Archive for the ‘System Administration’ Category

6 Mistakes to Avoid When Choosing An Email Provider

Monday, April 9th, 2012

Many businesses are moving to cloud-based services, especially for email. Here are some of the mistakes we’ve seen, and how you can avoid them.

1. Hosting Email Yourself (in-house)

Properly maintaining an email server, like maintaining any piece of critical IT infrastructure, is not a simple task. Too many companies choose to run their own internal email server because it’s “cheaper” than outsourcing. Nothing could be further from the truth! There is more to maintaining a mail server than just turning it on and forgetting it. Servers need frequent regular attention, often on a daily, if not more frequent basis. They need to patched, upgraded, backed up, and monitored to make sure they are up, stable, and secure. On several occasions we have come across client systems which have been compromised, in one form or another, for months, and nobody knew! If you choose to host your email in house, be sure that your IT staff (or outsourced providers) are doing regular, frequent maintenance on your mail servers.

2. Using Your ISP for Email

Most ISPs don’t want to host your email. They want to be in the business of providing Internet access. Email came along because users demanded it, and many ISPs added this feature in as an afterthought. Your ISP’s mail server is often overloaded, slow, and will have prohibitively low storage and attachment limits.

In 2008, Charter Communications (accidentally) deleted 14,000 users’ mailboxes with no option to restore any of the deleted mail. Does that sounds like a company that takes email seriously?

Also, many ISPs will not host your domain, example.com, and force you to use their domain name in your email address, so instead of you being able to send email as you@yourcompanyname.com, it has to be something like yourcompany@yourISP.com, which looks very unprofessional and fly-by-night. Nothing screams “unprofessional” like an email address with @aol.com, @gmail.com, or @comcast.net in it for your business.

Finally, if your ISP gets acquired or goes out of business, or you change your ISP, your email address need to change, and you are almost certain to lose emails because people will have an old email address for you in their address book.

3. Falling for the Promise of “24x7x365 Support”

Large email providers love to tell you about their 24x7x365 support. What they don’t tell you is that, while you may actually get to speak to a human to request support, the real engineers and technicians who do the hard work to get problems fixed work a 9-5 schedule, so if you do have a problem after hours, you may end up waiting until the next morning anyway! Having a relationship with a trusted provider is much more valuable than playing the game of 24×7 roulette.

4. Not understanding Your SLA (Service Level Agreement)

Does your email provider offer you a 99.9999% uptime guarantee? What happens when they go down for a few hours? Do they pay you back? No. SLAs vary from vendor to vendor, so be sure to understand what yours promises, what you will get when they go down, and what you won’t. What you will get is a portion of your bill cut, depending on the SLA, but you’ll have to apply to your provider’s billing department and request this credit.

5. Choosing the Bells and Whistles (you’ll never use)

Many hosted email providers will boast features are overkill for small businesses. Most small businesses do not need to be compliant with HIPAA, PCI, and SOX, but many email providers will boast their compliance packages and try to sell you on them. Granted, most organizations we work with could benefit from a lot of additional features that never occurred to them. Just because you don’t have a feature now doesn’t mean you can’t benefit from them, but don’t be sold on the promise of something without making sure it is really a benefit, not just an extra monthly charge on your account.

6. Looking at price first, features and benefits second (or never)

Price matters, but meeting your needs matters more. Yes, you could choose to host your email for free with your ISP, but it’s worth a few dollars per month to have your own domain name, larger message attachment sizes, collaboration and other features that you will actually use. Before making a decision, make sure that you are comparing identical or at least very similar features, and then come down to price, but not before.

 

Version 8.2 of Astaro Security Gateway

Friday, July 22nd, 2011

Today, Astaro (a division of Sophos) released version 8.2 of their Astaro Security Gateway. As announced on their blog, highlights include:

  • A new web reporting engine*
  • Support for 3G/UMTS USB modems
  • Web Application Security form hardening
  • Next Generation Firewall/Application control features.

These are some of the 60 new features in this release. If you run an Astaro Security Gateway, this upgrade is definitely worth checking out. And if you don’t yet run an Astaro Security Gateway, contact us so we can set you up with a free trial.

