| Subcribe via RSS

Check Point Security Gateway R71 Virtual Edition

October 6th, 2010 | No Comments | Posted in Security, Software

If you along with the rest of the world, failed to notice the announcements NOT written by Check Point’s marketing people, Check Point Security Gateway is now available (General Availability).

Codename “Avatar”, if you want to know more, you could read more at Check Point’s product page:
http://www.checkpoint.com/products/security-gateway-virtual-edition/index.html

Or head over to fireverse.org.

In short, Security Gateway Virtual Edition (Avatar) is a VMWare virtual appliance (for vSphere) that uses the VMSafe API. Same as IBM ISS Virtual Server Security and Trend Micro Deep Security.

Tags: , , ,

Trend Micro OfficeScan 10.5 Scan Exclusion Bug

October 6th, 2010 | 1 Comment | Posted in Security, Trend Micro

If you have upgraded to OfficeScan 10.5, and are experiencing problems with scan exclusions, it might be because your scan exclusion list exceeds 1000 characters. If it does, it might cause the OfficeScan Master Service or the DBServer to crash.

This is a known issue! Ask your Trend Micro Partner/Reseller for Hotfix 1106.1

Tags: , , ,

WMware Workstation 7.1.2 (New Release)

September 24th, 2010 | No Comments | Posted in Software, vmware

Yesterday VMware released a new maintenance release for VMware Workstation.

The new release includes over 50 bugfixes + security fixes.
And:
– Support for Live Debugging with Visual Studio 2010
– Fixed issues with Windows 7 SP1 Beta, RHEL 6.0 Beta and Fedora 13.
– Its also supposed to be improved performance with “NAT”.
– And its tested with VMware Converter 4.3

The release notes can be found here.

Tags: ,

Netcat for VMware ESX 3.5

August 23rd, 2010 | No Comments | Posted in Software, vmware

How to install Netcat on VMware ESX 3.5.
When migrating from a standalone VMware ESX 3.5 server to a vSphere 4.x server, you might want to use netcat and tar. Instead of using SCP.
Why? Because VMWare ESX throttles the service console, resulting in ridiculously low speeds (everything from 5-15 MB/s on a 1Gbit).

By using tar and SCP, you should be able to get at least 30 MB/s.

But, netcat is NOT included in VMware ESX 3.5. It is included in 2.5 and 4.x.

So how do you install netcat on VMware ESX 3.5?

1. Grab the RPM here:
http://netcat.sourceforge.net/download.php

(Don’t use any newer versions, like 1.10, because you will run into dependencies problems, like this:
[root@vmware-esx]# rpm -ivh netcat-1.10-980.1.i586.rpm
warning: netcat-1.10-980.1.i586.rpm: V3 DSA signature: NOKEY, key ID 9c800aca
error: Failed dependencies:
libc.so.6(GLIBC_2.3.4) is needed by netcat-1.10-980.1
rpmlib(PayloadIsLzma) <= 4.4.2-1 is needed by netcat-1.10-980.1 [root@vmware-esx] 2. Install the RPM: rpm -ivh netcat-0.7.1-1.i386.rpm [root@vmware-esx bin]# rpm -ivh netcat-0.7.1-1.i386.rpm warning: netcat-0.7.1-1.i386.rpm: V3 DSA signature: NOKEY, key ID b2d79fc1 Preparing... ########################################### [100%] 1:netcat ########################################### [100%] [root@vmware-esx] And you’re done!

Tags: , , , , ,

How to kill a VM (VMware ESX 4.0)

July 6th, 2010 | No Comments | Posted in vmware

Alright, it happens from time to time. Virtual Machines get stuck.
Sometimes during boot, sometimes during shutdown and sometimes during a restore operation.

So how do I kill a Virtual Machine?

I wrote this post, back in 2009, for ESX 3.5:
http://technoblog.org/2009/01/how-to-kill-a-stuck-or-hung-vm-vmware-esx-35/

Both the “vmware-cmd /.vmx stop hard” method, and the following methods work, sometimes.. :

1. sudo vm-support -x
2. sudo less -S /proc/vmware/vm//cpu/status
3. sudo /usr/lib/vmware/bin/vmkload_app -k 9

But, when both of those fail? Then what?
How to kill a stuck VM when everything else fails?

It’s a bit brutal, but it works, but be warned, you might corrupt your VM.

