Eng. Alessandro Mazzanti: Monitoring

"Unlike its predecessor the intrusion detection system (IDS) – which is a passive system that scans traffic and reports back on threats – the IPS is placed inline, directly in the flow of network traffic between the source and destination. Usually sitting right behind the firewall, the solution is actively analyzing and taking automated actions on all traffic flows that enter the network. These actions can include:

Sending an alarm to the administrator (as would be seen in an IDS)
Dropping the malicious packets
Blocking traffic from the source address
Resetting the connection
Configuring firewalls to prevent future attacks"

[Original Articles]

https://techgenix.com/ips-intrusion-prevention-system-guide/

https://www.paloaltonetworks.com/cyberpedia/what-is-an-intrusion-prevention-system-ips

https://www.fortinet.com/resources/cyberglossary/what-is-an-ips

Monitoring - SNMP

About SNMP I am taking note about this iteresting Paessler article that well explain some SNMP basics and tool useful to be used with PRTG monitoring tools.

Have a nice reading time:

https://blog.paessler.com/snmp-monitoring-via-oids-mibs

Explore some standard MIB files with a tool that allows you to, like the Paessler MIB Importer (free). Pro tip: If you are a PRTG Network Monitor user, the MIB folder under the installation path of your PRTG instance is a little treasure chest.

Check the capabilities of your own devices. Pro tip: To easily get an overview, you can run an SNMP walk over the main branch OID with a suitable tool, like the Paessler SNMP Tester (free).

ESX - How to enable SNMP ON VMWARE 6.7

During these days I had necessity to enable SNMP community on Cluster ESXi Server 6.7 U2.

Here they are steps that I did for each host:

Enable SSH on each server.
Through command line giving these commands:

esxcli system snmp set --communities ruffinoro
esxcli system snmp set --enable true
Verify Firewall rules and enable traffic:

esxcli network firewall ruleset set --ruleset-id snmp --allowed-all true
esxcli network firewall ruleset set --ruleset-id snmp --enabled true
To restrict IP access to SNMP community to a specific range you might use below commands:

esxcli network firewall ruleset set --ruleset-id snmp --allowed-all false
esxcli network firewall ruleset allowedip add --ruleset-id snmp --ip-address 10.155.0.0/16
esxcli network firewall ruleset set --ruleset-id snmp --enabled true
Start SNMP Service via GUI or command line:

/etc/init.d/snmpd (re)start
Be aware that snmp is case sensitive
Disnable SSH on each server.

Vmware - HP Server HW monitoring

Here it is an easy Vmware document that well explain how to monitor HP Hardware server health in conjunction with HP System Insight Manager:

Management of VMware ESXi on HP ProLiant Servers

https://www.vmware.com/content/dam/digitalmarketing/vmware/en/pdf/techpaper/VMware-ESXi-HPProLiantServers-WP-EN.pdf

Hacker - RDP Brute force attacks and detecting mode

Here it is an interesting Microsoft article that discuss about RDP Brute force attacks on systems that has RDP port published on internet. Focus is detecting this attack types.

https://www.microsoft.com/security/blog/2019/12/18/data-science-for-cybersecurity-a-probabilistic-time-series-model-for-detecting-rdp-inbound-brute-force-attacks/

Pay attention to these article sections information:

"...In the Windows operating system, whenever an attempted sign-in fails for a local machine, Event Tracing for Windows (ETW) registers Event ID 4625 with the associated username. Meanwhile, source IP addresses connected to RDP can be accessed; this information is very useful in assessing if a machine is under brute force attack. Using this information in combination with Event ID 4624 for non-server Windows machines can shed light on which sign-in sessions were successfully created and can further help in detecting if a local machine has been compromised...."

"....on. While Microsoft Defender ATP already has many anomaly detection capabilities integrated into its EDR capabilities, which enrich advanced threat protection across the broader Microsoft Threat Protection, ...."

Monitor - 40 monitoring Network & Server Tools

Today I would like to merge old articles and indicate other Monitor tools:

PRTG monitors is freeware using up100 sensors.
https://www.it.paessler.com/
From my experience it work fine with all devices such switches, Firewall, client, Server, Hypervisors, SNMP devices and so on.
An interesting tips is installing different PRTG istances on different servers (bypassing 100 sensor free limits) using PRTG client software that permit you to have single management console, without having necessity to purchase license.
SolarWinds All Free Network/System/Security/DB/clients monitoring tools
https://www.alessandromazzanti.com/2018/11/freeware-solarwinds-software-free-tools.html
MAP Toolkit 9.8
https://www.alessandromazzanti.com/2018/03/server-map-toolkit-98.html
Veeam One
https://www.alessandromazzanti.com/2017/05/monitor-veeam-one-free-edition-95.html
Naemon Monitoring Server
https://www.alessandromazzanti.com/2017/03/monitoring-naemon-monitoring-server.html
OpManager is an excellent monitoring platform, I used during these years and is free to monitor up to 10 devices:
https://www.manageengine.com/network-monitoring/
https://www.manageengine.com/network-monitoring/download-free.html
AD Lockout Monitoring tool (such as Netwrix, Microsoft tool....)
https://www.alessandromazzanti.com/2016/10/ad-lockout-events-on-domain-controller.html
Scripting - Monitor disk space, cpu load, memory and send html report through email
https://www.alessandromazzanti.com/2016/06/scripting-monitor-disk-space-cpu-load.html
AD health check with Powershell
https://www.alessandromazzanti.com/2016/06/monitoring-ad-health-check-with.html
Exchange 2010 - How to monitor Exchange Health
https://www.alessandromazzanti.com/2016/05/exchange-2010-how-to-monitor-exchange.html
Exchange 2013 - How to monitor it with powershell command
https://www.alessandromazzanti.com/2015/06/exchange-2013-how-to-monitor-it-with.html
Exchange - Microsoft Exchange Server User Monitor
https://www.alessandromazzanti.com/2012/10/exchange-microsoft-exchange-server-user.html
Monitor Wall Board for IT Rooms, tools and tips:
https://www.alessandromazzanti.com/2016/03/monitoring-virtualwin-with-autoswitcher.html
How to monitor website (for free) via email/smshttps://www.alessandromazzanti.com/2016/01/monitoring-how-to-monitor-website-for.html
Netwrix Tools auditing, security and monitoring
https://www.alessandromazzanti.com/2015/09/security-netrwrix-tools-auditing.html
Netwrix Auditor:
https://www.netwrix.com/auditor.html
True last logon to monitor AD
https://www.alessandromazzanti.com/2015/09/security-true-last-logon-to-monitor-ad.html
2012 R2 Server - Install SNMP and enable monitoring
https://www.alessandromazzanti.com/2015/06/2012-r2-server-install-snmp-and-enable.html
2012 Server - How monitor 2008 server on 2012 dashboard
https://www.alessandromazzanti.com/2014/09/2012-server-how-monitor-2008-server-on.html
Utility that lists computers and devices connected to your network
https://www.alessandromazzanti.com/2013/11/server-new-utility-that-lists-computers.html
NetTools
https://www.alessandromazzanti.com/2012/10/programma-nettools-per-monitorare-la.html
Zenoss Monitor solution:
https://www.zenoss.com/get-started
https://www.zenoss.com/product/unified-monitoring
https://www.alessandromazzanti.com/2012/09/network-disponibile-zenoss-core-42.html
JFFNMS - Just For Fun Network Management System is written in PHP Language Devices are continuously polled, or JFFNMS can collect events from SNMP traps and syslog messages. The web GUI displays the status of the devices’ interfaces as well as report on rolling statistics, such as error counts or traffic on an interface.
Here they are some interesting features like * TFTP Configuration Download and Archival (Cisco IOS & CatOS) and screenshots
LogicMonitor
https://www.alessandromazzanti.com/2012/05/server-prodotto-cloud-di-monitoraggio.html
Spiceworks Network Monitor & Cloud Cost monitor
https://www.spiceworks.com/free-network-monitoring-management-software/?utm_medium=internal&utm_source=community_tools&utm_campaign=%20community_tools
https://www.alessandromazzanti.com/2012/04/server-spiceworks-programma-gratuito.html
Vmware ESXi Monitoring
https://www.alessandromazzanti.com/2012/03/vmware-esxi-monitorare-un-server-vmware.html
HyperV - how to monitor 80 functionlaity with script
https://www.alessandromazzanti.com/2012/03/hyperv-it-does-pretty-much-what-it-says.html
Server - Folder monitoring
https://www.alessandromazzanti.com/2011/09/server-monitorare-una-cartella-di-un.html
OMD Labs-Edition
https://labs.consol.de/omd/
Nagios XI, Enterprise Server and Network Monitoring Software https://www.nagios.com/products/nagios-xi/
Nagios Network Analyzer
https://www.nagios.com/products/nagios-network-analyzer/
AD monitoring Tool (Dovestones)
https://dovestones.com/download/
The Dude automatically scan all devices within specified subnets, draw and layout a map of your networks, monitor services of your devices and alert you in case some service has problems.
https://mikrotik.com/thedude
NetXMS Open-source network and infrastructure monitoring and management system
https://www.netxms.org/
Total Network Monitor
https://www.softinventive.com/total-network-monitor/
10-Strike Network Diagram - Software for Creating and Drawing Topology Diagrams
https://www.10-strike.com/network-diagram/
Multi Router Traffic Grapher (MRTG): Open source Round Robin Database (RRD)–based network monitoring and graphing tool used to show current and historical information about network devices, specifically router and switch interface statistics. This tool is freely available from oss.oetiker.ch/mrtg/index.en.html.
WhatsUp Gold: Ipswith’s network-device monitoring tool, which is capable of discovering network devices, tracking system health, and receiving Simple Network Management Protocol (SNMP) trap and Syslog data. Ipswitch provides a 30-day evaluation of the product, whose price starts around $1,500 for the ability to manage 25 devices. Check out their website at www.whatsupgold.com.
Cacti: Open source RRD–based network monitoring and graphing tool. If you have used MRTG but wanted something a little flashier or geared towards other types of devices, then Cacti may be for you. Cacti makesit easier to add devices such as servers to your monitored devices list. As with MRTG, this tool is freely available, and you can find it for downloadon their website, www.cacti.net.
Xymon Monitor (formerly Hobbit Monitor): Open source–device monitoring and alerting tool, as shown in Figure 2-4, that displays current status information for network devices. Like Cacti and MRTG, Xymon is capable of gathering a wide range of information about your devices and offers historical information on those devices in the form of RRD–based charts. One difference with Xymon lies in its ability to send out alerts to configured users in the event that certain conditions have been met, such as a device has gone offline for more than 5 minutes or free disk space on a server has dropped below 100 MB. You will find Xymon on itsSourceforge page at xymon.sourceforge.net.
NetFlow: A Cisco Internetwork Operating System (IOS) component that collects and measures data as it flows through switch and router interfaces. While NetFlow on a switch or router collects data, it does not provide any of the analytical functions. For analytics, you will require a NetFlow collector.
Cisco NetFlow Collection Engine: Cisco’s NetFlow gathering and analysis tool that collects NetFlow data from network devices and allows for centralized analysis of the data. This data can be analyzed across the network to ensure that application data is passing over the network in a manner that is appropriate to the application. For example, you could use this tool to ensure that a business-critical accounting system is not being impacted by users watching YouTube videos. You can get more information about the NetFlow Collector Engine from www.cisco.com/en/US/products/sw/netmgtsw/ps1964/index.html, but this product comes with a price tag in excess of $16,000.
Splunk: Log Analyzer
https://www.splunk.com/it_it