Still Think You Want Those Admin Rights Over Your PC? Think Again.

Monday, May 10th, 2010

In case you missed a previous post or two on the topic of why end users should not have administrative rights over their PCs, BeyondTrust has released a very compelling report on this issue. But first, let me ask the reader a few questions. (more…)

Google Drops Internet Explorer (IE) 6. So Should You.

Thursday, February 11th, 2010

Last week, I received this in an email from Google:

In order to continue to improve our products and deliver more sophisticated features and performance… we will be phasing out support for Microsoft Internet Explorer 6.0 as well as other older browsers that are not supported by their own manufacturers.

It’s about time, and not just for those reasons. (more…)

Further Evidence That Personal Internet Use Should Be Restricted at Work

Wednesday, September 23rd, 2009

This week’s Data Security Podcast had two items that really piqued my interest. The first was an article about an Ohio hospital which suffered data loss due to a malware infection. The malware was sent by the boyfriend of a hospital worker. Apparently he intended to follow his girlfriend’s movements on the Internet on her home PC. What he did not count on was her opening her email at work, and subsequently infecting a hospital computer. Quoting the PC World article,

“Between March 19 and March 28 the spyware sent more than 1,000 screen captures … via e-mail. They included details of medical procedures, diagnostic notes and other confidential information relating to 62 hospital patients. He was also able to obtain e-mail and financial records of four other hospital employees as well…”

This incident goes a long way to show that the biggest threat can often come from inside. Yes, while the boyfriend was the root cause, had the hospital employee not been allowed to access her personal email from work, her system would not have been infected in the first place.

In a separate news article, Panda Security reports that a hacker site is offering to crack Facebook accounts for the low low price of $100. Setting aside the question of whether the site is a “legitimate” hacking site (who’s to say they won’t just take your $100 and walk away?), I found it interesting that a Facebook account is now worth 3 times the street price of a social security or bank account number, which my sources say are going for $20-35 a piece.

Hardware Review: Astaro Security Gateway ASG110/120

Friday, September 18th, 2009

The Astaro Security Gateway is a product we have been using for a few years with various clients as a UTM (Unified Threat Management) device. It offers a number of features that they require, including network security, email security, and web surfing security. (more…)

Likewise + Ubuntu offers a Quick, Cheap, Easy, Secure Email, Web Browsing, Word Processing Solution

Wednesday, September 2nd, 2009

Readers of my personal blog or listeners to the Fresh Ubuntu Podcast will know that I have long been a proponent of Linux as an alternative to Windows, and now, more than ever, this should be a reality at your organization. What’s changed? Last year, Ubuntu, the leading desktop Linux distribution today, addded a package called Likewise-Open, from Likewise Software, Inc., to their software repositories. This means that, with just a few clicks, it is possible to make a Linux desktop computer log in to your existing Windows Active Directory system, without having to make separate user accounts for it. (more…)

Software Review: Rubber Ducky System Monitor

Saturday, August 1st, 2009

Today I am reviewing a tiny, free, handy piece of software for end-users: Rubber Ducky System Monitor by MimarSinan International. The program is a tiny application which gives even a novice user a simple, easy to read display which tells them how busy their system is and identify potential problems. (more…)

How do Web Content Filters Work?

Friday, July 17th, 2009

We sometimes get support requests from frustrated clients who are in some way prevented from accomplishing a task because of system security policies. Unfortunately, they sometimes think that we have done this deliberately to make their job difficult. One of my jobs as a security professional is to explain to my clients just what security measures we take to protect them, and why. Today, I’ll try to explain how web content filters do their job and why they are important. (more…)

FOG – A Free Computer Cloning Solution

Friday, July 3rd, 2009

Symantec Ghost is a useful application for what’s known as “imaging” or “cloning” computers. It allows you to copy a single computer’s hard drive contents to multiple machines at once so you have a base Windows install that’s exactly the same on all of the machines. The only difference is the uniquely identifying information about the machines (computer name, Hardware address, etc.).

Recently one of our client’s Ghost subscriptions came up for renewal. While Ghost does what it’s designed to do well enough, we were wondering what other options there were out there in the world. Enter FOG. (more…)