<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: peel]]></title>
    <link>http://securityratty.com/tag/peel</link>
    <description></description>
    <pubDate>Mon, 03 Mar 2008 10:51:00 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[Planning a Virtualization Infrastructure What You Need to Know]]></title>
      <link>http://securityratty.com/article/6115e1ac1bc3f443e6a376a3461275e3</link>
      <guid>http://securityratty.com/article/6115e1ac1bc3f443e6a376a3461275e3</guid>
      <description><![CDATA[Theres a lot of noise about virtualization out in the marketplace from the latest company VMware bought to speculation about Hyper-V to the myriad solutions for virtualization management. I wanted to...]]></description>
      <content:encoded><![CDATA[<p>There’s a lot of noise about virtualization out in the marketplace – from the <a href="http://vmblog.com/archive/2008/05/28/vmware-to-acquire-b-hive-networks-to-further-enhance-virtualization-platform-with-application-performance-management.aspx" target="_blank">latest company VMware bought</a> to <a href="http://blogs.zdnet.com/microsoft/?p=1182" target="_blank">speculation about Hyper-V</a> to the myriad solutions for virtualization management. I wanted to take a more practical approach to talking about virtualization and share advice and best practices that I’ve learned based upon my own experiences planning, deploying and managing large-scale multi-datacenter virtualization infrastructure.</p>
<p>In this first post, I cover the planning process and various considerations that anyone - from a small “mom and pop” shop to a large enterprise – should take into account for successful deployment.</p>
<p><strong>1) What problem(s) are you trying to solve? What are you trying to achieve?</strong></p>
<p>It should come as no surprise that this is the first step but surprisingly it’s a step that is sometimes ignored or not enough time and thought are spent against it in the rush to virtualize. Without really understanding what problem you’re trying to solve and what you’re trying to achieve, how will you ever know that you’ve been successful? Some typical reasons to virtualize:</p>
<ul>
<li>Server consolidation and cost savings. ROI and TCO.</li>
<li>Efficient resource utilization. <a href="http://www.computerworld.com.au/index.php/id;1175625790;fp;4;fpid;2359" target="_blank">Chargeback model</a> and measurement.</li>
<li>Cost-effective growth strategy. Cost avoidance.</li>
</ul>
<p><strong>2) What resources do you have and what additional resources do you need?</strong></p>
<p>You need to understand your current environment before adding virtualization to the mix. Peel back the onion and look at historical performance. You may not have the right hardware to handle an increase in virtual servers.</p>
<p>Factor in the pattern of the behavior of servers, whether they are running hot during business hours or at night, peak cycles, etc. Are they CPU-intensive or is the gating factor disk or memory or a combination of these? This information forms the performance baseline you must factor into any <a href="http://weblog.infoworld.com/virtualization/archives/2008/03/virtualization_38.html" target="_blank">virtualization capacity planning</a>.</p>
<p>I can’t emphasize enough how important it is to have a capacity plan. People tend to virtualize but don’t always have a capacity plan in place to know when they’re running at full.</p>
<p>Beyond computing assets, you need to look at staffing as well. How will virtualization effect staff resource utilization? Virtualization, done the right way, should gain you efficiencies on the staffing side as well, freeing up resources for other initiatives. But in order to do it the “right way”, that takes an investment in training that should always be factored into your planning.</p>
<p><strong>3) What are your success metrics?</strong></p>
<p>Make sure to draft a document to formally measure your success before, during, and after implementing a virtualized environment. This relates back to the problem you were trying to solve. Depending on what you need to measure, you need to plan for tools and processes to make this a reality.</p>
<p>In the next post, I’ll talk about roadblocks to successful virtualization deployment and how to avoid them.</p>
<p><a href="http://sharethis.com/item?&wp=2.3.3&amp;publisher=f8a81d13-50d0-4a5c-833d-8e5f2341e305&amp;title=Planning+a+Virtualization+Infrastructure+%26ndash%3B+What+You+Need+to+Know&amp;url=http%3A%2F%2Fblog.sciencelogic.com%2Fplanning-a-virtualization-infrastructure-what-you-need-to-know%2F06%2F02%2F2008%2F">ShareThis</a></p>]]></content:encoded>
      <pubDate>Mon, 02 Jun 2008 09:30:31 +0000</pubDate>
      <category domain="http://securityratty.com/tag/virtualization">virtualization</category>
      <category domain="http://securityratty.com/tag/virtualization capacity">virtualization capacity</category>
