Quantcast
Channel: Symantec Connect - ブログエントリ
Viewing all 5094 articles
Browse latest View live

Virtual Volunteering with TutorMate

$
0
0
Symantec employees tutor elementary students, without leaving the office!

The advancement of technology has created real-life innovations previously only imagined. We can video chat with a friend across the world for free, self-driving cars are now on California roads, and we can even descend into real volcanos using virtual reality! With all these advancements that have improved and enriched our lives, there are also more tools out there that allow us to give back to our communities.  

Many organizations are tapping into technology to increase access and reach of volunteering opportunities. One such way is through virtual volunteering. Employees can now volunteer from their desk, their home, or wherever they have an Internet connection. This has transformed the volunteering landscape as it now allows people to participate who may have been deterred from volunteering due to time or life constraints. And even though virtual volunteering has made it easier to give one’s time, it has not taken away from the social and individual benefits that volunteering can bring.

Recently, 15 Symantec volunteers experienced this first hand. Over the course of the school year, these Symantec employees volunteered 30 minutes each week as reading tutors.They were each paired with one first grader from Markham Elementary in Oakland, CA and every week would meet virtually through TutorMate to practice the student’s reading. Using a phone and a computer, employees would log on to the interactive online system shared with the student and they would read electronic books or play reading games together. Innovations for Learning, a non-profit that uses technology tools to improve literacy for disadvantaged primary grade students, created this program that allows volunteers to help children improve their reading skills virtually.

“Symantec's support for our TutorMate program in Oakland Unified Schools this past school year has been truly wonderful,” said Dan Weisberg, Director of Innovations for Learning / Tutormate. “The participation and consistent commitment of Symantec’s virtual volunteer tutors to helping close the literacy gaps in their young students far exceeds what we usually see in our first year organizational partners. Helping young students at this critical time in their academic career is of enormous long-term value to these kids. We are looking forward to working with them again in Fall 2015 and perhaps to an even greater headcount of volunteer tutors, if the stars align this way in the coming months.

Jackie Fahrner, one of the Symantec volunteers said, “I had such a great experience through this process. Tutormate gave me a chance to impact a child’s life. It was so easy. All I had to do was schedule a session and then show up online. Getting to know my student and connecting with her was rewarding. I found out we had many things in common – our love of chocolate and dogs. Both of us looked forward to our time together, and the best part is that she was learning through the experience. By the end of the year her reading skills jumped and knowing I was part of that is very rewarding. If taking thirty minutes out of my week improved Lyriq’s chances, just think of the impact we can all make together. Sign me up for next year, and I have others I am recruiting as well!” 

At the end of the school year, Symantec organized a party and the volunteers got to meet their students in person for the first time. To encourage continued learning, the volunteers put together pamphlets for their students that provided them with local and national reading contests  so that they can keep up their reading during the summer holiday. The volunteers brought Symantec gift bags and spent the afternoon decorating bookmarks with their student.

Tutormate1.pngTutormate2.pngTutormate3.pngTutormate4.png

On June 5th, the Symantec TutorMate volunteers visited their students at Markham Elementaryin Oakland, CA after a school year of virtual volunteering.

The volunteers were just as excited to be a part of this opportunity as the students, and the benefits were mutually shared. Stacie Wong, another of the Symantec volunteers shared, “Getting on the phone with my student each week was one of the high points of every week! I loved her enthusiasm and interest. Finally getting to meet her at the end of the year was also very special—to put a face to the name and voice and to spend some fun time together was a great way to wrap up the year. I would highly recommend this experience to anyone. It’s a small effort with huge rewards.”

As an added bonus, the volunteers were able to log their hours through the Dollars for Doers program, thus doubling the impact! Employees volunteered a combined 173 hours totaling a donation of $2,598. “I love the double dipping – spending thirty minutes of my time with Lyriq and then also being able to submit hours through the Dollars for Doers program,” noted Jackie Fahrner.

Tutormate5.png

Thanks to all the Symantec tutors: Tracey Bye, Jackie Fahrner, Allyson Gomez, Tricia Gregoire, Shannon Hernandez, Marisa Luke, Debbie Orens, Ramya Sankaran, Ashley Savageau, Sowmya Simha, Lindsay Warden, Alice Wong, Stacie Wong, Kristen Woods, and Bryan Zirkel!

