10 virtualization tips every administrator should consider

Virtualisation can reduce costs, simplify administration, and enable organizations to get more mileage out of their tech investments. These tips will help you reap those benefits.

Virtualisation has become a necessity for companies of all sizes. From testing sandboxes to production services, virtualization helps businesses get more out of their hardware and do more for their companies than they ever could before. For many companies, this technology is quite new. For others, it's old hat. Regardless of where you fall, virtualization is a vast technology with numerous moving parts. Having the knowledge to get the job done to best suit your needs should be the primary goal for you and your IT staff. With that in mind, here are 10 tips that shouldn't be overlooked by any administrator considering virtualization (or already deep in the trenches of this tech).

1: Plan hardware for virtual capacity

 When you are in the early stages of planning your virtual environment, do not make the mistake of purchasing hardware that can't handle the strain virtualization will put on it. You need to think bigger than usual. Remember, this server might well be hosting numerous virtual machines, so it's going to need the raw horsepower and the space necessary for growth. The last thing you need is to have your host server choke and run out of space for virtual machines. Measure twice, cut once applies. Don't assume a virtual machine will take up little space on that server. And don't assume you'll be hosting only one virtual machine.

2: Keep track of the entire lifecycle of every virtual machine

I've heard of administrators unleashing a virtual machine and leaving it do its thing with little to no monitoring. You need to be keeping track of every one of your virtual machines from birth to death. You should always know how large those VMs have become, the status of their snapshots, how much traffic they are getting, and just about every other piece of information you can get your hands on. It's very tempting to "set and forget" virtual machines, but that is a grievous error and could land you in a world of trouble.

3: Don't virtualize everything

Not everything should be virtualized. That FTP server that gets only internal traffic of maybe a half dozen users? Probably not. Printer server? Probably not. You need to make a specific plan and have sound reasons for everything that is virtualized. The first thing you should ask yourself is, "Why do we need to virtualize Server X?" When you can answer that question with a modicum of certainty, apply that same reasoning to every server you think might benefit from virtualization.

4: Monitor virtual traffic as well as you do non-virtual traffic

Make sure you monitor your virtual traffic as well as you do your non-virtual traffic. Don't be lulled into thinking the virtual hosts are safer simply because you can spin up a snapshot at a moment's notice. That is a false sense of security and should not be considered a substitute for security. But monitoring goes well beyond security. You need to keep abreast of both internal and external traffic to your virtual machines. After a certain period of time, you will know whether specific machines need to be given more resources and whether other virtual machines would be best served as stand-alone.

5: Don't give away virtual resources for free

I've seen it plenty of times: Virtual machines seem to take up so little space and are easily given over to the realm of "free." Don't do this. Don't even migrate a server from stand-alone to virtualized for free. The client needs to understand the benefit they gain from their server being virtualized -- and along with all that comes with virtualization, there is a price. Besides, the technology required for virtualization has a cost associated with it, and sometimes that cost is high. Your organization can't foot that bill alone.

6: Use virtual machines for disposable systems

This might seem a bit strange to some, but there are times when you need a system or service temporarily. There's no better way to supply a temporary service than with virtual machines. Need a temporary FTP server? Virtual machine. Need a temporary print server or Web server? Virtual machine. The nice thing about virtual machines is that they don't cost you the resource of hardware, so bringing a machine to life is quite easy. You could even create specific virtual machines for specific "disposable tasks" and bring them up only as needed.

7: Create virtual machine templates for easy deployment

If you know you'll want to deploy numerous virtual machines based on specific configurations or needs, create a set of templates so that deployment of these machines is as efficient as possible. This can really save you time and effort if you sell a specific service -- say, Web servers -- and sell them often. There's no need for you to constantly reinvent the wheel. Create a template and use it as often as necessary. That time saved is money in the bank for both you and the client.

8: Use "thick provisioning" for disks when performance is key

Most admins will create dynamically allocated disks for their virtual machines. For those VMs that need as much performance as possible, you should allocate thick provisioning. In other words, set an actual size for the disk in the VM configuration. Yes, you will need to make sure you've done the necessary planning to ensure the host machine has enough space to accommodate those thick provisioned virtual machines. But the performance gains you get will definitely be worth the time invested.

9: Install all guest add-ons and virtualization tools

This should be a no-brainer. Most virtual machine tools (like VMware and VirtualBox) offer guest add-ons and other virtualization tools created to improve the experience and performance and to make the communication between the guest and host more seamless. A lot of admins neglect these installations, assuming them to be unnecessary. Install them. Mouse integration, display drivers, guest-to-host time sync, and more can be installed to help make the virtual life a more efficient one. Though they are not required, they do a great job of improving the front-end usability.