      <category domain="http://securityratty.com/tag/virtualization infrastructure">virtualization infrastructure</category>
      <category domain="http://securityratty.com/tag/successful deployment">successful deployment</category>
      <category domain="http://securityratty.com/tag/successful">successful</category>
      <category domain="http://securityratty.com/tag/virtualization management">virtualization management</category>
      <category domain="http://securityratty.com/tag/successful virtualization deployment">successful virtualization deployment</category>
      <category domain="http://securityratty.com/tag/plan">plan</category>
      <category domain="http://securityratty.com/tag/capacity plan">capacity plan</category>
      <source url="http://blog.sciencelogic.com/planning-a-virtualization-infrastructure-what-you-need-to-know/06/02/2008/">Planning a Virtualization Infrastructure What You Need to Know</source>
    </item>
    <item>
      <title><![CDATA[Planning a Virtualization Infrastructure What You Need to Know]]></title>
      <link>http://securityratty.com/article/1d10cfcecf5c9ae0c869424816f4c541</link>
      <guid>http://securityratty.com/article/1d10cfcecf5c9ae0c869424816f4c541</guid>
      <description><![CDATA[Theres a lot of noise about virtualization out in the marketplace from the latest company VMware bought to speculation about Hyper-V to the myriad solutions for virtualization management. I wanted to...]]></description>
      <content:encoded><![CDATA[<p>There’s a lot of noise about virtualization out in the marketplace – from the <a href="http://vmblog.com/archive/2008/05/28/vmware-to-acquire-b-hive-networks-to-further-enhance-virtualization-platform-with-application-performance-management.aspx" target="_blank">latest company VMware bought</a> to <a href="http://blogs.zdnet.com/microsoft/?p=1182" target="_blank">speculation about Hyper-V</a> to the myriad solutions for virtualization management. I wanted to take a more practical approach to talking about virtualization and share advice and best practices that I’ve learned based upon my own experiences planning, deploying and managing large-scale multi-datacenter virtualization infrastructure.</p>
<p>In this first post, I cover the planning process and various considerations that anyone - from a small “mom and pop” shop to a large enterprise – should take into account for successful deployment.</p>
<p><strong>1) What problem(s) are you trying to solve? What are you trying to achieve?</strong></p>
<p>It should come as no surprise that this is the first step but surprisingly it’s a step that is sometimes ignored or not enough time and thought are spent against it in the rush to virtualize. Without really understanding what problem you’re trying to solve and what you’re trying to achieve, how will you ever know that you’ve been successful? Some typical reasons to virtualize:</p>
<ul>
<li>Server consolidation and cost savings. ROI and TCO.</li>
<li>Efficient resource utilization. <a href="http://www.computerworld.com.au/index.php/id;1175625790;fp;4;fpid;2359" target="_blank">Chargeback model</a> and measurement.</li>
<li>Cost-effective growth strategy. Cost avoidance.</li>
</ul>
<p><strong>2) What resources do you have and what additional resources do you need?</strong></p>
<p>You need to understand your current environment before adding virtualization to the mix. Peel back the onion and look at historical performance. You may not have the right hardware to handle an increase in virtual servers.</p>
<p>Factor in the pattern of the behavior of servers, whether they are running hot during business hours or at night, peak cycles, etc. Are they CPU-intensive or is the gating factor disk or memory or a combination of these? This information forms the performance baseline you must factor into any <a href="http://weblog.infoworld.com/virtualization/archives/2008/03/virtualization_38.html" target="_blank">virtualization capacity planning</a>.</p>
<p>I can’t emphasize enough how important it is to have a capacity plan. People tend to virtualize but don’t always have a capacity plan in place to know when they’re running at full.</p>
<p>Beyond computing assets, you need to look at staffing as well. How will virtualization effect staff resource utilization? Virtualization, done the right way, should gain you efficiencies on the staffing side as well, freeing up resources for other initiatives. But in order to do it the “right way”, that takes an investment in training that should always be factored into your planning.</p>
<p><strong>3) What are your success metrics?</strong></p>
<p>Make sure to draft a document to formally measure your success before, during, and after implementing a virtualized environment. This relates back to the problem you were trying to solve. Depending on what you need to measure, you need to plan for tools and processes to make this a reality.</p>
