10 tips to empower users without endangering IT

In modern business circles, it's all too easy to develop an "us vs. them" mindset, with the network security professionals on one side and the regular users on the other. This is particularly true when it comes to establishing and enforcing network security guidelines, doubly so where remote access or telecommuting is involved. Everybody really is in the security game together, though, and IT can help do its part by explaining clearly what's off-limits and unacceptable for employees to do at work, and by enabling users to do everything else with minimum muss and fuss. Hence, our top-ten list of things IT can do to help users without compromising its own mission statement:

1. Publish a clear, readable acceptable-use policy (AUP) and let users know what, when and whether it's OK for them to use company computers for personal activities. Anything strictly forbidden should be stated as such.

2. Establish clear, readable guidelines for what employees must do to keep their notebooks and mobile devices safe and secure: install updates, keep antivirus and anti-spyware current, and so forth. Set up decontamination/quarantine areas on your networks, and make employees check through them whenever they bring a machine in from the outside (yours, theirs or somebody else's -- it doesn't matter).

3. If you're monitoring employee activity, tell them in advance, and remind them periodically that you're doing so, warning them of the possible consequences of infringement of the AUP.

4. Offer general encryption tools and encourage their use when sending attachments via email, or files through a Web transfer service or FTP.

5. Offer a list of safe or acceptable Web-based services (IM, file transfer, and so on) along with information on when and how these may be appropriately used at work. If no such services are allowed, state this clearly in the AUP, and provide frequent reminders.

6. Provide security training materials and make training part of new-employee orientation, plus an annual refresher. Warn people about the risks of using anonymizers and proxies to bypass content controls.

7. Provide clear, readable guidelines on when it's acceptable and when it's not acceptable to use file search or sharing software -- for example, search across multiple computers at Desktop.Google.com -- and what kinds of information may not be accessed using these tools. Explain relevant risks, rules and mandates that do not permit such access to occur or that levy major costs and consequences should breaches happen.

8. Provide clear guidelines for use of online-storage services for on-the-road or out-of-the-office file access, and explain when and how encryption should be used to render potentially sensitive or dangerous material unreadable. Provide security tokens or smart cards to secure such access so that losing a laptop doesn't mean losing control over important data.

9. Provide secure remote access to company email, applications and files to employees on a need-to-access basis that's approved by management, via a Web interface (Microsoft OWA, for example) or via VPN connections. Teach employees how to use these tools properly, offer online tutorials and help files, and be ready to help them make this technology work.

10. Be flexible, understanding and polite when it comes to employees dealing with home life at work. It happens, and the best way to minimize interruptions and frustration is to acknowledge the importance of both and to do your best to make sure employees can get work done when they need to do so while feeling free to work outside normal hours to make up for occasional bumps in the road of life and work.

By supporting users and helping them do what they must at home and at work, you will limit their temptation to work around, bypass or ignore AUP requirements.

Wireless carrier association warns against buying into WiMAX hype

The GSM Association says that businesses and investors who found themselves dazzled by the recent WiMAX World convention shouldn’t buy into the hype just yet.

The reason, it says, is because WiMAX is still in its developmental stages, while High-Speed Packet Access (HSPA) is delivering high-speed mobile broadband right now.

“I think HSPA is one of the few recent technologies to not be overhyped,” says David Pringle, the spokesman for the GSMA, a trade association that represents over 700 GSM mobile phone operators. “It’s a technology that came out of left field, but its effect on performance has been dramatic. It’s offering wireless broadband experience, and it’s here today.”

HSPA is a comprised of two wireless broadband protocols, known as High Speed Downlink Packet Access (HSDPA) and High Speed Uplink Packet Access (HPUSA), that operate on third-generation mobile devices. HSPDA, which can currently download data at a rate of 7Mbps, is currently used in 3G handsets developed by companies such as AT&T, Samsung and Vodafone.

But while WiMAX has received a great deal of media attention in the wake of the recent WiMAX convention in Chicago that saw the debut of Motorola’s WiMAX client chipset, Pringle says that WiMAX’s working models still can’t outperform HSPA’s current technology.

“We’re close to developing HSPA networks that will reach speeds of 14Mbps,” he says. “You don’t see any early WiMAX network performing that fast. A WiMAX provider would have to build a very dense network to outperform HSPA.”

Pringle says that he expects HSPA to be the dominant wireless broadband technology for at least the next five years, after which it might be overtaken by so-called “fourth-generation” wireless technology such as Long-Term Evolution (LTE). A study released this summer by Juniper Research backs up Pringle’s point, as it projects that HSPA will “dominate” wireless broadband for the next five years, and will account for roughly 70% of the mobile broadband subscriber base. Similarly, a study by Informa Telecoms and Media projects that HSDPA will account for 65% of 3.5G wireless broadband subscribers worldwide. ABI Research, meanwhile, found earlier this year that WiMAX services were a ways off from being competitive with 3G services.

