Use Virtual Cener behind a firewall - high security

Similar Questions

• Will be - this safe to use XP behind a firewall after the end of LIFE?

  I have a netbook that I use as an external 1 TB NAS with a hard drive device on my LAN.  I use it also for connection of MagicJack.  I have a firewall in my router and the only thing that that accesses this machine online is updated antivirus and places / receives calls from Magic Jack.  I don't respect the minimum specifications for Windows 7.

  If I keep this machine behind the firewall and prevent web access, it will be safe to stay with XP after the end of life?  MagicJack is a security breach?  My only other option is to switch to a Linux distribution, but I need to configure to run on a Windows network and it seems that you have to do back flips to get the MagicJack to work on Linux.
  Any advice will be appreciated.

  End of the security updates is something much more...

  antivirus support, but again, you are not protected completely...
  http://answers.Microsoft.com/en-us/protect/Forum/protect_other-protect_updating/Microsoft-will-continue-to-provide-updates-to-our/3ecaa09a-Abda-44f7-BCE3-91375c47b325

• ACS 4.0 behind a firewall

  Hi, we have an ACS 4.0 behind a firewall...

  I want to know what are the ports that must be open beyond 2002 to end of remote connection... ?

  Any idea... ?

  Hello

  ACS is accessible via tcp, 2002, for the initial connection. For subsequent access (moving from one page to the other), it will be used at random ports 2003 or higher (tcp).

  To access this box remotely, you must open a range of ports, for example-> 3500 2002 or 2002-> 5000. PLS, be careful when you specify the range, as too many ports allowed ports COULD present a risk to your ACS server.

  example:

  list of access outside the range of allowed hosts 2002 5000 tcp

  Hope this helps.

  Rgds,

  AK

• Security options for Hotmail (once offered Standard or high-security)

  Last year and this year, by signing on Hotmail one option has been provided for Standard or high security.  I don't recall that consisted of a statement of what the definitions of 'Standard' or 'High security' or that the option has been removed.

  Please provide:
  (1) an explanation of the difference between the two are in terms of technology used
  (for example, Microsoft uses default SSL between browser and their servers?) and,
  (2) what happened to this option and what is the current level of protection of the input/output related email
  through hotmail from Microsoft and other email services?

  Thank you.

  Submit all Live and Hotmail queries on the forum right here:

  Windows Live Solution Center
  http://windowslivehelp.com/

• Windows Firewall and Security Center will not start, error 1068 and 1079

  I can't start my firewall Windows, error: 1079... or Security Center, error: 1068. Can help you with this question? When I try to access the Dependencies tab I get this error: Win 32: the specefied for this service is different from the specefied to account for other services running in the same process.

  I checked to see if dependencies were the same account before I got the message of 'Win 32' and WMI Service runs in the same account (Local Service) as firewall and Security Center, but the RPC Service is running on the Network Service account and cannot be changed via the services console, because the account fields are gray and cannot be viewed or modified. I try to avoid using the tool 'SubInACL' because I don't want to reset the whole registry.

  Help, please!

  The other post:

  I had a problem with obtaining the Windows Firewall and Security Center to start. Service account permissions have been changed at some point, including the depedencies. I get the error 1079 on the Windows Firewall and 1068 on the Security Center. Both are defined on the Local Service, but dependence, the CPP is set to Network Service and cannot be changed because the user fields are gray. I try to avoid using the SubInACL.exe because I don't want to reset the whole registry. Can you help me please?

  No, I'm not on a domain. I connect via a open wireless "hotspot". My main problem is; I don't have a Firewall or Security Center. Nor will begin. I get the error: 1068, to Security Center and an error: 1079 on Windows Firewall. When I try to access the dependencies on either I get this window:

  WIN 32: The account specified for this service is different from the account specified for other services running in the same process.

  A month ago I made the mistake of trying to brand of ACDSee of security, "ACDOne" which includes software "BitDefender". That's when I lost my firewall and Security Center. BIG MISTAKE! I uninstalled and deleted all the files that I found that have been left.

