Managers Like Names...
on
Future Of IDS
·
· Score: 4, Interesting
I'm about to deploy an IDS system at my work. When I met with the director and CIO about this they asked for recommendations, of course. I first suggested Snort. It's free, it works well, and I had used it before. But, since it didn't have someone standing behind it, the CIO wasn't interested. They rather spend $20K on another product. To them it is more important to be able to say "Hey, we were using product X from company Y! Don't blame us!" if something goes wrong.
In places where the budget is a bigger concern I still implement Snort. I can't possibly afford to stick a commercial product on every subnet that I'd like to.
No matter which mail client you use, you have to pay $70/user for an Exchange Client Access License. That license also lets you use Outlook.
So..to put a user on Exchange I must buy one of those. If I want to use Evolution I then have to pay them $70 for their connector. That's a grand total of $140/user to put on Exchange and have them use Ximian. If they used Outlook they would only spend $70/user for the CAL.
I'm not factoring in the OS cost in to this..sure, Linux is free and Windows isn't. I'm just talking mail clients and access.
You have to buy a client license for the user if they use Evolution or Outlook...so that's $70. Then, you have to pay for the Evolution connector, which is another $70/user. You can't install the connector on every machine for just $70.
No, you do not have to pay for Outlook. It comes as part of the client license for Exchange (the first $70/user).
Using Evolution with Exchange is going to cost a company more than using Outlook. When deploying Exchange you buy a server license, either standard or enterprise, and then you buy client licenses for each user. Along with that license you also get an Outlook license.
If we wanted to move to Evolution we'd still have to pay the same amount, and then have to pay for the Exchange connector on top of it. The price just went up $70/user to move to Evolution. I can't seem to locate my quote for our Exchange migration here, but a quick check shows a 5 user client access pack for Exchange is about $350...so the price per user just doubled.
I'll pay it... I've been waiting for this since Evolution was first announced. Every LinuxWorld I ask them about Exchange support so it's nice to see it coming soon. But, it will be harder for someone else to do a mass migration.
Something to consider.... I hope it works for them. I see Ximian as a company that needs to stick around for the Linux desktop to really take off.
I hear this sometimes. Cisco can *NOT* void your warranty by using 3rd party RAM. It's part of the Magnuson-Moss Act. As long as the memory meets Cisco specs you are allowed to use it. Cisco won't warranty it. If the memory fries and takes the router with it, Cisco won't warranty th router then..but they can't just void your warranty simply because you used it.
Many people that modify their cars know this act. Dealers like to claim a warranty is void when a performance part is put on a car. But as this act states, if the part didn't cause the failure you CAN NOT void the warranty claim.
Router memory is cheap, UNLESS you buy it from Cisco. Viking and Kingston both make excellent memory for Cisco routers at a *MUCH* cheaper cost than Cisco. It's not like Cisco memory is anything amazing, it's just OEM memory.
I'm moving my company over to a pair of T-1s multihomed right now. We're doing it through Bellsouth and having the T-1s go to seperate POPs and our router will run BGP. Sure, we still rely on Bellsouth but it's very unlikely ALL of Bellsouth will go down at once. Doing this between major telcos would be a real issue I don't think we can afford.
The dual-homing aspect of this didn't cost us any extra. We're just paying for two seperate T-1s. To do this you need a somewhat sizeable router. They suggest a Cisco 3640 with 128MB, which is exactly what I'm implementing.
No, you can't do this at home, but why would you? It's not that unreasonable for a business. We're looking at like $2K-2.5K/month for everything and a one time charge for the router unless we lease it.
For the CCNA all you really need are a couple of 2500s and some serial cables. Just enough to connect a couple of routers and ping across. To be safe I'd get 3.
For the CCNP it takes a little more. You'll need several routers, some switches, and to do it right, and ISDN simulator. A big chunk of the CCNP is remote access and you can't practice much without the ISDN piece. You also need to make sure you buy the right switches, since the command syntax varies some between the different lines.
Instead of spending a fortune you may consider just renting lab time. Several places do it online and you just telnet right in and do your thing. Some people don't like that because you don't actually touch the gear, but I went to an excellent CCNP boot camp and we almost never touched the equipment. Just telnetted/consoled in and did our thing. The hardware building of a router takes a few mins...the configuration is what takes time.
Years ago when I was a kid I remember watching the Leonids. While watching them I distinctly remember hearing some of the larger ones doing this exact buzzing. I always figured it was just a bad memory or something. Nice to know I'm not crazy.:)
It did sound like a fizzing sound... Not very loud, but you would definately hear it.