10: Keep your host system fully patched at all times

Most assume all the weight is on the guest OS. Although that is true for the virtual machine, the host plays a huge role in this process. The last thing you need is to have your VMs hosted on a vulnerable machine. Sure, if that server isn't hosting a litany of virtual machines, the only thing at risk is a single server's worth of data. But since that server is hosting any number of VMs (some of which could be for clients), the threat of loss is significantly greater. Because of this, you will want to make sure that the host machine is patched up and always secure.

The payoff

At some point, your company is going to want to make the investment in virtual technologies. At that time, you will want to be as prepared as possible. With enough due diligence and work on your part, your virtual machines will save you money, time, and effort -- which, in the end, can make your clients very happy.





10 virtualization tips every administrator should consider - TechRepublic

Rescue a Windows XP installation in Windows 8 with Zinstall XP7

Learn how to get and use Zinstall XP7 to move your Windows XP installation from a hard disk to your Windows 8 system.

A friend of mine got a new Windows 8 system and was running it along side of his old Windows XP box so that he could get used to Windows 8 yet still be able to run his older applications in Windows XP. Everything was going fine with this set up until recently when he called and told me that his Windows XP computer died and wanted to know if I could help him rescue his XP system. After talking with him for a while I discovered that the power supply on the old system had bitten the dust. While the old system would not power on, he said that the last time he used it, the system worked fine and he had shut it down like he normally did. Suspecting that the hard disk was still intact, I told him that we could probably retrieve his data and put it on the new computer. He said that while that would be great, what he really wanted was a way to revive the Windows XP computer. We initially discussed replacing the power supply, but when I told him about Zinstall XP7 and how you could use it to move a Windows XP installation from a hard disk into a virtual environment that could be run in Windows 8, he liked that idea.
Later, we took IDE hard disk out of the old computer, connected it to his new computer via an IDE to USB adapter, and verified that it was still accessible and in good condition. We then used Zinstall XP7 to move the entire Windows XP installation into his Windows 8 system. The entire procedure was very easy and the end result provided such a slick way to switch between operating systems that I thought I should revisit this product and show you how it works in Windows 8. (Back in 2010, I wrote an article about using Zinstall XP7 to perform an in-place migration of Windows XP to Windows 7.)
In this article, I'll show you how get and use Zinstall XP7 to move your Windows XP installation from a hard disk to your Windows 8 system. As I do, I'll explain each step in the procedure.
Note: Even though the product name "XP7" implies a Windows XP to Windows 7 path, it works perfectly in Windows 8.

Overview

Keep in mind that while you can use Zinstall XP7 on two computers and move Windows XP into Windows 8 using a network connection, I am going to cover moving Windows XP into Windows 8 using just the hard disk. Furthermore, while I used an IDE to USB adapter to move my friend's Windows XP installation, on my example system for this article, I simply removed the SATA hard disk from my Windows XP computer and connected it to the second SATA connector in my Windows 8 system.

Getting and installing Zinstall XP7

Zinstall XP7 is a commercial product which sells for $89. You can purchase and download the product from the Zinstall site.
Since I'm going to be moving Windows XP into Windows 8 using just the hard disk, I'll download and install Zinstall XP7 on a Windows 8 system. Once the download is complete, just run the executable file. In a few moments you'll be prompted to enter the serial number you received along with the email address you used to purchase the product, as shown in Figure A.

Figure A 

 

You'll be prompted to enter the serial number you received in order to activate Zinstall XP7.

Performing the transfer

As soon as the installation is complete, Zinstall XP7 will launch and prompt you to identify your migration scenario. Since I am running the program on my Windows 8 system with the Windows XP hard disk connected, I will identify the migration scenario by selecting I only have this PC and the selecting Yes, I am migrating from another hard drive, as illustrated in Figure B.

Figure B

 In this scenario, you select the migrating from another hard drive option.

You'll then see a Zinstall window that will begin searching for the Source and Target computers. When it finds them, the Go button turns green, as shown in Figure C, and you can click it to begin the migration procedure. Here you can see that Zinstall found the 160GB hard disk that contains the Windows XP installation and will migrate it to a folder on my Windows 8 system.

Figure C

 

 

 

 

 

 

When the Go button turns green, you can click it to begin the migration procedure.

The actual migration is a lengthy process involving multiple operations, as shown in Figure D, and can take several hours depending on the size of your Windows XP installation. For instance, my 160GB hard disk took a little over an hour to finish.

