Looking for a way to annotate Windows event logs shipped with Windows Event Forwarding - specifically, looking to tag each log with the MAC address/es of the originating system. Would like to do this within WEF itself, but it does not appear possible.
Any ideas of how this can be accomplished?
I am looking for specific feedback on WinRM. There are ::still:: debates out there about whether or not making RDP publicly available without a VPN is a good idea--There are no debates on whether or not making SSH publicly available is a good idea, as long as it is setup correctly...
Where does WinRM fit in at this point: Use with a VPN, No VPN, etc?
We have a somewhat-static web app with a large amount of media files that runs on a 2008 R2, non-domain server on the DMZ. I need to backup the media files on the server. The current backup mechanism for servers on the trusted network are BackupExec agents.
What would be best practice to backup the DMZ server? I don't really feel comfortable pushing a BackupExec client to it, and having it connect back through the firewall to the BE server on the trusted network....
I have over 20 1200 series PoE Aironets in a large building, using multiple vlans + WPA.
Starting about 6 weeks ago, random waps will just stop responding to ping, ssh, http, and stops serving clients--I have connected via serial, and I dont get anything... Once I powercyle though, it works fine for an inderterminate amount of time, at which case it goes back to not responding.
I have switch PoE ports on the PoE switch, switched out to using PoE injecters, used a different switch, etc.
Software versions:
System Software Filename: c1200-k9w7-tar.123-8.JA
System Software Version: 12.3(8)JA
Bootloader Version: 12.2(8)JA
I also did some sniffing on this vlan (mgmt vlan) which all it currently has is the 20-odd aironets, and about 5 switches. I am seeing a bit of stp traffic, maybe a couple stp packets / second, with the current root bridge cost of 8.
I dont have any other ideas on what is going on....
Any ideas?
I have a production webserver with a MySQL database setup as Master. I have a dev server with MySQL setup as Slave, with the data successfully being replicated from the Master.
What happens when a developer commits a chance to the Slave db? Is that commit going to screw up the whole setup?
If this is not the ideal situation for a Production / Dev / Staging setup, what would the ideal setup be?
I run a couple of IIS + PHP + MySQL Web servers, that run a variety of web apps (Wordpress, Expression Engine, etc.)
I know that I should always keep my web apps updated, but I wonder how often I should be updating PHP & Mysql? It seems that the majority of the updates are bug fixes, stability enhancements, new features, and sometimes, security patches.
It can be quite intensive to test and roll out a PHP/MySQL update, so I would rather keep them to a minimum, if at all possible.
Should I just plan to update to the most recent PHP & MySQL every 4/6/? weeks, or earlier, if there is a needed security patch?
Any thoughts?
I am working on pricing out 4 Dell R710s for a new Hyper-V cluster. I have a choice between the following two configurations, for the same pricing:
128GB of 800Mhz RAM per node
Or
96GB of 1333Mhz RAM per node.
CPUs are dual Xeon E5645.
It would be more ideal if I could go with the 128GB option, but I don't want it to come at a huge performance cost...
In this type of a situation, would the difference in the RAM clock speed produce noticeable performance gains or losses in a typical VM environment?
I could get away with the 96GB for at least 2 years.... So is the performance boost worth it?
I consult in a small business environment where I have two HyperV hosts (with <10 VMs) + a couple other servers.
I recently had an issue where one of the HyperV hosts had a CPU issue and it came down, bringing most of my non-critical VMs with it, plus a free piece of software that I use for network & system monitoring and availability. Because of this, and the fact that iDRAC locked up also, I did not get any alerts about the crash.
So I am wondering how I can (cheaply) get a redundant availability monitoring system in place--Is is as simple as running Nagios or Zenoss (or whatever) on two different HyperV hosts?
It just seems like running more than one copy of Nagios/Zenoss/etc could be expensive and have high overhead.
Thoughts?
I am setting up a new Dell server with iDRAC 6 Express.
My options for the NIC are:
1) Shared 2) Shared with failover to LOM2 3) Shared with failover to all LOMs
The server has 4x LOMs.