<p>In the next post, I’ll talk about roadblocks to successful virtualization deployment and how to avoid them.</p>
<p><a href="http://sharethis.com/item?&wp=2.3.3&amp;publisher=f8a81d13-50d0-4a5c-833d-8e5f2341e305&amp;title=Planning+a+Virtualization+Infrastructure+%26ndash%3B+What+You+Need+to+Know&amp;url=http%3A%2F%2Fblog.sciencelogic.com%2F06%2F2008%2Fplanning-a-virtualization-infrastructure-what-you-need-to-know">ShareThis</a></p>]]></content:encoded>
      <pubDate>Mon, 02 Jun 2008 09:30:31 +0000</pubDate>
      <category domain="http://securityratty.com/tag/virtualization">virtualization</category>
      <category domain="http://securityratty.com/tag/virtualization capacity">virtualization capacity</category>
      <category domain="http://securityratty.com/tag/virtualization infrastructure">virtualization infrastructure</category>
      <category domain="http://securityratty.com/tag/successful deployment">successful deployment</category>
      <category domain="http://securityratty.com/tag/successful">successful</category>
      <category domain="http://securityratty.com/tag/virtualization management">virtualization management</category>
      <category domain="http://securityratty.com/tag/successful virtualization deployment">successful virtualization deployment</category>
      <category domain="http://securityratty.com/tag/plan">plan</category>
      <category domain="http://securityratty.com/tag/capacity plan">capacity plan</category>
      <source url="http://blog.sciencelogic.com/06/2008/planning-a-virtualization-infrastructure-what-you-need-to-know">Planning a Virtualization Infrastructure What You Need to Know</source>
    </item>
    <item>
      <title><![CDATA[Planning a Virtualization Infrastructure What You Need to Know]]></title>
      <link>http://securityratty.com/article/5d2f580068535837ea4964daa52cc4ed</link>
      <guid>http://securityratty.com/article/5d2f580068535837ea4964daa52cc4ed</guid>
      <description><![CDATA[Theres a lot of noise about virtualization out in the marketplace from the latest company VMware bought to speculation about Hyper-V to the myriad solutions for virtualization management. I wanted to...]]></description>
      <content:encoded><![CDATA[<p>There’s a lot of noise about virtualization out in the marketplace – from the <a href="http://vmblog.com/archive/2008/05/28/vmware-to-acquire-b-hive-networks-to-further-enhance-virtualization-platform-with-application-performance-management.aspx" target="_blank">latest company VMware bought</a> to <a href="http://blogs.zdnet.com/microsoft/?p=1182" target="_blank">speculation about Hyper-V</a> to the myriad solutions for virtualization management. I wanted to take a more practical approach to talking about virtualization and share advice and best practices that I’ve learned based upon my own experiences planning, deploying and managing large-scale multi-datacenter virtualization infrastructure.</p>
<p>In this first post, I cover the planning process and various considerations that anyone - from a small “mom and pop” shop to a large enterprise – should take into account for successful deployment.</p>
<p><strong>1) What problem(s) are you trying to solve? What are you trying to achieve?</strong></p>
<p>It should come as no surprise that this is the first step but surprisingly it’s a step that is sometimes ignored or not enough time and thought are spent against it in the rush to virtualize. Without really understanding what problem you’re trying to solve and what you’re trying to achieve, how will you ever know that you’ve been successful? Some typical reasons to virtualize:</p>
<ul>
<li>Server consolidation and cost savings. ROI and TCO.</li>
<li>Efficient resource utilization. <a href="http://www.computerworld.com.au/index.php/id;1175625790;fp;4;fpid;2359" target="_blank">Chargeback model</a> and measurement.</li>
<li>Cost-effective growth strategy. Cost avoidance.</li>
</ul>
<p><strong>2) What resources do you have and what additional resources do you need?</strong></p>
<p>You need to understand your current environment before adding virtualization to the mix. Peel back the onion and look at historical performance. You may not have the right hardware to handle an increase in virtual servers.</p>
<p>Factor in the pattern of the behavior of servers, whether they are running hot during business hours or at night, peak cycles, etc. Are they CPU-intensive or is the gating factor disk or memory or a combination of these? This information forms the performance baseline you must factor into any <a href="http://weblog.infoworld.com/virtualization/archives/2008/03/virtualization_38.html" target="_blank">virtualization capacity planning</a>.</p>
<p>I can’t emphasize enough how important it is to have a capacity plan. People tend to virtualize but don’t always have a capacity plan in place to know when they’re running at full.</p>