At Symantec, virtual volunteering has become central to our corporate philanthropy strategy and enables us to tap the passion of our 21,500 employees in over 50 countries worldwide.

Lora Phillips is Director, Corporate Responsibility at Symantec.


Should I Set Unlimited NSPI?

$
0
0

There are a few comments and notes on the Symantec knowledgebase which talk about setting NSPI to an unlimited number, removing throttling and limitations that Microsoft have built into recent Operating Systems to help Domain Controllers and Global Catalogue servers.  Should you go for unlimited?

I personally don't make any changes in my lab, but I have seen several schools of thought on how this setting should be configured.

The article linked above suggests an alternative method to guestimate the value to configure. It is as follows (check the article in case this gets updated)

Number of Mailbox Archiving tasks = 2

Number of connection threads per task = 5

Number of Journal Archiving tasks = 2

Number of connection threads per task = 5

Number of Public Folder Archiving tasks = 2

Number of connection threads per task = 5

Task Controller Service = 20

Storage Service = 32

Shopping Service = 20

PST Migrations = 20

 

Total 10+10+10+20+32+20+20 = 122

 

漏えいした Flash のゼロデイ脆弱性に、攻撃者による悪用の恐れ

$
0
0
セキュリティ企業で発生したデータ流出により、パッチの公開されていない脆弱性に対する概念証明コードが漏えいしました。

続きを読む

Butterfly: Profiting from high-level corporate attacks

IDC Storage Transformation 2015 Madrid

Feature Pack 1 for Backup Exec 15 delivers improved performance, intelligent backups and enhanced platform support

$
0
0
The Feature Pack Awakens: Continuous Stream of Capabilities

Hot on the heels of Backup Exec 15 we are excited to announce the availability of Feature Pack 1 (FP1) for Backup Exec 15. Feature packs build on the core strengths of Backup Exec by addressing the top customer needs for hybrid environments and mark the transition away from major releases into a more continuous delivery model.

Infographic: What's New in Backup Exec 15 Feature Pack 1

 

Improved Performance

Feature Pack 1 introduces multiple performance optimizations with up to 62% shorter backup times with LTO tape drives, vastly reduced Exchange backup processing time through improved cataloging and optimized Virtual Machine protection through intelligent backup for VMware and Hyper-V Virtual Machines.

FP1Pic1.png

Figure 1 Improved Hybrid Environment Protection

 

Reduced Complexity for Hybrid Environments

NEW! Intelligent optimized protection of VMware and Hyper-V Virtual Machines for simplified management through automated VM discovery, VM awareness, enhanced VM backup wizard and a fully integrated and intuitive VM backup and restore user interface.

FP1Pic2.png

Figure 2 Intuitive Virtual Machine Backup & Restore Experience

 

Enhanced Platform Support

Feature Pack 1 extends support with the following platforms:

  • VMware vSphere 6 Fault Tolerant Virtual Machines
  • MS SQL 2014 SP1
  • MS SharePoint 2013 with MS SQL 2014 instance
  • MS Exchange 2013 Update 8 and Update 9
  • Red Hat Enterprise Linux 7.1
  • Advanced Open File Option (AOFO) for Red Hat Enterprise Linux 6.6 and 5.11

 

Increased Security and Supportability

Feature Pack 1 Improves security for the Hybrid Cloud featuring FIPS 2.0.5 support, adding 2048 bit encryption and moving to TLS 1.2. Feature Pack 1 also includes enhanced supportability with more than 400 overall enhancements and fixes.

 

Available Now

Backup Exec 15 Feature Pack 1 is available now and can be downloaded at https://support.symantec.com/en_US/article.TECH228725.html?

Backup Exec 15 FP1 will also be available via Symantec File Connect and Live Update later in July.

If you’re interested in learning more about Backup Exec 15, here are some useful links including an opportunity to get your hands on a FREE 60-day trial version:  

 

Backup Exec 15 Awards

Announcing the availability of Feature Pack 1 (FP1) for Backup Exec 15

$
0
0
The Feature Pack Awakens: Continuous Stream of Capabilities
Twitter カードのスタイル: 
summary

Hot on the heels of Backup Exec 15 we are excited to announce the availability of Feature Pack 1 (FP1) for Backup Exec 15. Feature packs build on the core strengths of Backup Exec by addressing the top customer needs for hybrid environments and mark the transition away from major releases into a more continuous delivery model.