What will the kids run? What educational software is there for Linux? I mean REALLY? Sure, there is some, but it's not even close to what is available for Windows.
Let's not forget, these are students and teachers. These aren't Unix geeks running this stuff. Do we really expect them to run and get around in Linux? Anyone else remember how well the computers were supported in school? Almost not at all. If it wasn't spelled out in a book word for word they couldn't do it.
Also, The Red Hat Network is nice..but it's not what I'd call full support. Microsoft's support would go further than Windows Update, which is the equivelant of RHN.
Nice marketing ploy though..doubt it'll see much press.
If you happen to have Compaq servers check out their Lights Out Management boards. They are almost a complete PC on a card. Intel i960 CPU, RAM, ATI Vid, and a NIC. They let you completely remote control the system through a web browser. It has its own power supply so you can restart the system and follow it through the POST test and everything.
Pretty slick. They are $499. I put them in all new servers now.
Notice I said mirror. So every write goes to both disks. Sure, I could get a bad controller and get garbage on both disks but that's a low risk I'm willing to take since spending $5K on a home backup solution isn't in my budget.
I've run in to the same problem. You can buy a 100GB drive for cheap, but good luck backing it up. The only real solution I've come up with is to just buy extra drives and mirror or RAID them.
I still think it's crazy to pay $140/tape for SDLT at the office....
First, you need a providor. I just priced T-1s for our office. They are falling in the range of $1K-$1200/month for an unmanaged connection. This means I handle the routers and everything, they give me the line. For that much you'll get an SLA and a ocnnection to a good providor such as AT&T or Sprint. If you want cheaper go down a tier in providor to someone that buys their bandwidth from the big guys.
After that you'll need a router. The Cisco 2600s are popular. You can get a T-1 card for them with internal CSU. Probably $3K new, $2K used on ebay.
After that it's up to you. Want your own domain? Host your own DNS. Set up a web site...whatever. Don't forget security. You can do pretty decent filtering on the router itself.
With this setup you'll also get a block of IPs and a full T-1 with 1.5Mb/sec up and down. So you can host what you want and do what you want. Is it worth this much over a $40 2Mb/sec cable modem? Not to me.
I killed a Tbird by running it without a heatsink for a whole 4 seconds. It got very hot, VERY fast. I know several other people that have done similar things. 9 minutes? I think not.
We wouldn't lock down our development staff. It would just be too big of a burden on us and them. My support guys would constantly be running back and forth.
BUT, I can see why they'd want to do it. By far our worst offenders for installing unlicensed and non-standard software (not dev tools) are developers. And frankly, 3 out of 4 developers I meet (DEFINATELY not normal Slashdot developers) can't fix their own PC when they break it. I'm amazed at the lack of understanding on the base system...I don't mean really get in there, but just simple things a real "power user" would know.
This is my point too. You can get an Internet T-1 for $1200/month for a tier 1. Go to a smaller ISP and you'll get it for far less and have very good reliability.
One of our Internet T-1s at work ends up in New York (from NC) and is only $1200/month.
But, why wireless? Just go to a telco and price a point to point T1 to your ISP. That way you don't have to rig a solution and it's something the ISP is already very familiar with. You won't have to worry about rain, fog, growing trees, etc.
I used to LOVE these things. I went looking for them a while back and found they don't make them any more. I'd be thrilled to have them come out again.
I have RoadRunner in Raleigh, NC and never see slowdowns. I always get the full 2Mb/sec when downloading with DAP. It's been this way for a long time since I first got it. They seem to do a very good job of subnetting people up.
But, all bandwidth can be oversold, not just cable. My friend had DSL in Texas and the telco oversold the local bandwidth and his pings went to 500ms just to his first hop at the ISP. At some point ALL bandwidth is shared, it just happens that DSL users have a piece of wire to the CO...but at the CO it all comes together, just like a loop on a cable modem.\
Slashdot Mirror
I'm about to deploy an IDS system at my work. When I met with the director and CIO about this they asked for recommendations, of course. I first suggested Snort. It's free, it works well, and I had used it before. But, since it didn't have someone standing behind it, the CIO wasn't interested. They rather spend $20K on another product. To them it is more important to be able to say "Hey, we were using product X from company Y! Don't blame us!" if something goes wrong.
