JamieMurdock

Profile

JamieMurdock
Member for: 2 years 25 weeks
Contact: Send this user an email

Job Title: IT Security Analyst III

Member for: 2 years 25 weeks

Blog: View recent blog entries

Contribution Stats

Solutions

Forum Threads

Comments

Blog Entries

Ideas

Articles

Videos

Downloads

Events

Group Joined

JamieMurdock's Activity

Show:

New poll 28 Jan 2011

JamieMurdock posted: What is your largest security concern for 2011?

Mobile device security 0% (0 votes) Data loss/ Data leakage 100% (1 vote) Zero day vulnerabilities 0% (0 votes) Malware /Viruses/Trojans, etc. 0% (0 votes) Compliance (PCI/HIPPA/GLBA/SOX/e

discussion comment 18 Jan 2011

JamieMurdock commented on: DLP Response rules

Thank you for the recommendation, however we are in a monitor only mode and dont have network prevent enabled (we're not in-line, but on a spanned port). My main question is if there is any way to filter only outbound incidents in the ...

New forum discussion 18 Jan 2011

JamieMurdock posted: DLP Response rules

I need a solution We have SMTP response rules set up, but do NOT want to receive email notifications on incoming emails that contain flagged content. We are only concerned about outbound violations of policies. There are ways to

discussion comment 12 Jan 2011

JamieMurdock commented on: HTTP Zombie Exploit Toolkit Request

Are you getting the Network Threat Protection alert from SEP that says something to the effect of: HTTP Zombie Exploit Toolkit Request detected. Traffic has been blocked from this application: C:\Program Files\Internet ...

discussion comment 12 Jan 2011

JamieMurdock commented on: HTTP Zombie Exploit Toolkit Request

This seems to be a common domain for the alerts I'm seeing (2 out of 3). Adobe On-line Marketing Suite: 2o7.net and omtrdc.net are domains used by Adobe to help provide portions of its Adobe® SiteCatalyst® and Adobe® ...

discussion comment 12 Jan 2011

JamieMurdock commented on: HTTP Zombie Exploit Toolkit Request

I have seen a number of these as well today. Is there any other inforamtion on this being a false positive. Malware Domain List shows 4 domains that are in there database as serving up Zombie Exploitation Toolkit, the most recent one is from ...

discussion comment 01 Jul 2010

JamieMurdock commented on: Can't import Windows 7 machines in CCS 9.0.1 with 2010-2 update

"Make sure the Remote Registry Service is started on the Machine which you are trying to import." We started the service and the import was successful.

discussion comment 01 Jul 2010

JamieMurdock commented on: Can't import Windows 7 machines in CCS 9.0.1 with 2010-2 update

I'm working with support on this now. I am hoping to hear something today. I'll post it here if I do. Good luck!

New forum discussion 25 Jun 2010

JamieMurdock posted: Can't import Windows 7 machines in CCS 9.0.1 with 2010-2 update

I need a solution We just applied our 2010-2 update and wanted to be able to do a baseline on the CobiT Windows 7 standard. Every time I try to import a Windows 7 machine, the job completes, but with the reconciliation summary

discussion comment 24 Jun 2010

JamieMurdock commented on: CCS 9.0.1 Windows 7 Standard

We just had the 2010-2 update applied and I see the CobiT Windows 7 standard, but that is the ONLY Windows 7 standard. The other ones listed in the document above (■ NIST SP 800-53 Rev. 3 - Security Essentials forWindows 7■ PCI DSS v1.2 - ...

discussion comment 06 Apr 2010

JamieMurdock commented on: CCS 9.0.1 Windows 7 Standard

Thanks for the info, but it's not the client running on a Win7 pc that's the problem. It's importing a Win7 pc as an asset along with getting a CIS Windows 7 standard for baselining, etc.

discussion comment 05 Apr 2010

JamieMurdock commented on: CCS 9.0.1 Windows 7 Standard

I tried my asset import with IP or machine name or DNS name. Any Win7 box I try, it import doesn't import. The same import criteria works with Win XP computers. I may have to wait until May.

discussion comment 02 Apr 2010

JamieMurdock commented on: CCS 9.0.1 Windows 7 Standard

I was going to give that a shot, but I actually cant even import a Windows 7 computer in CCS 9 as an asset.

New forum discussion 29 Mar 2010

JamieMurdock posted: CCS 9.0.1 Windows 7 Standard

I need a solution Is the Windows 7 standard available for CCS 9.0.1? I haven't seen it yet. Thanks! The version 1 CIS standard The version 1 CIS standard for Windows 7 was just released from CIS March 15. I a

New forum discussion 17 Nov 2009

JamieMurdock posted: DLP Servers and Infrastructure

I need a solution I was wondering if others who have implemented DLP have all of these servers. I know it depends on what you have your DLP doing, my main question is has anyone set this up with servers sharing responsibilities.

discussion comment 28 Sep 2009

JamieMurdock commented on: DLP Logging option for Endpoint Agents

Thanks for the input. I have a follow up question... Is there a way to have multiple policy actions? For example, can you have a"SSN' policy that notify only and another to block and then assign endpoint agents to the appropriate ...

New forum discussion 10 Sep 2009

JamieMurdock posted: DLP Logging option for Endpoint Agents

I need a solution Is there a way to log and or alert a file being copied to removable media instead of blocking the file? Yes. You can log any write to a removable drive, such as a USB drive with Application and Device c

discussion comment 28 Aug 2009

JamieMurdock commented on: CCS 8.6 patches/updates

@Vikram Kumar-SAV to SEP Thanks!

New forum discussion 28 Aug 2009

JamieMurdock posted: CCS 8.6 patches/updates

I need a solution If you have missed patches or updates, do you have to apply ALL missing patches/updates or the most recent ones? 1

discussion comment 19 Aug 2009

JamieMurdock commented on: CCS User Guide

I appriciate the link!

JamieMurdock

JamieMurdock's Activity

Technical Support

Symantec.com

Store

Community Stats