Novice here looking for advice. Thanks
geositeadmin
u/geositeadmin
What would you do? Pro's/Con's?
Our organization is slowly but surely moving into a DevOps world. In the existing ITIL base service delivery world we have an established and mature (bureaucratic) Change Mgmt process.
We are facing more and more changes from the DevOps side especially more Infrastructure as Code.
How best to handle change from the DevOps side without introducing antipatterns and such?
How do you know if you are working someone long path or short?
There have been quite a few security vulnerabilities released since John’s death. Most interestingly, Pegasus malware that infects mobile phones and is sold to governments and law enforcement to spy on people of their choosing. John had been working on a secure mobile device at some point in the past few years. Are these disclosures now happening because John had knowledge of them and somehow people became aware?
We have CIS hardened Windows and Linux VM’s. How are others handling appliances from vendors? VCenter, Tenable, Cisco ISE, etc. Just scan them and go from there? TIL
I’ve heard that CVS is throwing away unused vaccines each night because not enough people who “meet the requirements” for the initial phase show up. Anyone else hear the same? This would be so disheartening if true.
I’m considering a remote station setup. Can anyone comment on and recommend a coax switch that I can operate remotely? Any general remote operating recommendations or comments are welcome!
Any experience with this? Is it any different than a traditional point-to-point circuit?
We have a vendor who does our ASV scans. They have called out some endpoints that “could” be vulnerable to a certain exploit based on their scan but they have not demo the end points are vulnerable.
We have provided reasons why the endpoints are not possibly vulnerable. They still want us to make changes - just so the scans run clean.
Is this absurd or just me? Is this how ASV scans should be done?
I have a slight leak when it rains behind my breaker panel. I assume a crack in the foundation or similar issue. Panel is attached to partical board and it is crumbling. What can I do? Can the panel be moved enough to see the leak source? Any recommendations? Thanks!
We plan to begin using CyberArk in the next few months. We’ll have 5 to 6 different teams using it, all with different sysadmin related needs.
Should we just start gathering user stories from all the teams with respect to what they need to access, etc?
We’d like to have a head start and hit the ground running once we deploy the solution and start working with their PS team.
Thanks in advance!
I have a Certificate Authority server that runs Windows2008R2. It is the sole end of life system on our PCI segment.
We are not ready to replace it. Is it enough of a compensating control time turn on firewall rules so that this server is only accessible to the domain controllers? It will be invisible to all other systems.
Thanks!