In places where the budget is a bigger concern I still implement Snort. I can't possibly afford to stick a commercial product on every subnet that I'd like to.
No matter which mail client you use, you have to pay $70/user for an Exchange Client Access License. That license also lets you use Outlook.
So..to put a user on Exchange I must buy one of those. If I want to use Evolution I then have to pay them $70 for their connector. That's a grand total of $140/user to put on Exchange and have them use Ximian. If they used Outlook they would only spend $70/user for the CAL.
I'm not factoring in the OS cost in to this..sure, Linux is free and Windows isn't. I'm just talking mail clients and access.
You have to buy a client license for the user if they use Evolution or Outlook...so that's $70. Then, you have to pay for the Evolution connector, which is another $70/user. You can't install the connector on every machine for just $70.
No, you do not have to pay for Outlook. It comes as part of the client license for Exchange (the first $70/user).
Using Evolution with Exchange is going to cost a company more than using Outlook. When deploying Exchange you buy a server license, either standard or enterprise, and then you buy client licenses for each user. Along with that license you also get an Outlook license.
If we wanted to move to Evolution we'd still have to pay the same amount, and then have to pay for the Exchange connector on top of it. The price just went up $70/user to move to Evolution. I can't seem to locate my quote for our Exchange migration here, but a quick check shows a 5 user client access pack for Exchange is about $350...so the price per user just doubled.
I'll pay it... I've been waiting for this since Evolution was first announced. Every LinuxWorld I ask them about Exchange support so it's nice to see it coming soon. But, it will be harder for someone else to do a mass migration.
Something to consider.... I hope it works for them. I see Ximian as a company that needs to stick around for the Linux desktop to really take off.
I hear this sometimes. Cisco can *NOT* void your warranty by using 3rd party RAM. It's part of the Magnuson-Moss Act. As long as the memory meets Cisco specs you are allowed to use it. Cisco won't warranty it. If the memory fries and takes the router with it, Cisco won't warranty th router then..but they can't just void your warranty simply because you used it.
Many people that modify their cars know this act. Dealers like to claim a warranty is void when a performance part is put on a car. But as this act states, if the part didn't cause the failure you CAN NOT void the warranty claim.
Router memory is cheap, UNLESS you buy it from Cisco. Viking and Kingston both make excellent memory for Cisco routers at a *MUCH* cheaper cost than Cisco. It's not like Cisco memory is anything amazing, it's just OEM memory.
I'm moving my company over to a pair of T-1s multihomed right now. We're doing it through Bellsouth and having the T-1s go to seperate POPs and our router will run BGP. Sure, we still rely on Bellsouth but it's very unlikely ALL of Bellsouth will go down at once. Doing this between major telcos would be a real issue I don't think we can afford.
The dual-homing aspect of this didn't cost us any extra. We're just paying for two seperate T-1s. To do this you need a somewhat sizeable router. They suggest a Cisco 3640 with 128MB, which is exactly what I'm implementing.
No, you can't do this at home, but why would you? It's not that unreasonable for a business. We're looking at like $2K-2.5K/month for everything and a one time charge for the router unless we lease it.
For the CCNA all you really need are a couple of 2500s and some serial cables. Just enough to connect a couple of routers and ping across. To be safe I'd get 3.
For the CCNP it takes a little more. You'll need several routers, some switches, and to do it right, and ISDN simulator. A big chunk of the CCNP is remote access and you can't practice much without the ISDN piece. You also need to make sure you buy the right switches, since the command syntax varies some between the different lines.
Instead of spending a fortune you may consider just renting lab time. Several places do it online and you just telnet right in and do your thing. Some people don't like that because you don't actually touch the gear, but I went to an excellent CCNP boot camp and we almost never touched the equipment. Just telnetted/consoled in and did our thing. The hardware building of a router takes a few mins...the configuration is what takes time.
Years ago when I was a kid I remember watching the Leonids. While watching them I distinctly remember hearing some of the larger ones doing this exact buzzing. I always figured it was just a bad memory or something. Nice to know I'm not crazy. :)
It did sound like a fizzing sound... Not very loud, but you would definately hear it.
What will the kids run? What educational software is there for Linux? I mean REALLY? Sure, there is some, but it's not even close to what is available for Windows.
Let's not forget, these are students and teachers. These aren't Unix geeks running this stuff. Do we really expect them to run and get around in Linux? Anyone else remember how well the computers were supported in school? Almost not at all. If it wasn't spelled out in a book word for word they couldn't do it.