  My Security Essentials and Windows Defender work very well. I'm stuck and need help with this please! Please, I beg you! Someone... Help!

  The system cannot find the specified file.

  http://support.Microsoft.com/kb/947821>

  After you download and run the system update readiness tool, restart your computer. Then, immediately try to install the updates.

  UTC/GMT is 02:51 Wednesday, April 25, 2012

• Monitoring of the BONE located behind a firewall

  We must monitor the infrastructure of the operating system on our web servers. These servers are locked for NIS accounts SSH connections, but we can configure a local user with permissions of SSH to a remote agent.

  If we wanted to install a Manager agent on that server instead, is anyway to configure agent manager so that the data is only collected in a survey of the FMS, rather than pushing for the https port 8443 on network internal? Basically, do the transfer information officer Manager of a 'pull' instead of a 'push '.

  Or y at - it a way to get this information to the FMS server internal without opening a two-way port, or not allowing a connection on one direction to be open?

  Or the bottom line here - what is the accepted best practice to create a secure communication information of OS of DMZ servers behind a firewall of SGF?

  Unfortunately, it is currently the only solution.

  In the next major release, we'll add a feature where you can enable reverse-vote for Manager of the specific agent. Those who would be interviewed by the FMS instead of pushing their data and the connection will always be initialized by the FMS.

  This will reverse the direction of the connection and the FMS now needs to open a connection in the demilitarized zone. This will remove the requirement to open an outgoing socket of the DMZ to the host of the FMS.

  Stefan

• Security level limited access to high security

  Dear all,

  I have something that I need your help it clarify for me; for reasons of tests outside NAT in PIX, I placed a host on the external interface of my FW PIX and another on the inside interface. We'll call inside host (Host: 172.16.1.178) and outside (Host B: 192.168.1.96).

  I then applied:

  NAT (inside) 0 0 0 and

  NAT (outside) 0 0 0 outside

  orders to have two subnets appear to others with their original IP addresses. When ping from host B to host, no response is received and a 305005 syslog message (no translation group not found for ICMP src outdoors: 192.168.1.96 dst inside: 172.16.1.178)... However, when ping from host A to host B with the original B IP host, a response is received successfully. After this, lead to confusion if I try again to ping from host B to host, things work this time without errors. (Note: ICMP is applied both way).

  Applying clear XLATE, again! Looks like the PIX doesn't sends the request of host B to host A unless there is a previous, established session from the host through the PIX.

  Does anyone have an explanation for what's going on? Is their someone who have experienced something like this before?

  Know your opinion.

  Thank you

  Haitham

  You are using nat 0 (identity nat) that does not allow two-way communication, UNLESS the host location to the interface high security initiates the connection.

  You can try the following:

  public static 172.16.1.178 (Interior, exterior) 172.16.1.178 netmask 255.255.255.255

  Which allows inside the host to be 'translated' to the outside and allow the host located on the untrsuted start the communication itself (will be seen with the same IP address)

  more information:

  http://www.Cisco.com/univercd/CC/TD/doc/product/iaabu/PIX/pix_sw/v_63/cmdref/s.htm#wp1026694

  Franco Zamora

• Don't know which one to use, virtual server or ESXi

  I have a couple of Windows server running on IBM e series.  They do not work with heavy loads so I thought to bring together them.  I used Virtual Server 1 x front on my desk and loved so I thought to use it, but now that ESXi is available I want to understand if this is a better option.

  I know that ESXi will run the VM faster and uses fewer resources, but from what I read, it seems that it is not as easy to manage.  Everyone notes that the console is difficult to transition to?  Furthermore, what about backups?  For example, if I want to make a snapshot I can run and copy off in my NAS box, but it seems that you cannot directly access the VM ESXi files.  Is this correct?

  Thank you

  Steve

  For example, if I want to make a snapshot I can run and copy off in my NAS box, but it seems that you cannot directly access the VM ESXi files. Is this correct?