1. sudo bash (for simplicity)
2. ps -ax | grep 3. Find the first number to the left, in the string with the right VM. This is the PID.
4. kill -9

Brutal? Yes. Efficient? Yes.

Tags: , , , , , , , , , , , ,

Trend Micro OfficeScan: Installation

July 2nd, 2010 | No Comments | Posted in Security, Software, Trend Micro

Here we go. The first article in my OfficeScan how-to series.

So, how to install Trend Micro OfficeScan 10.0:

These are the steps:

1. Generate Trial license

2. Download software

3. Prepare server

4. Install OfficeScan server

More »

Tags: , , , ,

OfficeScan how-to series

July 1st, 2010 | No Comments | Posted in Security, Software, Trend Micro

I have had an overwhelming response to my “Thoughts about OfficeScan 10“.

And I’m simply not able to answer all the questions regarding installation and troubleshooting.

Therefore I have decided to write a series of posts/articles, to try to answer all of your questions, and to cover some general topics.

So, this is the articles I’ve planned to write:

Trend Micro OfficeScan: Installation

Trend Micro OfficeScan: Smart Scan Server

Trend Micro OfficeScan: Deployment

Trend Micro OfficeScan: Server Components

Trend Micro OfficeScan: Troubleshooting

If anyone has any request/wishes regarding content and topics, please feel free to leave a comment!

Read the original thoughts on OfficeScan 10 (just me ranting):

http://technoblog.org/2009/09/trend-micro-officescan-10-some-thoughts/

Tags: , , ,

How to save to Google Bookmarks in Google Reader

June 3rd, 2010 | No Comments | Posted in Tips and Tricks

How to save a blog post or an article in your Google Reader directly to your Google Reader?

As far as I know there is no button for this in Google Reader. However, Google Reader has the nice “Send to” feature.

By adding Google Bookmarks as a custom “Send to”, you can simply press “Shift+T” to save whatever you are watching to Google Bookmarks.

To create a custom “Send to” click “Settings” then “Reader Settings” (Upper left corner.

Go to the “Send to” tab. And on the bottom of the page, click “Create a custom link”

Enter “Google Bookmarks” as the name.

Enter “http://www.google.com/bookmarks/mark?op=edit&output=popup&bkmk=${url}&title=${title}” as the URL.

And enter “http://www.google.com/favicon.ico” as the Icon URL.

Press save.

Now youre done! Simply press “Shift+T” while reading something in your Reader to add it to Bookmarks.

Note: If it isnt working, you may have an issue with popup-blocking. Sending to Google Bookmarks opens a popup windows.

Tags: , , ,

Mac OS X Security Configuration Guides

June 2nd, 2010 | No Comments | Posted in Security, Software

Apple has now released a 272-pages Security Configuration Guide for Mac OS X 10.6 (Snow Leopard).

Security guides for Mac OS X 10.3, 10.4 and 10.5 are also available at the same site:

Mac OS X Security guides:

http://www.apple.com/support/security/guides/

Tags: , ,

Check Point SecureClient Vista and Windows 7 64-bit

June 1st, 2010 | No Comments | Posted in Security, Software

Check Point just announced public Early Availability for their new VPN client “Discovery”.
Which is going to replace SecureClient. With Discovery comes support for XP, Vista and Windows 7 for both 32-bit and 64-bit.

Read Check Point SE Patrick Waters’ full blog post here:
http://fireverse.org/?p=468

And download the Migration Guide here:
http://www.fireverse.org/Discovery/Check_Point_EA_Discovery_MigrationGuide.pdf

Why You Should Migrate to Discovery (copied from the Migration Guide)
Check Point recommends that all customers upgrade from SecureClient to Discovery as soon as possible, because Discovery has these capabilities:
–  Supports both 32 and 64 bit Windows Vista and Windows 7
–  Uses less memory resources than SecureClient
–  Automatic disconnect/reconnect as clients move in and out of network range
–  Seamless connection experience while roaming
–  Automatic and transparent upgrades, with no administrator privileges required
–  Supports most existing features of SecureClient, including Office Mode, Desktop Firewall, Secure
Configuration Verification (SCV), Secure Domain Login (SDL), and Proxy Detection
–  Supports many additional new features, and will support even more new features in the near future
–  Does not require a SmartCenter server upgrade
–  Discovery and SecureClient can coexist on client systems during migration period

Tags: , , ,
technoblog@trap.threatobs.com