Does your manager have a manager or is he the business owner as frankly I think you're at the point where you either just shut up and live with it, or go over his head. If the person that is in charge has blinders on and you have informed them then you have done your job.
Perhaps a little email exchange with this person as documentation would also be a good idea. Lol, not that crazy yet. But It did drive me to smoke again, I cant promise to be resolved if I run out of Smokes though.
As far as the Gnutella traffic why not just stop it at this access point and see who starts screaming? Is this person the highest point on the chain of command? If they are you may have real issues. If they aren't you must go above their head. That means you will be in a bad position for a time unless you can make it look as though they asked or initiated the go above my head thing.
It is important for an organization to understand that in today's Cyber security setting being an accomplice is the same as being the initiator. Your organization can be charged and fined as well as any of the botnet masters out there. You are in charge of making an effort to keep your environment free of malware. I have seen Law enforcement come in and take all systems from an organization to be used in evidence in an investigation.
That was 8 years ago and that organization still doesn't have its devices and or data that was on them that wasn't backed up remotely and even some of that was seized.
Let the upper management know things like that and maybe they will be a little more understanding in fixing your issues. Sounds like a reasonable solution, One thing Is I don't think anyone internally would be affected most people here don't even know that server exists.
If I were in charge I would do it immediately. I would also remove the public IP. I would really like to know why its even showing up on the graphs. This way, if it is indicative of malicious activity, I can really open some eyes to how horrible certain things have been handled and then potentially get people off their feet to look at other Security Flaws.
Thank Dave, that has been one thing really eating me up. Trying to bring the issue to attention of someone higher up without seeming insubordinate. Problem is, the people I have to go to will usually go to my manager to "Double Check" anything I say Is it really your job to be doing all of the security snooping? As far as the DC, if you have 15 users and computers keep the DC otherwise how do they authenticate?
Is it a workgroup scenario and is the server just used for file and printer services? Not at all my job. But the flaws make my job harder! So I looked for answers and they were pretty obvious. The DC Its more like a homegroup set up in my mind. What I don't get here is if you have a Meraki you have half-decent kit, and if you're going to use an L7 firewall why the hell would whoever manages it and the infrastructure ignore something so blatantly obviously wrong going on?
I can only guess either Lack Of Knowledge but they have been informed or lack of Motivation. They've already convinced the Execs that its not our system causing issues and perhaps cannot back track without looking bad, So also perhaps a Lack of Accountability.
I could speculate for Months Well I brought it up to a bigger head in the company. They are quite intrigued and concerned about the information I provided. So, If you don't hear back from me I am either Fired for insubordination or I will be too busy cleaning up a big mess. Either way, its going to be an uncomfortable week, full of most dreaded confrontations. Cody, the GNU network is used for file sharing and downloading of illegal content.
It sounds like 1 Your servers have been compromised as mentioned in many posts here or 2 Someone internal to your company is using company gear to host files for download. The network is an older type of file sharing, so someone may have thought that it would not be noticed monitoring, or possibly disregarded. You are right to let upper management know of this problem. Make sure that you play CYA so that no one can come up and blame you for this problem.
I have heard many times of someone in IT using company gear to host many different things, from file-sharing to adult content sites. They all were found out, and shown the door promptly. Post your question, comment, or complaint only once. There is no need to express yourself more than once. Duplicate posts will be deleted with little or no warning.
Keep in mind a forum censor may temporarily automatically hold up your post , if you do not see your post, do not post again, it will be dealt with by a moderator within a reasonable time. Authors of multiple copies of same post may be dealt with by moderators within their discrete judgment at the time which may result in warning or infraction points, depending on severity as adjudged by the moderators online.
Posts should have descriptive topics. Vague titles such as "Help! Do not divulge anyone's personal information in the forum, not even your own. This includes e-mail addresses, IP addresses, age, house address, and any other distinguishing information.
Reiterating, do not post your email address in posts. This is for your own protection. Signatures may be used as long as they are not offensive or sexually explicit or used for commercial advertising.
Commercial weblinks cannot be used under any circumstances and will result in an immediate ban. Dual accounts are not allowed. Cannot explain this more simply. Attempts to set up dual accounts will most likely result in a banning of all forum accounts. Video links may only be posted after you have a tally of two forum posts. Video link posting with less than a 2 post tally are considered as spam. Failure to show that you have read the forum rules may result in forum rules breach infraction points or warnings awarded against you which may later total up to an automatic temporary or permanent ban.
Supplying system details is a prerequisite in most cases, particularly with connection or installation issues. Violation of any of these rules will bring consequences, determined on a case-by-case basis. Thank You! Thanks for taking the time to read these forum guidelines. We hope your visit is helpful and mutually beneficial to the entire community.
September 19th, Thread Tools. BB code is On. Smilies are On. Trackbacks are On. Pingbacks are On. Refbacks are On.
Forum Rules. All times are GMT The time now is AM. All Rights Reserved. Add Thread to del. User Name. Remember Me? The Twelve Commandments. Mark Forums Read. Join Date: September 19th, Posts: 1.
Posts: 1, LimeWire can't do anything like that. Posting Rules. LinkBack URL. About LinkBacks. Digg this Thread! Bookmark in Technorati. Tweet this thread.
0コメント