Read this blog for complete information.

Butterfly: 企業に対する高度な攻撃で利益を上げているグループ

$
0
0
売上高が何百億ドルにも及ぶ大手企業が、密かな攻撃グループによる攻撃を受けています。

続きを読む

Security Operations Centres – The eternally reinvented wheel

$
0
0

As Cyber threats and the awareness of the risks these bring hit ever new heights, organisations are looking to move beyond the confines of protection alone to the much wider cycle of cyber security – namely: Prepare, Protect, Detect, Respond and Recover.

Many models are pulled together in the NIST cyber security standard to reflect this shift, with the critical part being the ability to monitor and detect attacks right across the organisation; not just investing in technology to defend against attacks, but looking at the most effective ways to detect and respond.

That is encouraging more and more companies to look at building Security Operations Centres (SOCs). Yet a severe shortage of Cyber Security expertise is serving to undermine this and impeding the drive to have true visibility of their estate. At the same time, many people seem to be starting from scratch and reinventing the wheel as they start to build their monitoring services. This is why at Symantec we’re seeing limited value and improvement in detection, even though we are all trying to achieve the same outcome. Naturally enough, everyone wants to ensure they build in the appropriate detection that provides the right context for their organisation – but that means everyone is repeating the basic level of organisation over and over again. It’s both wasteful and unnecessary.

Having worked in or around this area for over 15 years, I’m disturbed to see so many organisations spending their time, effort (and money!) on ‘Groundhogging’ the same basic elements of the function, rather than focusing on the areas where they can make the difference. 

How do you set about that? There are many complicated architectures of a SOC function, but really you can bake the function down into three core areas (I’m simplifying this to areas in the detection and response process, rather than including service desk or backend processes).

SOC function_Sian John.png

At present, much of the effort in organisations seems to be directed into building log collection and analysis. There’s lots of work for security consultancy firms in helping organisations to design and build a SOC, including the SIEM service. However, this is often porting the rules from one company to another. Many of the core rules required are the same. Where the differentiator comes into play is in the analyst looking at the actual attacks.

Many traditional NOC (Network Operating Centre) based solutions were staffed by experts in detecting and responding to service interruption and quality events. This is a very different skill to security analysts who are able to build expertise in detecting and filtering events to determine if they are real, and provide context and insight into the outcomes. Analyst skills are very hard to come by and, if you don’t have enough events to keep them interested, then those in your organisation will fall into spending their time on special projects, including ‘tinkering’ with your SIEM rules. If focused completely on responding to events, they will either become frustrated by the false positives and ‘noise’ or bored because there are not enough interesting events to analyse. They are also vulnerable to offshoring and may become protective around this.

This is where MSSPs can provide a difference. Working with many customers, they have evolved their platforms to filter noise from security devices to the minimum, identifying possible incidents that can then be validated and escalated by experienced analysts.

The triage area is where the value really starts to come to the fore. If you hire analysts, this is where you should focus them: responding to alerts escalated by an MSSP, but then truly understanding the business and structure of the organisation. They should become close to, and expert in, the systems that run an organisation, so they can focus on whether this needs to be escalated to a full incident response procedure or remediated by operational changes. If an internal SIEM and intelligence is required, this is where it can provide value as an investigative platform for the triage team, as they evaluate and decide on the right response to issues arising, which can then be escalated to the incident management or response team.

The incident management team is the most important to the business, understanding and advising the CISO, and the company management, on the impact and appropriate response.

The higher up this stack you go, the more value you provide to the organisation. Much of the expertise at the bottom end has been refined by the MSSP and monitoring services that have existed and matured over nearly 20 years. If big enough, it may warrant your own SOC; but using the outsourced provider initially gives the quick start to start delivering value much earlier in the project.

So, when we start building a SOC, why reinvent the wheel? Instead of beginning at stage one, get a head-start by outsourcing the lower tier – and thus concentrate on building the higher level and higher value functions.

