RSS .92| RSS 2.0| ATOM 0.3
  • Home
  • About ArchestrAnaut Blog
  • About Our Authors
  • Email Subscription
  •  

    Anyone using CoreTrace for Whitelisting?

    February 23rd, 2011

    One of my customers came across the CoreTrace Bouncer product for securing your servers.  Put simply it works by allowing only specific EXE’s and DLL’s to run if they have been configured as valid.  This is 180 degrees from blacklisting systems like Anti-Virus who only stop activities if the attacker is on a list of known bad actors.  Seems like a great technology especially on systems where once you get it configured you typically leave it alone.  We’re working on getting it up and running but it’s been a bit painful.  They deliver the app via on OVA package that you are supposed to just import and run.  Well, a little work in Ubuntu and Webmin later we’re finally running.  I’ll have to say that so far I’m a little skeptical, at least as far as the UI goes.  Supposedly the fact that I don’t have a gateway is causing all kinds of problems.  Well, I operate my system in an ultra secure fashion, not connecting to external systems.. obviously I’m not going to have a gateway.  They’ve also chosen to use Silverlight for the UI.  That’s pretty and fancy but how comfortable are you that all the security bugs have been worked out of the technology.

    Anyway, I suspect that once we’re all up and running the technology itself will work great, just getting a little frustrated with the process getting there.  I’ll post an update after we rebuild things this afternoon with the service guy to see how it goes.

    - Andy


    Using .NET in IAS Scripting

    October 29th, 2010

    IAS is as flexible as or more flexible than any other platform out on the market in terms of the breadth of programming possibilities. The concept of inheritance makes it possible to make changes at a template level and all of its children (templates & instances) will be changed too. Equally as powerful is IAS’s inclusion of .NET in their QuickScript language.

    Read the rest of this entry »


    Getting Around Limitations in Logging Alarms

    October 29th, 2010

    Andy & I have always been fairly frustrated with the Wonderware Alarm Logger service.  It almost seems like an afterthought for System Platform (just look at the service name:  New_AlarmLogger).  Perhaps the most frustrating part is trying to integrate it into a system with redundant App Servers.  To the developers:  please integrate this into the System Platform in a future release.

    Read the rest of this entry »