Figure D

 

The actual migration is a lengthy process that involves multiple operations.

Working with the two systems

Once you complete the migration step, you'll see a Zinstall icon in the system tray of you Windows 8 system. To access your Windows XP installation, you can just double-click on the Zinstall icon. You can also access your Windows XP installation by right-clicking on the Zinstall icon and selecting the Switch to Guest Desktop command.
When you are in Windows XP, you'll also find a Zinstall icon in the system tray. To go back to your Windows 8 installation, you can just double-click on the Zinstall icon or right-click on the Zinstall icon and select the Switch to Host Desktop command. This process, which Zinstall refers to as switching channels, is illustrated in Figure E.

Figure E 

You can use the Zinstall icon in the system tray to switch between Windows 8 and Windows XP.

You'll also find several shortcuts on your Windows 8 desktop that allow you to initiate the desktop switch and access Windows XP's My Documents folder inside of Windows 8; however, I found both of those shortcuts much more time consuming than simply double-clicking the Zinstall icon and changing to the Windows XP channel.
You'll also discover that Zinstall XP7 places shortcuts to all of your Windows XP applications on Windows 8's Start Screen and each one is prefixed with a Z^ to make it easy to identify. If you find that this makes the Start Screen overcrowded, you can remove all the shortcuts using the Advanced tool.
Right-click on the Zinstall icon and select the Advanced command. When you see the Advanced application, select the Remove shortcuts on Exit check box, as shown in Figure F, and click OK. Then, shut down Windows XP and restart Windows 8. When you get back to Windows 8, you'll see that all of the shortcuts have been removed.

Figure F 

 

You can Remove the Windows XP shortcuts from the Start screen.

To make working with the two systems as easy as working on one system, the Windows 8 and Windows XP environments are fully integrated. This means that you can copy files and text between the two systems just like you copy files between two folders and text between different applications. For example, to copy a file from the Windows 8 environment to the Windows XP environment, just right-click on the file, select Copy, switch to Windows XP, and paste the file.
For larger-scale file copy operations, access your Windows XP environment and go to My Computer where you will find a drive letter Z: under the Network Drives section. When you open it, you will find links to all of the drives on your Windows 8 system as well as a link to the Documents folder on your Windows 8 system.
Network and Internet access is automatically enabled. If Windows 8 has access, so does Windows XP. This works with any kind of connection, wireless included.

What's your take?

Will you use this Zinstall XP7 to migrate your Windows XP system to Windows 8? As always, if you have comments or information to share about this topic, please take a moment to drop by the TechRepublic Community Forums and let us hear from you.

More information

Virtualization has swept through the data center in recent years, enabling IT transformation and serving as the secret sauce behind cloud computing. Now it's time to examine what's next for virtualization as the data center options mature and virtualization spreads to desktops, networks, and beyond.

Also read:

• Get started with Windows 8 Client Hyper-V the right way
• Create a virtual switch in Windows 8 Client Hyper-V
• Run your Windows XP system in Windows 8 with VMware

Rescue a Windows XP installation in Windows 8 with Zinstall XP7 - TechRepublic

Snort :: Home Page

Snort :: Home Page

Infographic: Finding the right security solution for the data center

This infographic from Cisco illustrates the issues that data centers face trying to deploy comprehensive security systems.

By Evelyn de Souza, Security Technology Group at Cisco

Today’s savvy information technology professional wants security tools and understands that protecting your organization is something that opens doors, rather than closes them. The right security solution can move businesses beyond buzzword bingo to a place where they can actually achieve these hoped-for efficiencies.
Many times as InfoSec professionals, it can be difficult to associate security investments with ROI. However, when it comes to data centers, the ROI associated with employing a comprehensive security solution goes well beyond hard numbers. The right security solution can result in avoiding higher costs and consequences stemming from potential data breaches – which are far more damaging in the long run than taking necessary preliminary precautions early.
This infographic from Cisco dives into problems that data centers face today, and how finding the right security solution can make all the difference.

Infographic: Finding the right security solution for the data center - TechRepublic

Breach Detection Systems take aim at targeted persistent attacks

You've just been told to get a Breach Detection System in place. Where do you start? How about a buyer's guide created by an independent test facility?

I’ve been asked how to prevent illicit network penetration enough times to realize an esoteric discussion of the recent advances in intrusion detection and firewall protection is not what’s needed. What is needed is a clear picture of available preventative measures, and which of the preventative measures work as advertised.
Getting up to speed, for me, means paying attention to a certain independent test lab. For the past two years, the people at NSS Labs have been testing how well Breach Detection Systems deal with Targeted Persistent Attacks.