“Technologies like WiMAX are still in a phase where people are speculating about what they can do,” says Pringle. “Whereas in the case of AT&T, you’ve reached the point where all of their 3G devices have HSPA, and there are over 100 handsets that use HSPA and are available right now.”

All contents copyright 1995-2007 Network World, Inc. http://www.networkworld.com

13 free tools to ease IT management

Finding the perfect tool to relieve a pain point or fill a gap can be invaluable to network managers. When the tool is free? Even better.

Freeware applications can be a simple utility such as Ping or a more complex set of tools that address many facets of IT management, such as the open source network management software Nagios. In both cases, the tools are free and the benefits are plenty. Tristan Rhodes, network engineer at Weber State University in Ogden, Utah, authors a blog on the topic of open source software and supports such free tools for both philosophical and practical reasons.

"I am an advocate for open source software, and I am a network engineer who needs tools," he says. "We use a large number of open source network management and security tools."

Here we’ve compiled some favorite free software finds that have proven to ease IT management at no cost to their users.

1. FastSCP

This freeware application, introduced in 2006 by virtual systems management Veeam, promises to provide file management capabilities for VMware ESX Server users.

Downloaded more than 12,000 times to date, FastSCP (Fast and Secure Copy) enables IT managers to transfer files between ESX Server and Windows machines, without reconfiguring the ESX Server, Veeam executives say. The company also offers commercial applications but built this freeware tool based on its previous experience with Windows file management products at Aelita Software, which was acquired in 2004 by Quest Software.

Mark Devlin, virtualization consultant at Auracom Technologies in Perth, Australia, says he uses the application because it saves a lot of time and costs nothing.

"FastSCP was the only product that was there at the very beginning of the ESX 3.x release that augments fast data transfer from disparate operating system infrastructure such as Windows to VMware ESX and back," Devlin says. "It greatly reduces downtime by expediting transfer of large contiguous files and provides file system visibility into both Windows and VMware ESX infrastructure."

2. Leaf

Leaf Networks' free software of the same name is a networking platform said to resemble an instant messenger or Skype client, which works to enable network and device sharing between an individual's home office and work PCs, for example, or among several individuals.

For Ryan O'Connell, a freelance software engineer, the application helps him stay connected and in touch regardless of location. "I was looking for a way to stay connected to my home network when I was on the go," he says.

O'Connell says the software works like a messenger application in which individuals can invite others to join the network from an easy-to-use interface after downloading and installing the application. The user interface allowed him to select what he wanted to share and with whom, and Leaf makes it simple for other less-savvy users to join his network.

"It can be used like a VPN or FTP server by users that do not know the first thing about setting those servers up," he explains.

3. NetCPS

Among the "tried-and-true freeware classics" James Kritcher uses is NetCPS. The vice president of IT at White Electronic Designs in Phoenix says he puts the application to work measuring network performance.

Written by its developer Jarle Aase, NetCPS is a utility to measure performance on TCP/IP networks. Once downloaded, the application will send data between two machines to measure how well it travels via TCP/IP.

"It should be useful for testing networks, and the performance of hubs, switches and routers," Aase wrote on the freeware's download page. NetCPS is freeware that along with its source code can be used for most purposes -- except the Web site indicates governmental and military use is not permitted

4. NetFlow Configurator

Network management software maker SolarWinds is expected to make available a freeware application next week that the company says will enable network managers to remotely configure NetFlow on Cisco devices.

The NetFlow Configurator utility will let IT managers unfamiliar with the command-line options for configuring NetFlow set up NetFlow on supported Cisco devices. The utility also enables IT managers to configure collectors and ports, and set up NetFlow ingress/egress configurations on each interface. The software, SolarWinds says, will also automatically configure NetFlow options in a "consistent manner across varying levels of Cisco IOS."

5. NTOP

One of the reasons Weber State University's Rhodes taps freeware is to get a picture of network activity.

For instance, one of the many freeware and open source applications running in his network today is NTOP, a network traffic probe that can sort network traffic according to protocols, display traffic statistics, show IP traffic distribution among protocols, and identify e-mail addresses of computer users, among other things.

"NTOP provides an informational dashboard that allows us to see who is using our network and what type of traffic is being sent," Rhodes says.

NTOP is distributed under the GNU General Public License, and users must accept the terms of the license to download the free application.

6. PacketFence

For security managers looking for an inexpensive means to deploying network access control (NAC) technologies, PacketFence may be worth checking out.

The open source NAC system installs on Red Hat Enterprise Linux or Fedora or as a virtual appliance with PacketFence ZEN and uses isolation techniques such as DHCP scope changes to monitor and limit access to network devices and resources.

According to Rhodes, "This is the best open source NAC available. We use it to capture users who violate our network policies and inform them of the violation."

7. PhpWiki

Rick Beebe, manager of system and network engineering for ITS-Med at Yale University School of Medicine in New Haven, Conn., says he recently switched to the freeware Wiki application PhpWiki for system documentation.

"We've been using a shared directory with a bunch of text and Word documents in it. Moving to a Wiki allows for easier access and updating, and makes everything searchable," Beebe says.

