to know when I am being probed for any weakness in my network and more importantly, when my network has been compromised.
Cisco NetManager would not work on Vista but something simular for vista would be nice.
Suggestions anyone?
Operating system Vista - 64
Firewall / Virus software - AVG 9.0
Thanks for any help
Kenneth

Hello,
Probably your network is being 'probed' 100s of times per hour ... a lot to say the least.  It might start with a ping, and then a port scan.
The WRVS does provide a nice perimeter, and so you are fine.  Are you keeping up with the software loads?  It is best to stay current and be sure to read the release notes when you are making your decision on whether or not you should upgrade the router.
Some side notes ... please forgive these ramblings  ...
Are you allowing well known ports to come into your network, unauthenticated traffic?  If you are allowing these for whatever reason, then outside traffic is already getting in.  If this trusted communications?  You would know best, but just trying to make the point that your router is doing much to stop all unwanted traffic so there is not much need to monitor this IMO unless you are allowing outside unauthenticated traffic into your network ...
Some basics for your router:
- change all the default passwords
- do not allow external management or even from the wireless network
- if you are sharing resources, then use a DMZ with specific security policies
- be a specific as possible in your policies  ...
If security is a heavy concern for you, then you may also choose to put ACLs on your switches too for the ports that connect to mission critical devices.  You can allow or disallow traffic in your switches ... Wireless network secure? 
You mentioned the virus software, and this is key along with keeping the PCs up to date.  It is far too often that we hear of new viruses and security holes ... it is important to keep up with the patches and virus software.
Wireshark is pretty good, but it might provide too much traffic analyses.  You can use filters to provide more focus.  How will you 'see' the traffic from the router?  You will need to set up a span / monitor port so that the traffic is also sent to your PC.
A note is needed -  when you enable span / monitor, some switches will block inbound traffic from the monitoring workstation.  This means you would need a dedicated monitoring station since this station would not be able to send traffic and only receive.
Refer to the switch documentation for info on whether or not this port becomes a dedicated monitoring port and or you can still work from it.
HTH,
Andrew Lissitz

Similar Messages

  • Need security management software for OS 8.6 through 9.2

    Are there any security management softwares available these days for OS 8.6 through OS 9.2? Something which lets the computer owner turn off firewire and USB is what I'm looking for. It would be nice to be able to allow only some selected USB devices, like a keyboard and a printer or scanner, and still disallow external drives or thumb flash drives, but turning off all USB would be useful on machines which don't need USB keyboards, like beige or B&W PMG3 computers or G3 iBooks.

    Are there any security management softwares available these days for OS 8.6 through OS 9.2? Something which lets the computer owner turn off firewire and USB is what I'm looking for. It would be nice to be able to allow only some selected USB devices, like a keyboard and a printer or scanner, and still disallow external drives or thumb flash drives, but turning off all USB would be useful on machines which don't need USB keyboards, like beige or B&W PMG3 computers or G3 iBooks.

  • Saving Password for a pdf file in HP Client Security Manager

    Hello,
    I want to save the password for a pdf file in the Password Manager of the HP Client Security Manager Software but the symbol for the entry of the password is not appearing on the top right of the screen. If I use the registered fingerprint a dialog opens where the Client Security Manager asks which account it should use to login. But i can't add a password for the file. The login for websites is perfectly fine. 
    Do you have any idea how to fix that?
    Is there a way to manually enter password for files?
    Thanks in advance.

    Thanks for the information.
    Suggest you to try uninstall and re-install the latest version which is - 8.3.3.1762. The direct link is:
    http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/psi/swdDetails/?sp4ts.oid=5405363&spf_p.tpst=swdMain&spf_p.prp_swdMain=wsrp-navigationalState%3Didx%253D%257CswItem%253Dob_129972_1%257CswEnvOID%253D4060%257CitemLocale%253D%257CswLang%253D%257Cmode%253D%257Caction%253DdriverDocument&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken
    If this does not fix, then suggest you to log a call with technical support.
    Please do post any progress on this.