<p>Beyond computing assets, you need to look at staffing as well. How will virtualization effect staff resource utilization? Virtualization, done the right way, should gain you efficiencies on the staffing side as well, freeing up resources for other initiatives. But in order to do it the “right way”, that takes an investment in training that should always be factored into your planning.</p>
<p><strong>3) What are your success metrics?</strong></p>
<p>Make sure to draft a document to formally measure your success before, during, and after implementing a virtualized environment. This relates back to the problem you were trying to solve. Depending on what you need to measure, you need to plan for tools and processes to make this a reality.</p>
<p>In the next post, I’ll talk about roadblocks to successful virtualization deployment and how to avoid them.</p>
<p><a href="http://sharethis.com/item?&wp=2.3.3&amp;publisher=f8a81d13-50d0-4a5c-833d-8e5f2341e305&amp;title=Planning+a+Virtualization+Infrastructure+%26ndash%3B+What+You+Need+to+Know&amp;url=http%3A%2F%2Fblog.sciencelogic.com%2Fplanning-a-virtualization-infrastructure-what-you-need-to-know%2F06%2F2008">ShareThis</a></p>]]></content:encoded>
      <pubDate>Mon, 02 Jun 2008 09:30:31 +0000</pubDate>
      <category domain="http://securityratty.com/tag/virtualization">virtualization</category>
      <category domain="http://securityratty.com/tag/virtualization capacity">virtualization capacity</category>
      <category domain="http://securityratty.com/tag/virtualization infrastructure">virtualization infrastructure</category>
      <category domain="http://securityratty.com/tag/successful deployment">successful deployment</category>
      <category domain="http://securityratty.com/tag/successful">successful</category>
      <category domain="http://securityratty.com/tag/virtualization management">virtualization management</category>
      <category domain="http://securityratty.com/tag/successful virtualization deployment">successful virtualization deployment</category>
      <category domain="http://securityratty.com/tag/plan">plan</category>
      <category domain="http://securityratty.com/tag/capacity plan">capacity plan</category>
      <source url="http://blog.sciencelogic.com/planning-a-virtualization-infrastructure-what-you-need-to-know/06/2008">Planning a Virtualization Infrastructure What You Need to Know</source>
    </item>
    <item>
      <title><![CDATA[More On Non-lethal Weapons: Electrified Shieds]]></title>
      <link>http://securityratty.com/article/e7f8c88f01a1b72dd005f5c265493e15</link>
      <guid>http://securityratty.com/article/e7f8c88f01a1b72dd005f5c265493e15</guid>
      <description><![CDATA[Two quotes are enough, really

The kit &quot;features a peel and stick perforated [f]ilm, power supply and necessary conversion equipment. This laminate becomes electrified providing a powerful deterrent...]]></description>
      <content:encoded><![CDATA[Two quotes are enough, really:<br /><br />"The kit "features a peel and stick perforated [f]ilm, power supply and necessary conversion equipment. This laminate becomes electrified providing a powerful deterrent to protect officers and keep suspects or rioters at bay."  What could possibly go wrong?"<br /><br /><span style="font-style: italic;">Love that last sentense...<br /><br /></span>and<br /><br />"It's all part of the Office of Law Enforcement Technology Commercialization's Mock Prison Riot"<br /><br /><span style="font-style: italic;">Wow, a prison riot, what a fun event! ;-)</span><br /><br />Read <a href="http://blog.wired.com/defense/2008/05/pretty-soon-cop.html">here</a>.<div class="blogger-post-footer">About me: http://www.chuvakin.org</div><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/AntonChuvakinPersonalBlog?a=FzqeKH"><img src="http://feeds.feedburner.com/~f/AntonChuvakinPersonalBlog?i=FzqeKH" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/AntonChuvakinPersonalBlog?a=tt1KsH"><img src="http://feeds.feedburner.com/~f/AntonChuvakinPersonalBlog?i=tt1KsH" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/AntonChuvakinPersonalBlog?a=0A5RBH"><img src="http://feeds.feedburner.com/~f/AntonChuvakinPersonalBlog?i=0A5RBH" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/AntonChuvakinPersonalBlog/~4/289750410" height="1" width="1"/>]]></content:encoded>
      <pubDate>Tue, 13 May 2008 11:12:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/prison riot">prison riot</category>
      <category domain="http://securityratty.com/tag/mock prison riot">mock prison riot</category>
      <category domain="http://securityratty.com/tag/law enforcement technology">law enforcement technology</category>
      <category domain="http://securityratty.com/tag/protect officers">protect officers</category>