Also, The Red Hat Network is nice..but it's not what I'd call full support. Microsoft's support would go further than Windows Update, which is the equivelant of RHN.
Nice marketing ploy though..doubt it'll see much press.
Since the Xbox can talk HDTV, what about the built-in DVD player? Is it a progressive scan?
If so I'd get one as I'm about to upgrade my DVD player....
For those whining about the love plot in the movie, go watch the originals again. They always had that.
This also shows you why Anakin ends up going to the dark side and how the conflict starts. This isn't just some tacked on plot.
Pay extra, or have it in the server, either way you pay for it. I just don't HAVE to pay for it if I don't want it.
Yeah, it sucks using the one slot in a 1U box, but the 1U Compaq boxes have internal SCSI and dual NICs. Not a problem for 99% of customers out there.
If you happen to have Compaq servers check out their Lights Out Management boards. They are almost a complete PC on a card. Intel i960 CPU, RAM, ATI Vid, and a NIC. They let you completely remote control the system through a web browser. It has its own power supply so you can restart the system and follow it through the POST test and everything.
Pretty slick. They are $499. I put them in all new servers now.
Notice I said mirror. So every write goes to both disks. Sure, I could get a bad controller and get garbage on both disks but that's a low risk I'm willing to take since spending $5K on a home backup solution isn't in my budget.
I've run in to the same problem. You can buy a 100GB drive for cheap, but good luck backing it up. The only real solution I've come up with is to just buy extra drives and mirror or RAID them.
I still think it's crazy to pay $140/tape for SDLT at the office....
What sound card? The SB Live only takes 1-2% CPU usage on most systems, but if you have a lesser card the CPU use can go WAY up.
People do this for companies every day.
First, you need a providor. I just priced T-1s for our office. They are falling in the range of $1K-$1200/month for an unmanaged connection. This means I handle the routers and everything, they give me the line. For that much you'll get an SLA and a ocnnection to a good providor such as AT&T or Sprint. If you want cheaper go down a tier in providor to someone that buys their bandwidth from the big guys.
After that you'll need a router. The Cisco 2600s are popular. You can get a T-1 card for them with internal CSU. Probably $3K new, $2K used on ebay.
After that it's up to you. Want your own domain? Host your own DNS. Set up a web site...whatever. Don't forget security. You can do pretty decent filtering on the router itself.
With this setup you'll also get a block of IPs and a full T-1 with 1.5Mb/sec up and down. So you can host what you want and do what you want. Is it worth this much over a $40 2Mb/sec cable modem? Not to me.
I killed a Tbird by running it without a heatsink for a whole 4 seconds. It got very hot, VERY fast. I know several other people that have done similar things. 9 minutes? I think not.
We wouldn't lock down our development staff. It would just be too big of a burden on us and them. My support guys would constantly be running back and forth.
BUT, I can see why they'd want to do it. By far our worst offenders for installing unlicensed and non-standard software (not dev tools) are developers. And frankly, 3 out of 4 developers I meet (DEFINATELY not normal Slashdot developers) can't fix their own PC when they break it. I'm amazed at the lack of understanding on the base system...I don't mean really get in there, but just simple things a real "power user" would know.
I bet the cost is very reasonable. I've done several T-1s with different telcos on the ends. It wasn't much more than going with a single telco.
This is my point too. You can get an Internet T-1 for $1200/month for a tier 1. Go to a smaller ISP and you'll get it for far less and have very good reliability.
One of our Internet T-1s at work ends up in New York (from NC) and is only $1200/month.
But, why wireless? Just go to a telco and price a point to point T1 to your ISP. That way you don't have to rig a solution and it's something the ISP is already very familiar with. You won't have to worry about rain, fog, growing trees, etc.
I don't see a requirement for it to be wireless.
I used to LOVE these things. I went looking for them a while back and found they don't make them any more. I'd be thrilled to have them come out again.
I have RoadRunner in Raleigh, NC and never see slowdowns. I always get the full 2Mb/sec when downloading with DAP. It's been this way for a long time since I first got it. They seem to do a very good job of subnetting people up.
But, all bandwidth can be oversold, not just cable. My friend had DSL in Texas and the telco oversold the local bandwidth and his pings went to 500ms just to his first hop at the ISP. At some point ALL bandwidth is shared, it just happens that DSL users have a piece of wire to the CO...but at the CO it all comes together, just like a loop on a cable modem.\
Marketing hype....