  • Problem In Client Security Manager

    My LapTop is 450G2.
    I am using the hp client security manager software.
    I had a question:
    If Password Manager does not detect some of the program or website such as logon screen automatically
    Or Not appear The logon Sign In the corner of The website automatically How should I fix this probleme?
    In other words
    If I want to Use  the software "Digital Person Personal" , What should I do?
    HELP ME PLEASE

    Hi 
     You could try the new password manager.
     http://support.lenovo.com/en_US/downloads/detail.page?&DocID=DS031504
    Or you could try to delete all the files,
    Find Client Security Solution in user profile folder (Search hidden), and delete them all.
    And restart system.
    Before doing this, remember to export passwords

  • HP Client Security Manager Incompatible With Windows 10

    "Get Windows 10" download has informed me that I will need to uninstall HP Client Security Manager in order to get the Windows 10 download.The encryption and other safety features on my laptop are of primary importance to me and my firm.Is HP going to provide a new updated version of the software to be compatible with Windows 10?If so how and when will it be made available?

    Hi: This is a peer to peer forum. No one here can answer questions such as yours (any questions directed to HP). I would see if the latest Client Security Manager software will work with W10. Install this and see if it passes muster with the Windows 10 advisor. This version is still valid for W7, so you can try it now. http://h20566.www2.hp.com/hpsc/swd/public/detail?swItemId=ob_148454_1 This is an even newer version, but it is only good for W8.1. http://h20566.www2.hp.com/hpsc/swd/public/detail?swItemId=ob_149745_1 It is highly doubtful that HP will be releasing any drivers or software for W10 until after it is officially introduced to the public. That has been their usual method of releasing drivers and software when new operating systems come out. 

  • HP ProtectTools security manager

    When I use my Probook 4430s with windows 7 (x64), I can use HP ProtectTools security manager. But now, I can't with win 8.1 x64. Do you have any software for managing password by using fingerprint?
    This question was solved.
    View Solution.

    Hi:
    See if the W8.1 Security Manager software from the 4440s works on yours too.
    http://h20565.www2.hp.com/hpsc/swd/public/detail?sp4ts.oid=5229487&swItemId=ob_124362_1&swEnvOid=415...

  • Require HP ProtectTools Security Manager ver 7.0.0

    Hi,When installing sp62348.exe Privacy manager for HP protect tools it is asking for installation get cancelled sayingHP ProtectTools Security Manager ver 7.0.0 is required. Please provide this.. Also when installing sp61498.exe it installs Microsoft Visual Studio 10.0 c++ redistributable files successfully and then get closed. Could not see the security manager application anywhere. Is this normal. I could not make enable for Fingerprint scanner yet. Installed the sp61821.exe as the device driver and the Device manager shows the Validity Sensor with driver version 4.5.117.0 under biomatric devices. Please help Thanks Sanoob

    Hi:
    See if the W8.1 Security Manager software from the 4440s works on yours too.
    http://h20565.www2.hp.com/hpsc/swd/public/detail?sp4ts.oid=5229487&swItemId=ob_124362_1&swEnvOid=415...

  • Cisco Security Manager 3.2.1

    I have a customer who needs to increase their device count from 5 to 25. What is involved in doing this? Can I just install a new license file?

    The terms of your Security Manager software license determine many things, including the features that are available to you and the number of devices that you can manage. For licensing purposes, the device count includes any physical device, security context, virtual sensor, or Catalyst security services module that uses an IP address. Failover pairs count as one device. For PIX Firewalls, FWSM, and ASA devices that are configured in multiple-context mode (so that they host more than one security context), only the security contexts are counted as devices; the hosting device is not counted as a separate device.
    License limits are imposed when you exceed the allotted time (in the case of the evaluation license), or the number of devices that your license allows you to manage. The evaluation license provides the same privileges as the Professional Edition license. It is important that you register Security Manager as soon as you can within the first 90 days, and for the number of devices that you need, to ensure uninterrupted use of the product. Each time you start the application you are reminded of how many days remain on your evaluation license, and you are prompted to upgrade during the evaluation period. At the end of the evaluation period, you are prevented from logging in until you upgrade your license.

  • HP Security manager 8.2

    Hi Experts, Please guide me how i can install hp security manager in windows 8.1 64bit, i am using hp probook 450 g2, in driver download center i cant find the hp security manager software please guid me on this metter. Thanks.

    Thank you paul. This one did trigger the finger print scanner and allowed me to enroll my finger prints and also enables to log on with it to the system. Still strange that, why it is showing like this on control panel  Thank you though...  

  • ACER eSettings Management Software?