Different terminology

It’s entirely understandable if Targeted Persistent Attacks (TPA) and Breach Detection Systems (BDS) are unfamiliar, or appear to be incorrect acronyms. To get that sorted out, I talked to John Pirc, Research Vice President at NSS Labs and published author. Starting with Targeted Persistent Attacks, I asked John why NSS Labs didn’t use Advanced Persistent Threats (APT) like everyone else. “The truth of the matter is that an APT is sometimes made up of known exploits / vulnerabilities that are not that Advanced; so the term APT doesn't define the action correctly. TPA highlights that the actor is going after a specific target such as company X or an entire industry sector like financial services, and will be persistent in attacking the target”
John also mentioned there was a detailed examination of APT versus TPA in this blog. Next, I asked John why NSS Labs prefers to use Breach Detection System instead of Next Generation Intrusion Prevention System and Next Generation Firewall:
“The BDS, NGIPS, and NGFW products are similar in that all three can contain signatures and heuristics for identifying malware. However, a BDS separates itself from the pack with its ability to analyze the patterns of network traffic, identify malicious domains, and model the behavior/impact of files that are being downloaded and executed on an attack surface.
In some cases, BDS vendors are able to detect zero-day malware at various stages of propagation, and provide remediation. The ability to identify still-unnamed malware on your network is almost like having your own zero-day research team on site.”
BDS technology having proactive capabilities plus remediation is significant. I asked John how that was accomplished:
“What separates BDS from IDS/IPS is detecting unknown malware. Breach Detection Systems, unlike IDS/IPS, have the ability to model malware behavior through emulation and sandboxing or a combination of both. This places BDS at a distinct advantage over IDS/IPS; as they can identify the presence of dropped files, analyze them, determine if they are known bad or unknown bad, and monitor for command and control callbacks.”
Now that we’re on the same page, I’d like to look at how NSS Labs goes about testing Breach Detection Systems.

BDS testing

To start, this excerpt from the BDS Test Methodology paper describes what the testers will be looking for:

• Centralized management of multiple devices.
• Breach detection capabilities using one or more of the following methods:
• Malware identification (signatures, heuristics, or both).
• Network traffic analysis (flow monitoring, content analysis, or both).
• Sandboxing that allows for modeling internal systems (workstations and servers).
• Browser emulation.
• Domain reputation to identify malicious domains.
• Response mechanisms (for example, alerting, session termination).
• Reporting.

The remaining 18 pages of the test methodology report go into intimate detail explaining how the engineers at NSS Labs determine whether a BDS device meets expectations or not.

Test results

At the beginning of this article, I mentioned my reliance on NSS Labs to get a clear picture of this complex technology. To get that clarity, besides reading how NSS Labs tests BDS, I also read their annual Breach Detection Systems Buyer's Guide. The 14-page report is chock-full of analysis and recommendations. For example, here are some overall conclusions of the systems tested this year:

• A BDS is able to detect threats by using a network appliance or stand-alone endpoint, or by using a combination of both.
• A BDS can identify pre-existing breaches as well as malware that is introduced to the system through side channels.
• A BDS that is unable to identify side-channel attacks or command and control traffic from infected machines is little more than a network AV device.
• While high-end network core switches will be capable of supporting most BDS requirements, NSS engineers have noted port-spanning issues with many workgroups switches.

Next NSS Labs offered the following advice for those thinking about purchasing a BDS: “Enterprises looking to deploy a BDS should understand that there are differences in the maturity, technology, and scalability of the solutions that are offered by different vendors.”
Both the paper on BDS test methodology, and the BDS buyer’s guide provide an abundance of information, affording IT pros the opportunity to get familiar with Breach Detection Systems.
Here’s a list of vendors that are offering BDS products.

• Check Point
• Damballa
• Fortinet
• McAfee
• Palto Alto networks
• Sourcefire
• Trend Micro

John mentioned that not all of the above vendors have submitted systems for testing as of this post, and to contact NSS Labs to see if there is a test report on a system you are considering.

Final thoughts

With something as complex as Breach Detection Systems, I’m glad there is such a thing as a buyer’s guide. I’d be nervous having to base a decision on one vendor’s market-speak versus another’s.