My questions are thusly:
-What is best practice for setting this up? Is there any reason why I would not want option 3?
-If the NIC is being used for both iDRAC and the OS, (there is no dedicated iDRAC nic), does this ever cause any kinds of issues for either iDRAC or the OS?
Thanks-
-Josh
Is there any kind of best practice when it comes to verifying the hardware of a new server, before putting it into production?
For instance, running it through the manufacturer's hardware test, or running memtest on it for x amount of hours?
-Josh
Possible Duplicate:
UPS and power strip interactions?
I have heard that plugging a server into a surge protector (cheapo power strip) is not good.
Is this accurate?
For instance:
Server --> Fellows Power Strip --> UPS
-Josh
I am looking at setting up a Management vlan, on which I will put all the Management interfaces for my various networkable devices (Firewall Mgmt Interfaces, Server RAC, WAP Mgmt Interfaces, etc).
What are best practices when it comes to accessing that mgmt vlan--For example, as the IT administrator, my workstation is only on the Business network--But if I need to access the firewall through the mgmt interface, should I have a 2nd nic that I use exclusively for the mgmt network? Or should I write ACLs that allow only certain IPs (my workstation) to access the mgmt network?
Does this make any kind of sense?
Thanks for your time--
-Josh
We will be setting up a tertiary RADIUS server at a remote site. Up until now, changes to the RADIUS database has been done manually, since it was only 2 servers. With a third one coming online I wanted to see if there is some way to sync the changes between RADIUS servers using Windows Server 2008 R2.
In our building we have around 25 1200 series Aironets, with a bit of overlap in some areas. Up until this point, we have had them deployed in alternating 1/6/11 channels, but we are wondering if we would get better performance if we used the auto-channel select feature.
In looking around, I have seen comments that this feature should not be used as the WAP does a channel scan only on the initial radio startup, but I have not found this in any Cisco docs.
Anybody have anymore information, or real-world experience with this feature?
Thanks!
-Josh
We are looking at deploying a Cisco ASA 5520-I am looking at the security contexts feature, and was wondering if anyone has deployed their ASA in this way, and how it is working out for them.
Have you encountered anything that you wished you would have known before you deployed it?
Have you noticed any performance issues?
Is there anybody actually using this feature?
-Josh
I am using Server 2008 R2 on a Dell Poweredge T110 for a non-critical media server for a school. Since the PE does not have any kind of RAID capability, I am considering using Windows built in mirroring to mirror a 400GB SATA drive for simple redundancy purposes.
Has anybody done this? How is performance? How is disaster recovery compared to a standard RAID setup?
Thanks!
Josh
According to release notes, RHEL 5.4 included an update to setup chrooted SFTP accounts natively. But from what I am seeing, it is all or nothing--This means that even root is chrooted if you go this route.
Has anybody used this successfully? How did you configure it so that you could still do sysadmin tasks, if root is chrooted?
Thanks-
Josh
I have a WSUS 3.0 SP2 server that has XP Pro workstations getting updates from it. I have a GPO that specifies that the workstation should get updates from the WSUS server and install them at 3am every day. On the WSUS server, when I set a deadline for an update to yesterday (basically, update the machine immediately), the WSUS policy seems to take precedence. Is this correct?
Also, if I don't set a deadline, is that when the GPO policy kicks in? If so, I guess I don't see the use of having WSUS deadlines for updates, except for the "immediately" options. (?)
Josh
Do you know of any (preferably free) software that will monitor printer queues on a Windows Server 2008 print server? Specifically, I would like to be able to fire off an alert/email if the queue for a printer is >5 jobs, or if the state of the printer changes. (Offline, Paused, etc)
Thanks!
Josh
I am trying to get some real-world feedback on OSSIM.
Are you using OSSIM in production?
If so, what has your overall experiance been?
How many nodes are in your enviroment?
Finally, what kind of bandwidth are you monitoring?
Thanks!
Anapologetos