    Does anyone know where to download ACER eSettings Management Software? I cannot remember my BIOS Password and need to delete/reset it.http://www.tech-faq.com/how-do-i-reset-an-acer-bios-password.html discusses how to do this but I cannot find the software.
    I really do not want to open up the Laptop and remove the Bios Battery.

    Hello Laurent_14, Sorry for my delay.Thank You for your response regarding the eSettings Software. It doesn't seem to help my situation though. I decided to install Vista on the Laptop so I could run eSettings Mgmt, but as you probably realize finding drivers thast will work with Vista for that Acer Model was impossible.
    Regardless, I installed Vista, then the Management software suite. All looked good except for the fact that eSettings would not allow me to change the Bios password. That Button was Grayed out.The button to set a password was enabled but told me I had to enable the option in Bios. ARRRRRG. I used a Bios Password Generator to allow me into the Bios and was able to set Security to Legacy in order to install Vista, but still could not change the existing password without knowing the original.
    Any reason this software would not see that a password was set and allow me to change it.
    Any further suggestions you could possibly offer??? Thanks for responding and your help up to this point.

  • Best information manager software?

    I work as a reporter and often research large, sprawling investigative projects. I'm looking for the best information manager software out there, and am wondering what would work best. Here are the features I'm looking for:
    -Allow me to me to easily attach a reference to a file (as opposed attaching a whole file, which would eat up a ton of space), AND allows me link to a particular section w/in a file (for PDFs, Word / RTF docs, web pages, etc.). Some sort of drag and drop feature would be great...
    -It would be great if it would also allow me to attach a similar reference to sound files as well, such as WAV or MP3s -- for interviews.
    -Interfacing w/ Spotlight and, if possible, Mailsmith, NetNewsWire, and FileMaker Pro (tricky, I know).
    -Powerful searching capabilities, and searching options that will allow me to refine searches
    -Indexes everything, builds cross-references, and allows extremely flexible input
    -Encryption or some level of added security
    I've heard people reference Devonthink Pro, Circus Ponies' Notebook, Yojimbo, and TopXNotes. Any suggestions?

    I've heard MySQL is great for maximum flexibility in designing a database, but i've also heard it has a sharp learning curve and isn't very user friendly. Does it interface very well w/ other app's? What about Spotlight?
    I currently use FileMaker Pro, but it doesn't interface w/ Spotlight or DEVONthink or...well, many app's actually. I tried downloading the most current version of Bento, but unfortunately it requires Leopard. Will see if I can find an earlier version to play around w/... In what way do you see DEVONthink as too confining? I'm tooling around w/ it right now and so far it seems pretty good, but I'd love to hear about it's shortcomings.
    Thanks for your feedback! Any other suggestions / ideas...?

  • Please recommend network management software

    Hello!
    I need help to find some network management software that will work with our switches. I'm running a network that has Cisco/Linksys managed switches:
    10xSLM2008,
    5xSRW208,
    2xSRW2008MP,
    1xSF 300-08
    I was hoping there is management software (not the webview/web browser thing), that could do these things (in preferred order):
    - connect to these by SNMP (or similar) to show me a little statistics on each port on each switch, along with connectivity between these switches.
    - let me know which port knows which mac addresses, and maybe also the IP addresses of these.
    - let me know which mac addresses uses most bandwidth
    - ban a mac address
    I'd be happy if anybody could give me an advice on what software to buy.
    Best regards,
    Lars E Fodnes

    It can't ban a MAC address, but that is what dot1x/port security is for. I'm not sure if your switches support it, but you can look into that from the switch standpoint.

  • Verifying the Correct Signature Updates, Management Software, and Version

    I am working today at a Client Site where I installed several months ago a Cisco IPS 4240 Sensor. The Sensor is currently running Version 6.0(3)E1.
    I am not certain how to proceed with respect to signature updates on this box.
    Under signature definition, it lists the following:
    Signature Update S291.0 2007-06-18
    I have noticed on the Security Software Page for IPS that the latest Signature File is S336. Should I install this on the IPS? In order to perform this, will it take down the IPS unit?
    Also, there are several Management applications listed under the "Network IPS/IDS Management/Monitoring Software" heading, including: IME, IPC MC, and ICS. I am already using IDM as well as IEV respectively to Configure/ Monitor and then IEV to Alarm on certain Events. What are IME, IPC MC, and ICS and how are they different from IDM and IEV??