Breach Detection Systems take aim at targeted persistent attacks - TechRepublic

Restore Windows 8 with System Image Recovery

In a recent series of blog posts, I've shown you how to use two of Windows 8's new recovery tools, Refresh your PC and Reset your PC. While the Reset your PC tool will allow you to essentially start from scratch and the Refresh your PC tool will allow you to install a new copy of the operating system while retaining your data, you may also want to have a backup of your full system - data and applications - on hand, just in case you encounter a catastrophic hard disk failure.
If so, you'll be glad to know that the tried and true System Image tool still exists in Windows 8 and as long as you have created a system image of your hard disk, you can use the System Image Recovery tool to recover your entire system in the event of a hard disk failure. In other words, if your hard disk goes south, you can purchase a new hard disk and use the System Image Recovery tool to restore your system to the state it was in at the time that you created the image.
Now, keep in mind that for this type of backup to be truly effective, you need to regularly create new System Images so that in the event of a recovery, you will have a recent version of your system.
In this edition of the Windows Desktop Report, I'll show you how to use System Image Recovery tool from the Recovery Drive to restore your hard disk. As I do, I'll also show you how to create a System Image on a set of optical discs.
This post is also available as a Slideshow Image Gallery.

What you need

In order to run the System Image Recovery tool as I'll describe in this article, you'll need to have created a Recovery Drive as I showed you in the article Create a Recovery Drive in Windows 8. You'll also need a set of optical discs or on an external drive on which to create a system image of your hard disk.

 

Creating a System Image

As I mentioned, in order to use the System Image Recovery tool you must have created a system image of your hard disk. As such, I'll begin by walking you through the steps required to create a system image.
To create a system image in Windows 8, you'll start by accessing the oddly named Windows 7 File Recovery window. (Why not just call it File Recovery or Windows Backup and leave it at that?) To do so, use the [Windows] + W keystroke to access the Search Settings page. Then, type Windows 7 File in the text box and click Windows 7 File Recovery, as shown in Figure A.

Accessing the Windows 7 File Recovery tool from the Start screen is easy.[Figure A]

In a moment, you see the Windows 7 File Recovery user interface and you should select the Create a system image command on the left side of the screen to launch the creation tool. On the first screen you will need to choose where you are going to create a system image. For my example, I am going to create the system image on a set of DVD+R discs in the DVD RW drive, as illustrated in Figure B.

 

On my test system, I'll create the system image on a set of DVD+R discs.[Figure B]

When you click Next, you will be prompted to confirm your backup settings, as shown in Figure C. As you can see, in addition to the main partition, the System Reserved partition is also selected to be backed up. On my test system, which is pretty bare bones at this point, the system is indicating that the image will take up 36GB of space. (When the operation was complete, the system image, with compression, only required three 4.7GB DVD+R discs.) When you are ready, just click the Start backup button.

 

On the Confirm your backup setting page take a look at the information presented and then click the Start backup button.[Figure C]

As Windows begins preparing for the operation, it will prompt you to label and then insert the first DVD disc This process is illustrated in Figure D.

 

To get started, insert the first disc and click OK.[Figure D]

Once you insert the blank disc, you'll be prompted to format it. Make sure that you select the Don't ask me again for this backup check box before you click the Format button. The operation will then format the optical media, as shown in Figure E.

 

Make sure that you select the Don't ask me again for this backup check box.[Figure E]

As the backup operation gets under way, you'll see progress indicators letting you know the status of the operation, which includes verification of the media once the backup portion is complete. After each disc is verified, you'll be prompted to insert a new disc. This process is illustrated in Figure F.

 

Creating a System Image on DVDs includes a verification operation.[Figure F]

When the System Image creation procedure is complete, you'll be prompted to create a System Repair disc, as shown in Figure G. However, as you may remember, a System Repair disc is the same as the Recovery Drive and if you have already created a Recovery Drive, you can just click No and you will be notified that the backup completed successfully.

 

In Windows 8, the System Repair disc is the same as the Recovery Drive.[Figure G]

Now that you have a System Image backup, you are ready for an emergency situation.

 

Launching System Image Recovery

In the case of a hard drive failure, you can restore Windows 8 by running the System Image Recovery tool from the Recovery Drive. While I am booting from a USB Recovery Drive, you can just as easily boot the Recovery Drive from the optical disc. (As a part of my research for this article, I ran the System Image Recovery tool after booting from an optical disc and the procedure is basically identical.)
After your system boots from the Recovery Drive and you are prompted to choose an option, select the Troubleshoot tile as shown in Figure H.

 

When you are prompted to choose and option, select the Troubleshoot tile.[Figure H]

When you see the Troubleshoot screen, as shown in Figure I, select the Advanced options tile.

 

From the Troubleshoot screen, select the Advanced options tile.[Figure I]

When you see the Advanced options screen, as shown in Figure J, select the System Image Recovery tile.