      <category domain="http://securityratty.com/tag/fun event">fun event</category>
      <category domain="http://securityratty.com/tag/powerful deterrent">powerful deterrent</category>
      <category domain="http://securityratty.com/tag/conversion equipment">conversion equipment</category>
      <category domain="http://securityratty.com/tag/power supply">power supply</category>
      <category domain="http://securityratty.com/tag/rioters">rioters</category>
      <source url="http://feeds.feedburner.com/~r/AntonChuvakinPersonalBlog/~3/289750410/more-on-non-lethal-weapons-electrified.html">More On Non-lethal Weapons: Electrified Shieds</source>
    </item>
    <item>
      <title><![CDATA[Don't Peel & Stick Me, Bro!]]></title>
      <link>http://securityratty.com/article/80d693c9ae83c78ed31010f5781a0fd9</link>
      <guid>http://securityratty.com/article/80d693c9ae83c78ed31010f5781a0fd9</guid>
      <description><![CDATA[Taser International is introducing a peel and stick laminate that &quot;becomes electrified, providing a powerful deterrent to protect officers and keep suspects or rioters at bay.&quot; What could possibly go...]]></description>
      <content:encoded><![CDATA[Taser International is introducing a peel and stick laminate that "becomes electrified, providing a powerful deterrent to protect officers and keep suspects or rioters at bay." What could possibly go wrong?<br style="clear: both;"/>
  <img alt="" style="border: 0; height:1px; width:1px;" border="0" src="http://www.pheedo.com/img.phdo?i=b7e6dcec248fb55d66a35cdd2f2f9d98" height="1" width="1"/>
<img src="http://www.pheedo.com/feeds/tracker.php?i=b7e6dcec248fb55d66a35cdd2f2f9d98" style="display: none;" border="0" height="1" width="1" alt=""/><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=DshTuH"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=DshTuH" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=WIQLGh"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=WIQLGh" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=CSyLjh"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=CSyLjh" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=CXudfH"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=CXudfH" border="0"></img></a>
 <a href="http://feeds.wired.com/~f/wired/politics/security?a=XLOUuH"><img src="http://feeds.wired.com/~f/wired/politics/security?i=XLOUuH" border="0"></img></a> <a href="http://feeds.wired.com/~f/wired/politics/security?a=fcUvvh"><img src="http://feeds.wired.com/~f/wired/politics/security?i=fcUvvh" border="0"></img></a> <a href="http://feeds.wired.com/~f/wired/politics/security?a=n6iK3h"><img src="http://feeds.wired.com/~f/wired/politics/security?i=n6iK3h" border="0"></img></a> <a href="http://feeds.wired.com/~f/wired/politics/security?a=UBK55H"><img src="http://feeds.wired.com/~f/wired/politics/security?i=UBK55H" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/wired/politics/privacy/~4/289493995" height="1" width="1"/><img src="http://feeds.wired.com/~r/wired/politics/security/~4/289494003" height="1" width="1"/>]]></content:encoded>
      <pubDate>Tue, 13 May 2008 10:44:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/stick">stick</category>
      <category domain="http://securityratty.com/tag/taser international">taser international</category>
      <category domain="http://securityratty.com/tag/powerful deterrent">powerful deterrent</category>
      <category domain="http://securityratty.com/tag/protect officers">protect officers</category>
      <category domain="http://securityratty.com/tag/peel">peel</category>
      <category domain="http://securityratty.com/tag/bay">bay</category>
      <category domain="http://securityratty.com/tag/rioters">rioters</category>
      <category domain="http://securityratty.com/tag/possibly">possibly</category>
      <category domain="http://securityratty.com/tag/wrong">wrong</category>
      <source url="http://feeds.wired.com/~r/wired/politics/security/~3/289494003/pretty-soon-cop.html">Don't Peel &amp; Stick Me, Bro!</source>
    </item>
    <item>
      <title><![CDATA[Milton Security Group takes over Vernier EdgeWall 7000 support - Who is Milton Security?]]></title>
      <link>http://securityratty.com/article/e75eb346ad38fe681e93d2817f2e6424</link>
      <guid>http://securityratty.com/article/e75eb346ad38fe681e93d2817f2e6424</guid>
      <description><![CDATA[From this press release it looks like the newly named Autonomic Networks (formerly Vernier) has found a sucker an entity to take over ongoing support and perhaps development of the EdgeWall 7000 line...]]></description>