8. Safe Access Lite

Security vendor StillSecure recently made available a free version of its NAC technology that the company says will help users assess the security posture of up to 250 endpoints.

Safe Access Lite works in a monitor-only manner, and tests endpoints, such as client desktops, to ensure they are compliant with preset security policies or the most recent patch update, for instance. The software downloads as a preconfigured VMware virtual appliance and uses three of StillSecure's testing methods: agentless, agent-based and Web-based nonpersistent agent.

While there are no fees associated with using Safe Access Lite, StillSecure requires those that download to register with an e-mail address, which the company says gives users access to the license key, updates and online support.

9. SequoiaView

This free application, developed by the computer science department at the Eindhoven University of Technology, provides storage visualization capabilities. The software can show users a display of file storage and how much is being consumed in a graph display.

Craig Bush, network administrator at Exactech in Gainesville, Fla., says he has found a few uses for the tool from identifying users who consume the most storage to finding places where resources can be freed up.

"We use it for displaying the heavy hitters on our file server for a quick and dirty way to see who's taking up what on our file storage," Bush says. "I also use it on my local drive to see where things are being stored and what stuff I can clean up."

10. ShareWatch

For network managers looking to keep tabs on remote computers and servers, ShareWatch could give them a window into what files and printers are being shared on the system and by whom.

White Electronic Design's Kritcher says he uses the freeware application to "monitor network share activity," and application creator Steve Miller says on the download Web site that "ShareWatch will show you all resources in use and by what users."

The software also allows IT managers to close files, disconnect users, and remove share on local and remote computers.

11. Shavlik Google Gadget

Patch management vendor Shavlik Technologies last week made available a freeware version of its technology via a Google Gadget.

"Gadgets powered by Google" are miniature objects made by Google users that offer dynamic content, Google says.

The Shavlik Google Gadget is supported on Windows 2000 SP4 and Windows XP SP2 systems that are running Google Desktop. The free download provides a patch scanning tool for computer users who want to check their system for missing patches. It uses the same security scanning engines used in Shavlik's NetChk product, the company says.

"We wanted to provide a no-cost option [to users] and fill the hole that is being left by those security vendors that are discontinuing previously offered free security services," said Mark Shavlik, CEO of Shavlik Technologies, said in a company press release.

12. Spiceworks IT Desktop

Jon Chorney, systems administrator of Master, Sidlow & Associates in Wilmington, Del., says the free software from Spiceworks helps him monitor 35 workstations, seven servers, 15 printers and a few other devices at no cost.

IT Desktop runs on an IT manager's workstation and inventories systems, clients and other IT-based devices through agent-less discovery methods using protocols such as Windows Management Instrumentation and Secure Shell (SSH). Chorney says the software also makes it possible for less-experienced staff members to take an active part in monitoring the network.

"Spiceworks now allows access from a separate computer, and I have a part-time intern working for me. Because the interface is so easy to understand, I can assign him the task of regularly checking the results of the scans. This will materially improve my ability to catch issues early on," Chorney says. "You can get a lot of important information and understand it without having to have a lot of technical knowledge. The fact that it’s free means that it’s all the easier for the small business to take advantage of."

13. ZipTie

Network configuration management is a time-consuming and detail-oriented task, and one that begs for automation. That's why when AlterPoint spun out an open source project and community from its commercial configuration management technology, Weber State University's Rhodes couldn't have been more pleased.

"We have more than 700 network devices across our campus. We need to know what devices are plugged into our network and what the configurations of those devices are. If a device fails, we want to have a configuration backup available so that we can quickly replace the devices," Rhodes says.

ZipTie is a client-side application that can be downloaded to a Windows or Linux machine. It features device discovery and backup, device configuration comparison, configuration change detection, configuration distribution and an extensive set of point-and-click tools for performing administrative functions on network devices such as routers, switches and firewalls.

"ZipTie has allowed us to securely [using SSH] download our configurations in an automated way," Rhodes says.

All contents copyright 1995-2007 Network World, Inc. http://www.networkworld.com

October Deals!

Digital Camera w/Cat5e Cable Purchase

From now until the end of October, when you purchase any 2 cases of Cat5e patch cables, you will receive 1 free Kodak EasyShare C613* Digital camera. To qualify cases must be full, unbroken quantities, same cable color per case, same length per case. Quantities and prices are as follows:

3ft = 250 pieces/case $285.00
5ft = 200 pieces/case $290.00
7ft = 150 pieces/case $279.00
10ft = 100 pieces/case $260.00
14ft = 80 pieces/case $266.00
25ft = 60 pieces/case $308.40

Click Here for Free Camera!

Note: Promotion ends 10-31-07.
Promotion may be terminated at any time.
*Camera may be substituted for comparable model depending on availability.

Extra Fall Savings

To add to our already great prices, we are offering 10% off any pre-made cable this summer. Includes all Audio/Video, Cat5E, Cat6, USB, and Fiber Cables! Just type in coupon code FALL2007 in your shopping cart! Coupon not valid with any other offer. Offer valid through 12/20/07.