 

From the Advanced options screen, select the System Image Recovery tile.[Figure J]

You'll then be prompted to choose the operating system that you want to recover, as shown in Figure K. Now, when performing a system image recovery operation, it seems redundant to have to select the operating system, but you must click the Windows 8 tile to get started.

 

Choose Windows 8 [Figure K]

 

 

 

 

 

 

 

The recovery process

As soon as you click the Windows 8 tile, you'll see the Re-image your computer wizard and the tool will immediately begin looking for media containing the system image, as shown in Figure L.

The Re-image your computer wizard will immediately begin looking for media containing the system image.[Figure L]

When it can't find the system image, it will prompt you to insert a disc. Take note that when restoring from DVD, you must first insert the final disc in the set, as shown in Figure M. The reason being is that when you create a system image, information required by the restore operation is saved on the final disc.

Information required by the restore operation is saved on the final disc. [Figure M]

When you insert the final disc, the Re-image your computer wizard will read the information on the final disc and then display the details of the system image, as shown in Figure N. As you can see, my system image is on drive F, it was created on 2/25 at 11:28 PM, and it is the image for the computer named Jovian-8. When you are ready, just click Next.

When Re-image your computer wizard is ready to begin, it will display the system image details.[Figure N]

You'll then see the second screen of the Re-Image Your Computer wizard, as shown in Figure O. As you can see, this screen provides you with several options. If you are restoring to the same hard disk, you don't need to select the Format and repartition disks check box. (For my example, I selected the Format and repartition disks check box, just to see if that changed the process in any way. Other than possibly adding a little time to the process, the steps and the end result were the same.) If you are restoring to a new hard disk, chances are that the Format and repartition disks check box will be selected by default and will be unavailable. If that is the case, there is nothing to worry about as long as the new hard disk is of the same capacity or greater than the old one.

The second screen in the Re-Image Your Computer wizard provides you with a number of options to choose from.[Figure O]

If you have multiple drives you can click the Exclude Disks button and choose the drive(s) you want to leave untouched. If you click the Advanced button, you'll see a dialog box that will present you with two additional options. An Automatically Restart check box will be selected by default and you'll have the option to enable a disk check operation as a part of the procedure. (Now, if none of the options are available on this dialog box, you may have to install drivers for the disks you are restoring by clicking the Install Drivers button.)
When you click Next, you'll see the confirmation screen of the Re-Image Your Computer wizard, as shown in Figure P. To continue, just click Finish.

To complete the Re-Image Your Computer wizard, just click Finish.[Figure P]

Of course, there is one more confirmation to work through, as shown in Figure Q. Just click Yes to get started.

Just click Yes in the final confirmation dialog box.[Figure Q]

You'll then be prompted to insert the first DVD in the set, as shown in Figure R. Once you do so, just click OK.

Once the operation is set to begin, you'll be prompted to insert the first disk in the set.[Figure R]

In a moment, the restore operation will begin and you'll see a progress bar that keeps you apprised of the status of the restore operation. Depending on how big your hard disk is, the restore operation can take a few hours. As each DVD in the set is restored, you'll be prompted to insert the next one.
When the restore operation is complete, you'll be prompted to click the Restart now button. If you happen to be away from your desk when this occurs, your system will restart on its own, as shown in Figure S.

If you happen to be away from your desk when the restore operation is complete, your system will restart on its own.[Figure S]

When, your system restarts, you'll see the familiar logon screen.



Restore Windows 8 with System Image Recovery - TechRepublic

Five free IT tools available in the Apple App Store

For many years, IT professionals have relied on tools that require a PC or a laptop to run; smaller, more portable devices just weren't available. Now, with the advent of nearly-ubiquitous smart phones and the proliferation of tablets, IT professionals can use these types of devices to test their networks and systems to ensure that things are running properly - and without lugging around a full laptop or heading back to the office to use a desktop.
This blog post is also available as a TechRepublic Photo Gallery.

Sign up for TechRepublic's Five Apps newsletter!

In this edition of Five Apps, I take a look at five free IT tools in the Apple App Store which can be used by IT professionals to diagnose problems with their networks and systems. All of these apps are "universal" apps, meaning that the same version can be used on iPhones, iPads, and iPod Touches.

Five Apps

1: IP Network Scanner by 10base-t Interactive

IP Network Scanner quickly scans the local subnet (by default) returning a list of the systems detected and what their IP and MAC addresses are. Additionally, you can view the manufacturer, give the device a custom name and icon, and use several network tools and additional apps on the device all from the right-side pane. The free version is limited to the first five devices found, but you can adjust the scanning range to catch the group of devices you're interested in. The full version is $9.99 and gives you unlimited devices.

