Problem solve

Problem solve

Get help with specific problems with your technologies, process and projects.

• When filling out the PCI DSS questionnaire, is it important to provide documentation?

  It's time to fill out the PCI DSS questionnaire, but management has said that it's no big deal, there's no need to provide accompanying documentation. But what will happen when an auditor comes knocking? Security management expert Mike Rothman ... Continue Reading

• Using 802.1X to control physical access to LANs

  802.1X, a port-based access control, is primarily used on WLANs to control which machines can connect to the network. However, 802.1X is gaining popularity as an access control method for wired networks. This tip outlines some stipulations for ... Continue Reading

• Effectively using vulnerability management data

  As more organizations turn to outsourcing services for their vulnerability management, certain questions need to be addressed. Is there a way to make use of the collected data? Can information collected from internal scans or assessments be used to ... Continue Reading

• Are wireless networks inherently insecure?

  Wireless access protection and WPA2 are both good ways to keep networks secure, though nothing's perfect. Network security expert Mike Chapple expounds. Continue Reading

• How to build a secure wireless connection

  In this Q&A, Mike Chapple discusses some key components that will protect your wireless network from spyware, and other malicious code. Continue Reading

• Will the features of Windows Vista SP1 encourage wider adoption of the OS?

  Platform security expert Michael Cobb explains the benefits and drawbacks of Windows Vista Service Pack 1.Continue Reading

• Nipper audits routers, reveals insecure settings

  In this column, contributor Scott Sidel examines Nipper, a network infrastructure parser that helps security professionals keep routers and firewalls properly configured.Continue Reading

• How should a company's security program define roles and responsibilities?

  In many organizations, it's not uncommon for physical, legal and information security departments to step on each other's toes. In this expert Q&A, security management pro Shon Harris reveals how a CSO can bring these teams together and implement a ...Continue Reading

• How to revoke and delete Active Directory user certificates

  In this Ask the Expert Q&A, our identity and access management expert examines how to set up Active Directory autoenrollment feature to revoke and delete user certificates on the Certificate Authority (CA) automatically.Continue Reading

• Microsoft NAP/TNC alliance brings new dimension to network access control decisions

  In the past, looming interoperability issues have kept security professionals from adopting a network access control tool. Just a few months ago, however, Microsoft announced its intention to make the company's Network Access Protection product ...Continue Reading

• Best practices for purchasing an intrusion detection device

  In this SearchSecurity.com Q&A, security management expert Mike Rothman offers guidelines for buying an intrusion detection (IDS) device.Continue Reading

• The pros and cons of outsourcing antivirus services

  Learn the pros and cons of outsourcing antivirus services in this tip by Ed Skoudis.Continue Reading

• IPsec tunneling: Exploring the security risks

  As part of his monthly responses to readers, Mike Chapple reveals some information about VPNs that many may not want to hear.Continue Reading

• Should UTM and Web security filtering software be used together?

  Michael Cobb explains what is best for your business: either standalone security appliances or unified threat management devices.Continue Reading

• Are two network firewalls better than one?

  Two firewalls from different vendors may not cause processing delays, but if not used and arranged correctly, the devices can become a hassle for IT teams. In this expert Q&A, network security pro Mike Chapple explains how to get the most out of two...Continue Reading