Cornerstone Issue 95: October, 2009



Welcome to Issue 95 of Cornerstone, a subscription-only electronic newsletter issued periodically by Core Competence.

Cornerstone reports on a wide range of networking topics and activities involving Core Competence. A brief abstract explains what you will find if you choose to visit each URL.

TechTarget Mobile Device Management Tips

http://searchmobilecomputing.com/tip/0,289483,sid40_gci1370722,00.html
Rethinking your mobile device management strategy
SearchMobileComputing, October 8, 2009

The number of mobile devices that enterprises must manage and the difficulty of doing so continue to escalate. Combine explosive mobile device growth with shrinking budgets, and something's got to give. In this tip, Lisa Phifer ponders what enterprises can do to "get smart about managing and securing mobile devices -- now."

http://searchmobilecomputing.com/tip/0,289483,sid40_gci1370023,00.html
Mobile device management checklist
SearchMobileComputing, October 2009

In this mobile device management checklist, Lisa highlights business needs that should be considered when developing an enterprise mobile device management strategy.

http://searchmobilecomputing.com/tip/0,289483,sid40_gci1370024,00.html
Future proofing mobile device management
SearchMobileComputing, October 2009

Loosely coupled systems can address near-term challenges, but long-term success will require greater integration between MDM and the rest of IT infrastructure and processes. Here, we consider several "touch points" where MDM must (eventually) dovetail with past and future IT investments.

http://searchmobilecomputing.com/tip/0,289483,sid40_gci1370028,00.html
Managing mobile device diversity
SearchMobileComputing, October 2009

In a perfect world, your entire workforce would carry a standard mobile device that could be managed easily and effectively through one platform. Alas, most IT managers must deal with increasingly diverse employee and employer-owned devices, spanning multiple operating systems and product generations. How can you manage this potpourri without breaking the bank?

Wi-Fi Planet

http://www.wi-fiplanet.com/tutorials/article.php/3843126
How to: Use iPod touch to Make Voice Calls
Wi-Fi Planet, October 9, 2009

Lisa Phifer considers this iPhone alternative: combining an iPod touch with a mobile 3G/Wi-Fi router to make VoIP calls. This tutorial explains what's required to make this combo fly — and how the result falls short of a genuine iPhone.

http://www.wi-fiplanet.com/news/article.php/3842126
Wi-Fi Certified 802.11n: Something Old, Something New
Wi-Fi Planet, October 2, 2009

The Wi-Fi Alliance announced its Wi-Fi CERTIFIED n test program without upsetting the industry's artfully-balanced apple cart. New tests, tag lines, and matrices strike a careful (but not entirely successful) balance between stability and innovation, complexity and clarity.

http://www.wi-fiplanet.com/news/article.php/3845531
AirMagnet Tackles New Enterprise WLAN Threats
Wi-Fi Planet, October 26, 2009

AirMagnet Enterprise update helps troubleshoot and optimize 802.11n rollouts, neutralizes new Skyjack and Karmetasploit Wi-Fi attacks.

http://www.wi-fiplanet.com/news/article.php/3845701
Aerohive Gets SaaSy with New SME HiveAP Management
Wi-Fi Planet, October 27, 2009

Aerohive makes HiveAPs more attractive to SMEs by offering an entry-level HiveAP 120 and a pay-as-you-go "Express Mode" HiveManager Online service.

http://www.wi-fiplanet.com/news/article.php/3844456
New Wireless Video Quality Assessment Tool from VeriWave
Wi-Fi Planet, October 20, 2009

WaveVideo helps enterprises, service providers, and manufacturers quantify and visualize 802.11n network and device HDTV-readiness.

http://www.wi-fiplanet.com/news/article.php/3836966
Aerohive Adds SLA Monitoring and Enforcement
Wi-Fi Planet, September 1, 2009

Aerohive Performance Sentinel adds readily-available, easily-grasped insight on Wi-Fi SLA compliance. Airtime Boost gives non-compliant stations a little extra air time as needed to achieve defined targets.

TechTarget Security Tips

http://searchmidmarketsecurity.com/tip/0,289483,sid198_gci1367195,00.html
Understand the pros and cons of Windows 7 DirectAccess
SearchMidmarketSecurity, September 4, 2009

With this Windows 7 feature, users can obtain secure remote end-to-edge and end-to-end access, tunneled through a Windows Server 2008 R2 DirectAccess Server. But is DirectAccess really a novel alternative to VPN? And more importantly: What are the advantages and limitations of DirectAccess for midmarket businesses?

http://searchmidmarketsecurity.com/tip/0,289483,sid198_gci1371392,00.html
How to use Microsoft Windows 7 AppLocker for whitelisting applications
SearchMidMarketSecurity, October 14, 2009

With Windows 7 AppLocker, Microsoft fires another salvo in the ongoing battle to secure business PCs by limiting the programs they run. In part one of this two-part technical tip, Lisa Phifer explores how AppLocker differs from Windows XP/Vista Software Restriction Policies.