2: Speedtest X HD by VeeApps

A speed test app is another must for IT professionals, and Speedtest X HD does an excellent and beautiful job. Free users get access to a limited number of servers to test against while users upgrading to the full version get access to many more. The gauge is simple and easy to read and the app gives you the typical ping, download, and upload results. VeeApps also offers a non-HD version of their app. Both paid versions cost $0.99.

3: NSLookup by Dayana Networks Ltd.

NSLookup does only one thing, but it does that thing well. Simply enter the domain name and it will return a list of name servers and hosts with IPv4 and IPv6 addresses. The few options available allow you to reduce the number of different types of results and make other minor tweaks. The paid version is $1.99 and appears to just remove the ads.

4: Netstat by James Devenish

Another essential IT app is Netstat. The free version will list all currently-open sockets on the device and give several details about those sockets. The paid version ($3.99) goes a little bit further in allowing you to monitor another device's sockets. You can also buy the connection details module for $0.99. One additional stand-out feature of this app is that it exports the results to CSV which you can then sync to iTunes, open with another app, or send as an e-mail attachment.

5: Remote Desktop Lite - RDP by MochaSoft

Finally, no Windows IT professional would be complete without an RDP app. Remote Desktop - RDP is an easy-to-use Remote Desktop client with many options available for advanced configuration; however, basic configuration is as simple as entering the IP address or hostname. Once you connect to a remote Windows system, you can see, zoom, and pan the screen around as needed and use the built-in iOS keyboard or an external one when you need to type. The paid version ($5.99) gives you additional hotkeys on the screen, better mouse support, and removes the ads.

Your picks

What IT Tools have you used from the Apple App Store? Share your recommendations with fellow TechRepublic members in the discussion forum.


Five free IT tools available in the Apple App Store - TechRepublic

Five must-have portable networking tools

Add these apps to your portable toolkit for network troubleshooting, monitoring, and management.

Having all your tools in one place certainly makes your job easier. This is especially true when you need networking tools. These tools can be anything from simple monitoring tools to full-blown portable servers. Regardless of what you need and why you need it, there are plenty of networking tools that require zero installation and can fit on a USB flash drive.
There are quite a lot of portable apps out there--even within the narrowed scope of networking tools. Here are five handy portable network tools that you can add to your on-the-go toolkit.
Note: This list is also available as a photo gallery.

1: ConnectionMonitoring

ConnectionMonitoring (Figure A) is a simple tool that allows you to monitor incoming and outgoing socket connections. With this connection information at hand, you can see whether any unwanted traffic is coming into a machine. And because this app is portable, you don't have to bother with installing the tool -- you'll always have what you need right there. Connection Monitoring scans current connections and then displays the following: Local address/port, remote address/port, TCP UDP protocol/status of those connections.

2: TCPView

TCPView (Figure B) is like Netstat with a power boost. With this portable tool, you can view a detailed listing and the current state of all TCP and UDP endpoint connections, as well as the process name running each endpoint. This tool also contains a command-line version, Tcpvcon, which offers the same features as Netstat.

 

 

 

3: DNS Benchmark

DNS Benchmark (Figure C) allows you to do exactly what the name implies -- benchmark your DNS servers. You can easily determine whether your nameservers are the cause of your networking problems. DNS Benchmark can monitor up to 200 DNS servers and report on their status. You can use a simple configuration file to configure the specific DNS servers you want checked.

4: Pale Moon Portable

Pale Moon Portable (Figure D) is based on the minimalist version of Firefox but is far lighter in weight and far faster in performance. Pale Moon (the creators of the browser) claims a 25% speed increase over Firefox. However, you will find that some Firefox features aren't in Pale Moon. The major missing features are accessibility and parental control. Otherwise, you can expect a full-featured browsing experience in a very mobile package.

5: EasyPHP

EasyPHP (Figure E) allows you to carry around a complete portable WAMP stack on a stick. This tool is mostly useful for developers, but anyone who needs a portable Web server can benefit from having this available. EasyPHP bundles all the usual WAMP tools (Apache, MySQL, PHP) as well as the PhpMyAdmin tool for managing the databases on the server. You will also find Xdebug to aid in your debugging process.

Other good portable networking tools?

Portable tools don't need to be useless. In fact, they can be some of the most valuable tricks up your sleeve. With this short list of portable networking tools, you can enjoy some serious power and manageability -- at your fingertips.


Five must-have portable networking tools - TechRepublic

New strain of ransomware evades detection by AV apps

Learn about a new type of ransomware that has the potential to snare many victims - and it's not even malware.