      <content:encoded><![CDATA[<p>From this <a href="http://www.newswiretoday.com/news/32503/">press release</a> it looks like the newly named Autonomic Networks (formerly Vernier) has found <del>a sucker</del> an entity to take over ongoing support and perhaps development of the EdgeWall 7000 line of appliances (what about the other Edgewall models?). Before we go any further, one might say that unlike Lockdown, at least they are getting someone to support the customers. But before we go there, maybe we should ask, who or what is Milton Security Group? I am afraid when we peel the layers of this onion we find more of the same old, same old from the folks at Vernier.<br><br>I went to the Milton Security <a href="http://miltonsecurity.com/index.html">web site</a> and it looks like the paint is still wet. They are in protection, compliance and reporting, but I am afraid the links are not yet working to dive in much beyond that. When you go to the company page you get this:</p>

<p><em><strong>About Milton Security Group LLC</strong></em></p><blockquote><p><em>Success in the 21st century is defined by your agility in a changing time. This includes adapting to the needs of your employees, contractors, outsource providers on the workforce side and the changing landscape of how to provide the right access to each one of these groups. Your current infrastructure may be limited in its ability to change as well. Real time auditing and control is required in this age, The Age of Compliance(T). </em></p>

<p><em>Milton Security Group LLC is a security company with a consulting practice. The Principals and Staff at Milton Security are dedicated individuals with many years of experience with diverse organizations from small businesses to government agencies. Combined with this and our unique range of experience and knowledge, Milton Security serves only one purpose, helping our customer's succeed.</em></p></blockquote><p>OK, not really too much there. They are a security company with a consulting practice. I did a little more digging. They have two job openings posted, one for a Sr Systems Engineer for the current and next generation of MSG NAC products. I guess this is the guy who will continue on the development of the Vernier line. </p>

<p>But you guys don't pay me what you do to stop there do you? I did some more digging. Seems that Milton Security is the brainchild of its founder and CEO, James McMurray. I did some more <a href="http://www.linkedin.com/ppl/webprofile?action=vmi&amp;amp;id=3235&amp;amp;authToken=TvIy&amp;amp;authType=name&amp;amp;trk=ppro_viewmore&amp;amp;lnk=vw_pprofile#recommendations">digging</a> and it seems James is the former head of the SE group at Vernier, what a surprise! Looks like he was able to get them to let him take over the IP and run with it. I bet he and his friends paid little if anything for this. </p>

<p>People lets get real here. I applaud James for biting this off and wish he and his band of merry men the best of luck. But is this fair to the people who spent all that money on the Vernier boxes. At best Milton will be pressed to keep up with the snort and nessus signatures the Vernier boxes use. I guess being this small, without VC money behind them, they might be just better off using the Tenable and Sourcefire signatures and hope that those guys figure they are too small to sue. </p>

<p>If you are a Vernier customer you have to be checking your underwear. I mean do you want Milton-Bradley supporting your NAC system? This isn't board games we are talking about here. There are too many replacement and trade up offers from StillSecure and other NAC vendors for you to want to be a guinea pig in yet another experiment from the folks at Vernier. How many times do you have to get burned before you learn? You deserve better!</p>
<p><a href="http://feeds.feedburner.com/~a/StillsecureAfterAllTheseYears?a=eKYpS1"><img src="http://feeds.feedburner.com/~a/StillsecureAfterAllTheseYears?i=eKYpS1" border="0"></img></a></p><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=6RYwxYG"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=6RYwxYG" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=XKrRmQG"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=XKrRmQG" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=62CwYYG"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=62CwYYG" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=xp67TeG"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=xp67TeG" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=SyjFhQg"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=SyjFhQg" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=B8W0uog"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=B8W0uog" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/StillsecureAfterAllTheseYears/~4/268749568" height="1" width="1"/>]]></content:encoded>
      <pubDate>Fri, 11 Apr 2008 18:13:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/milton">milton</category>
      <category domain="http://securityratty.com/tag/milton security">milton security</category>
      <category domain="http://securityratty.com/tag/milton-bradley">milton-bradley</category>