  A snapshot is not a good method of backup, and this isn't how it should be used.  A snapshot preserves the State of a virtual machine that allows you to make changes and revert to a previous state if you need to.  Should not be considered as an alternative to long-term backup.  That's why you have to VCB.

  ESX 3i is very easy to manage, the hardest part is not console, so you can not do operations on the host easily, but you can copy files from ESX via the data store.  While ESX is more suited for very large like VM 15 guests or more, and if you are not running a very high load and not many VM VM Server will work fine.  There isn't really a difference in performance between any virtualization product until you start to reach the breaking point.  ESX can accommodate dozens of virtual machines on a computer, is there that ESX is really profitable (and I know that ESX 3i is free) but pound for pound can match VM Ware ESX Server 3i for small host environments, and given that it's windows it does not have a lot to manage.

• Why can't connect using Apple Airport WIFI of my remote security cameras but can connect using the Xfinity WIFI Modem/Router open?

  Why can't connect using Apple Airport WIFI of my remote security cameras but can connect using the Xfinity WIFI Modem/Router open?

  Two possibilities:

  (1) your airport WiFi might have a network name that is not in line with best practices, wireless

  A good wireless network name is...

  ... In short no more than 20 characters

  Simple... no special characters like an apostrophe, dollar sign, asterisk, etc.

  Compact, without spaces in the name

  For example, a wireless network network name as... red .dfedoryk Apple wireless network... .is not what you want. Something like... .dfedorykwireless. .. masse are much more likely to connect to non-Apple devices.

  Same guidelines your password

  (2) Apple gives the same name to network 2.4 GHz and 5 GHz network that produces double router band.  Some non-Apple devices are confused by the present, you may need to use the option to assign a different name for the network of 5 GHz on the router from Apple. Then, 'point' your device to the network name specific to which you want to connect.

• How can I change to use a wep, tells me is not secure personal wpa running? I have a brand new d link 2680 router & used windows xp 3?

  How can I change to use a wep, tells me is not secure personal wpa running? I have a brand new d link 2680 router & used windows xp 3?

  Wireless security is controlled by the router.

  Download the manual of your router on the following link:
      <>FTP://FTP.Dlink.co.UK/diagrams/Misc/DSL-2680_A1_Manual_EU_1.0.PDF >

  To change to the WPA instructions are on page 39.

  After that, you may need to remove all references to your router on your devices without wire, then re-establisg the connection.   Alternatively, you can change your Secure ID (SSID) as you make changes to the configuration of your router and then reconnect the new SSID for all devices.

  HTH,
  JW

• I use Verizon as a server with their security suite. I can receive emails with any address with the exception of Windows Live Hotmail addresses.

  I use verizon as a server with their security suite.  I can receive emails with any address with the exception of hotmail addresses.  I put the filters for hotmail, but I can not receive emails from anyone with a hotmail account.  Any ideas or suggestions?
  Thank you

  Hi DonaldMagaw,

  When you use Windows Live Hotmail and the question you have posted is related to Windows Live, so it would be better suited in the Windows Live community. Please visit the link below to find a community that will provide the best support.

  Windows Live Solution Center Hotmail Portal

  http://windowslivehelp.com/product.aspx?ProductID=1

  I hope this helps.

• No reason not to use Virtual PC to work around inconsistency of program?

  I just bought a $29 printer instead of spending $45 to replace the No. 23 of my DeskJet HP ink cartridge.  Unfortunately, I forgot to check for compatibility and have not been able to find a way to share with Windows 98SE.

  I tried to upgrade my old copy of the print shop to Vista, but the Compatibility Assistant told me it was a known incompatibility.

  On a whim, I booted up my copy of Virtual PC with Windows XP and was able to install and run it without problem. THERE is a driver available for the printer and had XP no harm to use as a shared printer.

  Is there a reason not to use Virtual PC to work around incompatibility with Vista? I know that it is not suitable for the games because of limited capacity, but what about productivity as The Print Shop Deluxe 5.0 programs?