Since you’re here at TechRepublic’s website, I’m betting you are familiar with ransomware, and how to avoid being conned by it. The trouble is there are millions of people who aren’t. That alone ensures ransomware will continue to cull people of their hard-earned money. To make matters worse, there’s a new version winding its way through the Internet. And, those in the know predict what’s being called HTML ransomware will be more successful than previous versions.

HTML ransomware

I first learned about HTML ransomware from Jerome Segura, Senior Security Researcher at Malwarebytes, and his blog post, "FBI Ransomware Now Targeting Apple’s Mac OS X Users." Initially, I was suspicious; OS X is not vulnerable in the same way Windows operating systems are, so what’s up?
As I continued reading, I learned the only requirements for HTML ransomware to work are JavaScript must be enabled, and the victim’s web browser incorporates the “Recover browser session after a crash” feature, which is part and parcel to all major web browsers -- including Chrome, Firefox, Internet Explorer, and Safari.
Here’s what HTML ransomware has going for it:

• Does not require installation.

• Disabling JavaScript breaks many popular websites; so people aren’t willing to turn off JavaScript, something the bad guys are relying on.
• AV applications, even with current malware signature sets, are of no use against HTML ransomware.

How it works

One way the scam starts is when an unlucky person selects a search result with a falsified link. Instead of the expected web page being presented, the victim’s web browser loads something similar to the following slide (courtesy of Jerome Seguro and Malwarebytes). 

 

Again, you aren’t fooled, but perhaps less computer-savvy friends and relatives might be.
While the victim is coming to grips with the above screen, associated JavaScript code is loading copies of the same screen (150 typically) onto the browser. By creating a 150 iFrame loop, HTML ransomware gives the impression the computer is locked up. Ironically, if the victim is determined, leaving the web page, and revisiting it 150 times will remove the problem.
I doubt I’d even consider reloading the web browser that many times; my inclination would be to reboot the computer, but that doesn’t help either because HTML ransomware taps into the “Recover browser session after a crash” feature I mentioned earlier, bringing the same FBI screen back up.

It’s not malware

Something else that makes HTML ransomware unique: by most definitions, it’s not malware. It is a snippet of JavaScript code readily available on the Internet that digital extortionists use to fool victims by controlling what is visible in the browser window. No other computer function is affected, at least as of this writing, but Jerome mentioned the potential is there, especially for Windows-based computers.
It not being malware is why HTML ransomware is a great idea for the bad guys: simple to set up, easy to move to different domain names, and no concerns on how to install code onto computers. To see if bad guys agreed, I asked Jerome how many instances of HTML ransomware he has seen?
“This ransomware is quite active; bad guys are registering new domain names several times per day. While it is not malicious (as opposed to ransomware that infects your PC), it’s still scaring people.”

How to tell if it’s HTML ransomware

Web browsers lock up for all sorts of reasons, so I asked Jerome how we would know for sure, if HTML ransomware caused the lockup:
“The browser being locked may not be ransomware in all cases. I can think of many sites that use annoying JavaScripts to keep the user on the page (pop-ups that ask ‘are you sure you want to leave this page?’). HTML ransomware is characterized by the following:

• Warning from the police
• Fee to be paid using a voucher
• Computer or browser locked

"If those three elements are in place, it’s HTML ransomware.”

How to get rid of HTML ransomware

Jerome did a thorough job of explaining how to remove HTML ransomware from Safari in his blog post, but missed explaining what those using other operating systems should do. I asked him what others should do:
“I recommend ending the web-browser process(es) after first having disabled JavaScript. Simply killing the web-browser process will recover the ransomware page and put you right back where you started.”
There is a possibility you may not have to worry about HTML ransomware if your antimalware provider is on top of the situation like Malwarebytes. Jerome explains:
“Malwarebytes has a large database of malicious sites that we constantly update. Our PRO users are protected against malicious websites as they pop up. This is due to our ability to blacklist entire IP ranges since we know they are only used for criminal purposes; any new website registered on those will be automatically blocked.”

Final thoughts

At first, I felt that HTML ransomware was not a big deal. But, it did not take long for me to realize darn near everything we do computer-wise involves the web browser. And, if the web browser appears to be locked up, it will seem like a huge deal.
Since this attack is easy to fix, it would be a shame to have those who do not understand what’s going on even for a second consider paying the ransom. So, please, let’s get the word out on HTML ransomware.
Once again, I owe a debt of gratitude to Rebecca Kline and Jerome Segura of Malwarebytes for helping me sort through the intricacies of HTML ransomware.

New strain of ransomware evades detection by AV apps - TechRepublic