Critical OpenSSL vulnerability could allow attackers to intercept secure communications

Need for advanced storage QoS in OpenStack

$
0
0

The cost of cloud services is claimed to be lower due to extensive sharing of resources. However, a higher degree of sharing would automatically mean less guarantees of performance, since performance expectations of users may be affected by the resource sharing. So quality of service (QoS) becomes the crucial factor for the success of Openstack storage providers. 

 


続きを読む

OpenSSL に「緊急」の脆弱性: 攻撃者がセキュア通信を傍受する恐れ

$
0
0
広く普及している SSL/TLS のオープンソース実装を、最新バージョンに更新する必要があります。

続きを読む

Veritas Goes Social on Twitter & LinkedIn

$
0
0
Tweet of the Week

Veritas_Logo_RED_1000x197.png

TWEET OF THE WEEK: 
Veritas goes social @veritastechco to help employees, partners, customers, influencers & thought leaders #HPOI http://bit.ly/1GbpXht

We’re excited to announce Veritas Goes Social on Twitter @veritastechco and LinkedIn to help employees, partners, customers, prospects, influencers & thought leaders Harness the Power of Information (#HPOI).  Feel free to select, copy and share your favourite posts (below) with your professional social networks.  Or simply click share at the top of the page, then copy and paste our tweet of the week (above) to share this weeks social media round-up:
 

Veritas Brand

The World Is Changing Matt Cain blog (Link)
Twitter: The need for #infomanagement is at an all-time high and @veritastechco can help. Learn how: http://symc.ly/1J44Dwo #HPOI
LinkedIn: By 2020, more than 44 zetabytes of data will exist. Clean up your enterprise’s share with the help of Veritas Technologies Corporation: http://symc.ly/1J44Dwo

Veritas Portfolio Press Release (Link)
TwitterIntroducing smarter solutions to help your enterprise manage #data. See the new @veritastechco: http://symc.ly/1KO2jiP #HPOI
LinkedIn: Take advantage of the data your enterprise collects by adopting a solution that will help you gain insight into the information at hand. Discover how Veritas Technology Corporation can provide that visibility: http://symc.ly/1KO2jiP

Backup & Recovery

NetBackup 7.7 Press Release (link)
Twitter: In need of an advanced #datastorage solution? See why @veritastechco provides superb support: http://symc.ly/1NSpCGB #HPOI
LinkedIn: If your infrastructure’s data is in need of better protection, look no further than Veritas Technology Corporation. Learn how Veritas’ improved solutions are changing the face of backup and recovery: http://symc.ly/1NSpCGB

NBU Landing Page (link)
Twitter: 3 big ways @veritastechcocan transform your enterprise's #datamanagement: http://symc.ly/1HaLKaR #HPOI
LinkedIn: Simplify, manage and transform the way your enterprise utilizes important information with the help of Veritas Technology Corporation: http://symc.ly/1HaLKaR

Software Defined Service

Analyst Report: ESG Solution Brief, SDS (link)
Twitter: What can a software-defined storage strategy mean for your #data? Find out the benefits with @VeritasTechCo: http://symc.ly/1JOPYuP #HPOI
LinkedIn: When deciding on a solution for software-defined storage, Veritas Technologies Corporation has some key points should be considered. See more: http://symc.ly/1JOPYuP

Information Governance

Video: Govern info chaos into clarity (link)
Twitter: What's your enterprise's #data costing you? How @veritastechco can help govern the chaos: http://symc.ly/1KSZ9Jk #HPOI
LinkedIn: Gain information insight into company data by identifying what’s important and what isn’t with the help of Veritas Technology Corporation. Learn how: http://symc.ly/1KSZ9Jk

We look forward to helping you Harness the Power of Information…

Hacking Team woes adds to the dangers faced by internet-using public

Protecting the Planet ... One Employee at a Time!

$
0
0

Symantec’s commitment to the environment stretches across the company. In recognition of our environmental volunteerism-focused quarter, we highlight the incredible work our employees have done in celebration of Earth Day.

This quarter, employees organized Earth Day celebrations, environmental speakers, and sustainability-focused campaigns. In conjunction with our recently launched volunteer initiative, Take 5, employees also participated in numerous environmentally focused volunteer events. Take 5 challenges employees to make a positive impact by volunteering at least 5 hours to causes they care about.

Today we hear from Chris Abess, a Symantec VP in Sales Operations who also serves as the global executive sponsor for the company's Green Teams.

