hello nigel….

today we will meet at 10 am at ploytech….

please come ….. we will test our system and finalise the documentation for report….

please check your mail i am sending few documents…..

thanks

cheers…

FROM SIKANDER

 I CHECKED UR LINKS NIGEL…..

THAT’S ALL GUD…… MAN….

THANKS …

ABOUT VPN STUFF

hey bro ..

here is something about VPN stuff .. u can mix these ideas bro….

 

How the  VPN  can solve  the enterprise network security risks

 VPN that is virtual private network technology, its security features include: access agreement, authentication and data encryption, the actual work, long-distance, network client to the enterprise network, the VPN server request, VPN server to respond to requests sent to the client Identity question, the client will be encrypted in response to information sent to the VPN services client, VPN server based on user database to examine the response. If the account effective, VPN servers will check whether the user with remote access to the authority. If the user with remote access privileges , VPN server to accept this connection. In the process of authentication of the client and server public key will be used for data encryption. In simple terms, VPN can be passed on within the enterprise network data packets and encrypted transmission, the Internet online transmission of private data, private network to the security level.

which one is the better………. IPSec VPN or SSL VPN

 Enterprise Network VPN programme through the establishment of a public private IP network data transmission channel, remote or at the branch offices, partners, mobile office as well as linking it to the enterprise network to reduce the burden of remote access costs, save telephone expenses, but For the safety of end-to-end data communications, according to the actual situation also needs to take a different framework. In general, IPsec VPN and SSL VPN is the corporate VPN network using the most extensive programme of safety technology, but they have great distinction, in general, IPSEC VPN site and the site is to provide a link between, more suitable for corporate networks Within the school and at the connection, while SSL VPN provides remote access to corporate network services, such as suitable for enterprise networks, and network connectivity.

 

 

From the technical structure of the VPN, IPSec VPN is a good choice Enterprise Network Access Solution, because of its work in the network layer, the terminals can transfer data between sites to protect all, the Internet can be more private network secure connection, no matter what Class of network applications, it will remote client “at” internal network, so that remote client internal network users have the same authority and operating functions. IPSec VPN remote access also requires the client to install and configure the appropriate IPSec client software and access equipment, which has greatly enhanced the security level, because the visit to a specific access devices, client software, user authentication mechanisms and security predefined Rules limit. And these IPSec client software can automatically install, does not require user participation, thus both the network management or end-users, can reduce the installation and maintenance burden. And different from the IPSec VPN, SSL VPN is a work in the application layer (based on the HTTP protocol) and the TCP layer, and thus SSL VPN “zero clients” architecture especially suitable for remote users connected, users can visit any Web browser Campus Network Web applications, thus SSL VPN There is a certain security risks. And IPSec VPN client software needs support, not to support public access Internet site, so security higher. However, it is undeniable, SSL VPN still more suitable for most business networks, because in the age of the Internet, more exchange of information need to achieve full interoperability, such as SSL VPN to provide more fine-grained access control, to cross NAT and firewall settings, better able to Resist external systems and virus attacks, network Flexible deployment features such as its application in the enterprise network won a lot of bright spots.

 

thanks..

cheers

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Final week preperation

As of this week i have been tidying up the areas for my designated topics for the response to the rfp for there4travel.

• user access diagram
• Benefits and problems with using vpn

Things we have been implementing this week are

• GP to the OU for various policys relating to the group they belong to
• Antivirus for the machines and the servers
• vyatta rules for the firewall

We still having issues with the email server not being able to connect to server after numerous attempts still no joy.

Network Security Policy and Procedure links

CHeck these links out  on Security procedures and policies processe:

Found these links they maybe helpful

• http://www.watchguard.com/docs/whitepaper/securitypolicy_wp.pdf

• http://www.epa.gov/irmpoli8/ciopolicy/2150-0.pdf

• http://bizsecurity.about.com/od/creatingpolicies/a/6_policies.htm

they just a few i found and had a look at maybe we could follow some of there procedures and impliment them for there4travel.

Hi nigel….

I am working on security plan i will send u my ideas later when i will complete ….

if u found some thing about securityplz inform me … 

thanks

from sikander

Monday progress…..

• At the moment we have web server IIS 7.0 running on primary CHCH server.we are trying to implement our Web server on different physical box for firewall DMZ zone, due to having the email server also installed on the same physical machine it maybe having conflicting issues just from readin an answer from the forum that was what we were thinking. So in doing that we are attempting a reinstall of the IIS server and the email server Kerio. We will install the email server firstly then go about configuring IIS.

Week 5 problems encountered

Email server problems :

We have had some Problems with the running of the kerio mail server, the initial installation went fine but the operation of it is de funct. We have had contact with the kerio community forum and are awiting replies to our post.

Report progress is going steady we have stepped it up over the weekend so this week is generally not so rushed. Some areas are still in draft status but just needs editing in some areas.

Nigel

hi nigel

please meet me at A block at 10.30..

thanks

cheers..

gud mrng nigel

Can u meet at A Block today……. 10.30 am

for net 200 practical stuff….

thanks…

cheers….