http://searchmidmarketsecurity.com/tip/0,289483,sid198_gci1371393,00.html
How to automate and apply Microsoft Windows 7 AppLocker rules
SearchMidMarketSecurity, October 14, 2009

In part two of this two-part technical tip, we dive into how to automate Windows 7 AppLocker whitelist rule generation and how to apply those rules once you have AppLocker up and running.

http://searchsecurity.com/magazineFeature/0,296894,sid14_gci1366045_mem1,00.html
Best Remote Access Products
Information Security Magazine, September 2009

Five years ago, remote access began to shift towards web-based "clientless" VPNs. That evolution comes full-circle in this year's Information Security Magazine reader's choices for Best Remote Access Product, introduced by Lisa Phifer.

TechTarget Networking Tips

http://searchmobilecomputing.bitpipe.com/detail/RES/1252606702_898.html
The Mobile Enterprise: Taking wireless networking to the next level
SearchMobileComputing, September 10, 2009

Many enterprises use technologies such as WLAN and cellular connectivity in ways that cause needless duplication or even competition between mobility services. In this eGuide, learn how your business can leverage its WLAN to offer new integrated mobility services like fixed-mobile convergence and mobile unified communications.

http://searchnetworkingchannel.com/tip/0,289483,sid100_gci1372170,00.html
Upgrading customers to 802.11n wireless networks
SearchNetworkingChannel, October 26, 2009

Learn how WLAN solutions providers can help customers sort through 802.11n options, design optimized 802.11n networks, and roll out new 802.11n clients ­ especially handsets.

http://searchnetworking.com/tip/0,289483,sid7_gci1364510_mem1,00.html
Deploying 802.11n access points: Best practices
SearchNetworking, August 12, 2009

To get the most from 802.11n, APs must be placed, configured, tuned and monitored differently than legacy APs. In this tip, we offer best-practices advice on how to optimize your 802.11n deployment.

http://searchnetworking.com/tip/0,289483,sid7_gci1367751_mem1,00.html
How to plan for 802.11n wireless LAN upgrades
SearchNetworking, September 10, 2009

From greater speed and capacity to real-time application support and mission-critical corporate network access, 802.11n raises the bar for wireless LANs (WLANs). To business benefits, enterprises must invest not only in new AP hardware but also in client device refresh, network infrastructure expansion, updated management tools, and training.

Dave Piscitello's Blog: Security Skeptic

http://preview.tinyurl.com/yf44ne7
Nine ways to mitigate malicious domains
Security Skeptic, October 29, 2009

In collaboration with antiphishing, security, CERT, and financial communities, ICANN has collected a proposed list of measures for new TLD applicants to implement to mitigate malicious conduct involving domain names.

http://preview.tinyurl.com/yz5t6ho
Is office cleaning a proper analog for web security?
Security Skeptic, October 27, 2009

Is web security similar to office cleaning services in that it is a dull and unrewarding task that needs constant attention and often involves fighting against your own management? Dave explains why this characterization falls shy of being sufficient for web security.

http://preview.tinyurl.com/yjkm65r
Is email dying?
Security Skeptic, October 16, 2009

Dave collaborated on this Web Informant post with David Strom: Have we reached the point where email’s influence over our electronic lives is waning? For two generations, email was the killer application. But the properties that made email so attractive for so long are in some circles now considered liabilities.

http://preview.tinyurl.com/yg29ptz
National Cyber Leap Year Summit 2009 - Reports Available
Security Skeptic, September 30, 2009

In August Dave participated in the National Cyber Leap Year Summit 2009, sponsored by the Federal Networking and IT Research and Development Program, the US DOD, and the White House Office of Science and Technology Policy. During this event, participants considered strategies for initiating fundamental or "game" changes in cyber security; their reports are now available.

http://preview.tinyurl.com/yjcdz8t
Internationalizing WHOIS
Security Skeptic, September 23, 2009

Whois must evolve to accommodate internationalization, ideally without creating a Babel effect. On behalf of the ICANN SSAC, Dave wrote a report laying out issues related to the need to internationalize Whois (SAC037). A webinar on this topic and MP3 recording are also available.

-----------------------------------------------------------------

Cornerstone is an electronic publication of Core Competence, Inc. If you do not wish to receive future issues, please reply to this message or send email to cornerstone@corecom.com with the word "remove" in the subject line or message body.

For additional information about Core Competence, visit our web site http://www.corecom.com
For past issues, visit our CornerStone page http://www.corecom.com/html/cornerstone.html
Send us a subscribe message to receive future issues of CornerStone.

To be notified about Lisa Phifer's articles as they are published, follow her news on Twitter: http://twitter.com/lisaphifer

To receive Dave Piscitello's blog as an RSS feed, subscribe here: http://securityskeptic.typepad.com