Earth Day Fairs

cr_FY16Q1_EarthDayGreen fair wide angle_.jpg

Employees in Mountain View, CA explore booths at the Earth Day Fair April 16, 2015.

During the month of April, hundreds of employees participated in Earth Day Fairs hosted by our Mountain View, CA and Springfield, OR sites. Employees were able to meet with representatives from nonprofit organizations, local government agencies, and clean technology and sustainable business owners who shared their knowledge of simple sustainable actions to implement at home and at work. The Earth Day Fairs also included prizes and vendors from commute alternatives and electric vehicles, water conservation tips and resources, as well as organic and healthy living services.

Speaker Series

Lady.pngcr_FY16Q1_Acterra.png

Felicia Marcus, member of the California Water Resources Control Boards.

cr_FY16Q1_Tim_Silverwood.png

Tim Silverwood, Green Talk Sydney Speaker and co-founder of Take 3!

This quarter, we partnered with experts in the field of resource conservation and environmental sustainability to make a difference in the communities where we live and work.

Early this March, Symantec and nonprofit partner, Acterra, hosted a Public Lecture Series with speaker Felicia Marcus, a member of the California Water Resources Control Boards. Felicia gave an informative and inspiring talk to a packed house in the Mountain View Symantec Café on the state of California Water in 2015, including a lively discussion on actions we need to take in order to conserve water in California’s current drought. Acterra and the Mountain View Green Team also hosted a Green Bag Lunch talk on water-saving appliances and landscaping techniques.  

This quarter’s Green Talk took place in Sydney, Australia and was hosted in late May by the Sydney Green Team and executive sponsor Louis Tague, Director of Enterprise Sales for Sydney. This Green Talk focused on Symantec’s environmental pillar of resource conservation and featured Tim Silverwood, a sustainability advocate and co-founder of “Take 3”, a clean beach initiative inspiring people to take three pieces of rubbish with them when they leave a beach, waterway, or anywhere.

The Roseville, MN Green Team also partnered with nonprofit, Friends of the Mississippi River (FMR), for an educational volunteer event in nearby neighborhoods. Roseville employees hosted FMR on campus to present information on water quality issues and lead 29 employees on a cleanup of a riverfront park along the Mississippi River. To educate the public, employees stenciled the phrase “Drains to the River, Do Not Pollute” near 120 drains on local sidewalks.

cr_FY16Q1_FMR1.png

Roseville, MN volunteers educate their neighborhood in keeping the Mississippi River clean.

Volunteer projects

This quarter, our employee driven Community Relations Volunteer Committees and Green Teams joined together to create environmentally themed volunteer opportunities for their sites.

Green Park/Reading, UK employees donated over 75 hours gardening and building raised planters for Thrive, a nonprofit that uses gardening to bring about positive changes in the lives of people living with disabilities or who are isolated, disadvantaged or vulnerable. In celebration of Give and Gain Day, employees also volunteered restoring ponds and wooded areas for wildlife at Ufton Court, an educational trust and grounds outside of Reading, UK.

cr_FY16Q1_Thrive.png

Reading, UK employee, Michael Wong, shows off his gardening skills volunteering at Thrive.

cr_FY16Q1_Upton.png

Reading, UK volunteers during their lunch break volunteering at Ufton Court.

With the goal of keeping our oceans and beaches unpolluted, Culver City and Cape Town employees partnered with local nonprofits to participate in beach cleanups. The Culver City team collected 38lbs of waste during their cleanup with nonprofit, Heal the Bay! Employees in South Africa also donated over 65 volunteer hours to environmental nonprofit Clean C during this quarter’s beach cleanup in Cape Town.

cr_FY16Q1_Heal the Bay.jpg

Culver City, CA volunteers with Heal the Bay.

cr_FY16Q1_CleanC.png

Symantec employees help to make the beaches clean in Cape Town, South Africa with Clean C.

And later this month, at our Pune, India location, NGO Sewa International will arrange a tree-plating drive, giving employees an opportunity to volunteer.

Employee Campaigns

The Heathrow, FL Green Team ran a popular campaign encouraging employees to opt out of unwanted paper junk mail.