    IME = Intrusion Prevention Manager Express
    - IME is fairly new (released only a month or 2 ago) IME is a next generation of IEV. It does the event monitoring of IEV, but is also able to do configuration similar to IDM. So it is IEV and IDM in one tool. The configuration screens of IME will only work IPS 6.1, but the event monitoring screens will work with 5.1, 6.0, and 6.1.
    IPS MC = Intrusion Prevention System Management Center
    IPS MC was a part of VMS (VPN and Security Management System). IPS MC was configuration of a large number of sensors.
    IPS MC and VMS are both End Of Saled and were replaced with CSM
    CSM = Cisco Security Manager
    CSM is a multi-security device configuration management system. It is targeted at Enterprise customers with more than 5 sensors.
    ICS = Intrusion Containment System
    ICS was a product produced by Trend Micro Systems. Trend could create signatures for Viruses and Worms and then send an update to ICS and ICS would then create the signatures on the sensors. These signatures were known as the V signatures.
    ICS has been End of Saled
    So from your perspective you need not be concerned with IPS MC (VMS) or ICS.
    IME should be of interest to you as an upgrade from IEV (IME like IEV is available as part of your existing sensor support contracts and is not an additional charge).
    As you upgrade sensors to IPS v6.1 you might consider upgrading IEV to IME.
    CSM (and also MARS) would be of interest if you are going to manage more than 5 sensors. (IME and IEV are limited to 5 sensors).

  • Cisco Security Manager and User-aware firewall rules

    Hello !
    I have a firewall ASA which is managed with CSM and I try to create some user-aware rules. To do this, I need to match CSM with an Active Directory server.
    I added an AAA server group matching my Active Directory server in the Identity Setting menu from Security Manager Administration and when i click on "Test", I obtain the error message "Unsuccessful Bind prevented to fetch data, please reconfigure AAA server".
    What can I do to solve this problem ?
    Thank you !
    Stephane

    You can contact your local AM to get an evaluations version, this is related to the new 'restricted' downloaded access on CCO. You need to have a service contract assocaited for that 'specific' product to download software (I know it does not make sense in case of an evaluation).
    And you also have the following alternate:
    Note:
    This download does not include  CiscoWorks Resource Manager Essentials (RME). For customers that wish to  also evaluate CiscoWorks RME or that prefer a media format rather than a  large download, an evaluation DVD can be ordered from Cisco  Marketplace. At http://www.cisco.com/pcgi-bin/marketplace/welcome.pl,  navigate to the Collateral and Subscriptions Store and search for part  number EVAL-CSMGR-4.0.
    Regards
    Farrukh

  • Role based reflection security manager?

    Hi,
    I am trying to find out whether there is a possibility to implement a role based Security Manager to control access to reflection operations (such as checkMemberAccess() for example).
    I need to implement an application where using reflection is totally forbidden, except for some very specific parts of the code. Is this possible? If yes, how should I proceed? Is there a concept of identity around the security manager? Should I use ReflectPermission? If yes how?
    I have been doing some reading, but it is still not clear to me. I am looking for a general implementation procedure.
    Thanks.

    Jrm wrote:
    Ok, fair enough regarding storing data on end user PC.
    But I see a contradiction here (or I mis-read you). I understand that SecurityManagers are used for applets to restrict some of their actions. What if people are able to bypass SecurityManagers? What is the point of having them? If a .jar application is started with a SecurityManager, can an end user strip it and replace it with its own security manager (from its own code for example)?First of all, the SecurityManager is provided by the local computer, not the applet. But, the most important point is that the SecurityManager used when running third-party applet code is not trying to protect the third-party code, it is trying to protect the local computer from unknown third-party code. the user is perfectly able to disable the SecurityManager and/or give the third-party code whatever permissions it desires if they decide to trust the code. you are trying to protect your code (+which is the third-party code with respect to the user+) from the user. that is the opposite situation, and does not work.
    I would be happy if I could deliver a .jar application with my customized and 'unremovable' SecurityManager. Is that possible or can one always fiddle the .jar to remove it?
    Because if people can always remove it, it is a permanent open door for man-in-the-middle attacks when code is delivered to end-users, correct? Is there any way to protect .jar from tampering?As i said in my previous post, there is no way to stop this. as a software developer, i'm sure you are aware that you can find "cracked" versions of any commercial software that you are interested in (if you know where to look). what makes you think that your java program is any more "secure" than those other programs?

Maybe you are looking for