  P.S. Can someone suggest a way to share a HP DeskJet 1000 with Windows 98SE? I saw a reference to another printer that has 98 drivers called a Deskjet 1000cse, but according to the website of HP, this is another printer that is no longer supported. Any chance I can use drivers 95/98 for CSE to connect to a share of Vista? If so, how do I configure it? If these drivers are like drivers for my DeskJet 812C, the option "have disk" will NOT work in the list, the installer will put things for a local printer rather than on a network, an and I do not remember that it is also easy to change the port to a network printer, you can with XP and Vista.

  Is there a reason not to use Virtual PC to work around incompatibility with Vista? I know that it is not suitable for the games because of limited capacity, but what about productivity as The Print Shop Deluxe 5.0 programs?

  As long as it works, it's a great idea.

  teengeek.freehostingcloud.com

• Error message: "Lightroom can't access the internet, check your firewall and security applications. »

  Hello.  I have an Acer Aspire under Vista 64-bit desktop.  I have an error message when I try to export photos from Adobe Lightroom on my zenfolio online gallery.  The error message reads:

  "Lightroom can't access the internet.  Please check your firewall and security applications (Little Snitch, Norton, Zone defense,...) and add exceptions to the need to allow lightroom to connect to zenfolio.com. "

  I, to the best of my knowledge, did in the Security section of the Control Panel, adding to the list of exceptions in Lightroom.  However, it did not connect.

  I'd appreciate any help on this!

  Hello.  I have an Acer Aspire under Vista 64-bit desktop.  I have an error message when I try to export photos from Adobe Lightroom on my zenfolio online gallery.  The error message reads:

  "Lightroom can't access the internet.  Please check your firewall and security applications (Little Snitch, Norton, Zone defense,...) and add exceptions to the need to allow lightroom to connect to zenfolio.com. "

  I, to the best of my knowledge, did in the Security section of the Control Panel, adding to the list of exceptions in Lightroom.  However, it did not connect.

  I'd appreciate any help on this!

  It might be best if you find the solution of Adobe Lightroom forum. After all, the forum is dedicated exclusively to the Lightroom application.
  Here is the link to the forum (there is more than one available forum.)
  http://forums.Adobe.com/community/Lightroom

  t-4-2

• How can I configure a series existing comport on windows 7 OS without using Virtual comport Software Support

  Original title - Manzoy

  How can I configure a series existing comport on windows 7 OS without using Virtual comport Software Support

  Hi G Nasir Khan,

  Your question of Windows is more complex than what is generally answered in the Microsoft Answers forums. Appropriate in the TechNet forums.

  Please post your question in the Windows 7 IT Pro TechNet Forums: http://social.technet.microsoft.com/Forums/windows/en-US/home?category=w7itpro

  Thank you.

• It is possible to configure router CISCO1921/K9 from site to Site vpn behind a firewall?

  I am looking to buy CISCO1921/K9 to configure vpn site to site with Amazon VPN. We are behind a firewall. I try to install the new CISCO1921/K9 router according to the scheme of quick text below. My setup work? and what are the ports will it transfer to my firewall?

  INTERNET--> Modem to ISP---> firewall - CISCO1921/K9

  Hi Paul,.

  (192.168.1.0/24) - router (10.1.1.1)-(10.1.1.2) firewall(81.92.61.x/27)---Internet

  The configuration is very simple...

  1. There will be no modifications on the configuration of the VPN router with the exception that the interface of the router (turning to the firewall) will be to have private IP 10.1.1.1

  2. you will need to take a public IP of your range of public (e.g. 81.92.61.2) and will share the same to your remote location which they set up as peers IP to their end.

  3. now you have to configure 2 NAT type on your firewall.

  NAT source:-when your router will initiate VPN

  Before NAT: Destination - Source 10.1.1.1-(homologous remote IP)

  After NAT: Destination - Source 81.92.61.2-(homologous remote IP)

  Destination NAT:-when the remote location will launch the VPN

  before NAT: Destination - Source (remote peer IP)-(81.92.61.2)

  After NAT: Destination - Source (remote peer IP)-(10.1.1.1)

  I hope this is clear :)