Further, the Green Park/Reading Green Team ran a carbon footprint competition between departments. Congratulations to the R&D Enterprise Vault team who had the lowest collective carbon footprint!

cr_FY16Q1_JunkMail.pngcr_FY16Q1_carbonfoot.png

Our One Mug, One Planet Campaign came to a close on Earth Day 2015. This one-year campaign achieved great success, with more than 2,400 employees pledging to reduce their use of paper cups. In the first six months, we saved $20,000 and 314,000 paper cups.  

Chris Abess is Vice President, Sales Operations, and Global Green Team Executive Champion


Second PoC Exploit for Adobe Flash Player Discovered after the Hackers-For-Hire Company Breach

Java zero-day vulnerability used in limited attacks

$
0
0
Vulnerability is reported to be exploitable by way of drive-by-download on the latest version of Java (1.8.0.45).

続きを読む

Invalid Username and Password when trying to process the DLP IT Analytics Cubes

$
0
0
Twitter カードのスタイル: 
summary

The problem:

Recently I was installing the stand-alone version of IT Analytics and the DLP Cubes and kept running into problems processing the cubes in regards to invalid username and password.  When the cubes were processed within IT Analytics a large error was created but the full text was not generated.  So I jumped in SQL Management Studio, connected to the Analysis Services, found my DLP Cubes and tried to process them.  It was within SQL Management Studio and found I was getting an error with invalid username and password.

This error message confused me as I was using the same account that I installed SQL with and installed IT Analytics with.  So I tried some troubleshooting and checked various roles within SQL and checked what permissions were set on the Database, Analysis Services, etc. 

And it was time to panic, I had a demo today at a new to me customer and needed to have strong showing…. So it was off to Symantec Support to try and resolve the problem.  I had great success getting my incident resolved at 3:26pm EST when my demo started at 3:30pm EST.

So here’s the solution

The solution to my problem:

The first part that was wrong with my installation and configuration was I did not read the installation manual all the way to the end and missed a step.  Also there was another step that needed to be changed.

NOTE:  After making these changes you will need to restart your SQL Server Services to make sure everything is updated and fixed correctly.

Changes made to the provider

This first step is documented in the install guide and I just did not read all the way through it.  The OraOLEDB.Oracle  provider needs to have a setting changed in order for the processing to work.  We need to select “Allow inprocess” in order for the cubes to process correctly.

In SQL Management Studio, connect to the Database portion of your server and then we need to find the list of providers.  This is found under “Server Objects -> Linked Servers -> Providers and then right click on the OraOLEDB.Oracle provider and select properties.

Screen Shot 2015-07-13 at 2.54.45 PM.png

As shown in the screenshot, we need to select “Allow inprocess.”  Check this box and select “OK”

Changes made to the Data Source

The next change that needs to be made to the ITAnalytics Data Source.  This setting is found under the Analysis Server portion of your SQL Server.  If you already closed Management Studio, you will need to reopen it up and connect to the Analysis Server, if it is still open connect to the Analysis Server.  Under Databases find the ITAnalytics Database and expand “Data Sources” where you will find a listing for the “ITAnalytics” Data Source.  Right-click and select properties and you should see something that looks like the following screenshot

Screen Shot 2015-07-13 at 3.00.58 PM.png

What we will change is the “Security Settings from “Default” to the service account we are using for IT Analytics.  When you click on the “…” a new window will open up, select “Use a specific Windows user name and password” and provide the correct information.  My system looks like the following screenshot

Screen Shot 2015-07-13 at 3.03.08 PM.png

Restart the SQL Server Services and your DLP cubes will process correctly.

セキュリティ企業で起きたデータ漏えいで、Adobe Flash Player に存在する 2 つ目の PoC 脆弱性を発見

$
0
0
Hacking Team におけるデータ漏えいで、さらにもうひとつ Adobe Flash Player のゼロデイ脆弱性が見つかりました。

続きを読む

Adobe Flash Player の 3 つ目のゼロデイ脆弱性(CVE-2015-5123)を悪用するコードが、Hacking Team の漏えい問題で流出

$
0
0
パッチの公開されていない Adobe Flash Player の脆弱性が、盗み出されたキャッシュから明らかになるにつれ、Hacking Team で起きたデータ漏えいで悪用コードの流出が続いています。

続きを読む
Viewing all 5094 articles
Browse latest View live




Latest Images