      <category domain="http://securityratty.com/tag/milton security serves">milton security serves</category>
      <category domain="http://securityratty.com/tag/vernier">vernier</category>
      <category domain="http://securityratty.com/tag/vernier customer">vernier customer</category>
      <category domain="http://securityratty.com/tag/customer">customer</category>
      <category domain="http://securityratty.com/tag/vernier boxes">vernier boxes</category>
      <category domain="http://securityratty.com/tag/vernier line">vernier line</category>
      <source url="http://feeds.feedburner.com/~r/StillsecureAfterAllTheseYears/~3/268749568/milton-security.html">Milton Security Group takes over Vernier EdgeWall 7000 support - Who is Milton Security?</source>
    </item>
    <item>
      <title><![CDATA[Going beyond technical security controls]]></title>
      <link>http://securityratty.com/article/8697d896b8f8a93dcefd9bb7f11d663a</link>
      <guid>http://securityratty.com/article/8697d896b8f8a93dcefd9bb7f11d663a</guid>
      <description><![CDATA[Anton last week had this great write-up in ComputerWorld, &quot;Five Basic Mistakes of Security Policy,&quot; that hits the 5 basics that so many busy executives look past when leading a security organization
...]]></description>
      <content:encoded><![CDATA[Anton last week had this great write-up in ComputerWorld, <a href="http://www.computerworld.com/action/article.do?command=printArticleBasic&amp;articleId=9065202">"Five Basic Mistakes of Security Policy,"</a> that hits the 5 basics that so many busy executives look past when leading a security organization.<br /><br /><ol><li>Not having a policy</li><li>Not updating the policy</li><li>Not tracking compliance with the policy</li><li>Having a "tech only" policy</li><li>Having a large, unwieldy policy</li></ol><br />One of the biggest we see every day is #4.  Most  enterprises have some policy in place that  they update (typically annually before a pending audit).  Their current compliance tracking is provided by one or more software products that unfortunately don't have the full picture.<br /><br />The reason why comes down to #4.  Traditionally, enterprises have thrown either a vulnerability scanner, security event/log manager or another security software application at a list of IP addressable assets...generate a few reports...and hope they have things covered.<br /><br />The truth be told, this misses so much of the full picture (<a href="http://www.security-works.com/blog/2007/12/users-continue-to-ignore-security.html">over 50% per previous blog posts</a>) that even the internal or external auditors don't have enough time to do a comprehensive review.  The goal of those auditors is not a "witch hunt," it's suppose to be to protect the company!  So what happens is each year, things get more and more detailed (which is good) as findings from the prior year are addressed allowing them to "peel the onion" back another layer.<br /><br />This is why we are seeing the emergence of the IT GRC market that compliments and extends these products you point at IP addressable assets.  These solutions use automation techniques to assess security controls around things that are not IP addressable (e.g., people, processes, facilities).  The other need these products are offering is a normalized, unified view of the entire security program.  Leveraging scoring from other products, they finally deliver the possibility of 100% visibility into the posture of your entire IT security, risk or compliance program.<img src="http://feeds.feedburner.com/~r/PracticalRiskManagement/~4/244879733" height="1" width="1"/>]]></content:encoded>
      <pubDate>Mon, 03 Mar 2008 10:51:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/security">security</category>
      <category domain="http://securityratty.com/tag/security eventlog manager">security eventlog manager</category>
      <category domain="http://securityratty.com/tag/assess security controls">assess security controls</category>
      <category domain="http://securityratty.com/tag/entire security program">entire security program</category>
      <category domain="http://securityratty.com/tag/security policy">security policy</category>
      <category domain="http://securityratty.com/tag/policy">policy</category>
      <category domain="http://securityratty.com/tag/security organization">security organization</category>
      <category domain="http://securityratty.com/tag/unwieldy policy">unwieldy policy</category>
      <category domain="http://securityratty.com/tag/security software application">security software application</category>
      <source url="http://feeds.feedburner.com/~r/PracticalRiskManagement/~3/244879733/going-beyond-technical-security.html">Going beyond technical security controls</source>
    </item>
  </channel>
</rss>