[Update 2024.01.25]

Zabbix: https://www.zabbix.com/

Freeware - SolarWinds All Free Network/System/Security/DB/clients monitoring tools

Today I would like to mention several SolarWinds Free tools.

They have limited options against full versions but have interesting features useful for day by day System and Network administration tasks/monitoring/troubleshooting.

System Administrations tools

Solar-PuTTY Connect to any server or device in your network with Solar-PuTTY for Windows. This is an interesting Putty or PuttyCM alternative.
VM Monitor Hyper-V: monitors your VMware vSphere or Microsoft Hyper-V host and associated virtual machines in real-time.
Server Health Monitor Monitor the health, status, and availability of server hardware.
Exchange Monitor Monitor and alert on performance, availability, and capacity of your Microsoft Exchange servers.
Remote Execution Enabler for PowerShell Streamline PowerShell tasks across all of your servers.
Admin Bundle for Active Directory Keep your Active Directory tidy with this trio of management tools
Permissions Analyzer for Active Directory Get instant visibility into user and group permissions.
VM Monitor Continuously monitor a VMware or Microsoft Hyper-V host and associated virtual machines.
Diagnostic Tool for the WSUS Agent Test WSUS connections and validate Windows Update Agent configuration.
Web Transaction Watcher Easily record and capture the results of a single web transaction.
WMI Monitor Monitor real-time performance metrics on Windows servers and applications.
SNMP Enabler for Windows Remotely configure SNMP on Windows servers and workstations.
VM Console Bounce problematic VMs without ever logging into VMware vCenter.
Storage Response Time Monitor Track your sluggish VMs and pinpoint exactly where you have high storage latency.

Security and various tools

Free IT Security Tools: Manage all end-user trouble tickets and track service request lifecycle, from ticket creation to resolution, from one centralized help desk management web interface.
Event Log Forwarder for Windows Forward Windows events based on event source, event ID, users, computers, and keywords in the event to your syslog server in order to take further action.
Firewall Browser Verify firewall rule changes and perform unlimited configuration searches.
Event Log Consolidator Consolidate logs from up to five Windows servers or workstations Graph events over time to find patterns and troubleshoot issues Send desktop alerts for specific events or export events to CSV.
Free IT Help Desk Tools Manage all end-user trouble tickets and track service request lifecycle, from ticket creation to resolution, from one centralized help desk management web interface.
Database Performance Analyzer Free Reveal performance bottlenecks deep inside your SQL Server, Oracle, DB2 and SAP ASE instances. No other database monitoring tool focuses on response time and Multi-Dimensional Performance Analysis™ like DPA does.

Network Management Tools

Traceroute NG Perform accurate network path analysis.
Port Scanner Scan available IP addresses and their corresponding TCP and UDP ports to identify network vulnerabilities.
Network Device Monitor: it work on any devieces with snmp credentials enabled there
NetFlow Configurator Quickly and easily activate NetFlow on your network devices with NetFlow Configurator.
GNS3 Network Emulator Construct and test your network in a risk-free virtual environment.
Real Time AppFlow Analyzer Investigate, troubleshoot, and quickly resolve application and network slowdowns.
Response Time Viewer for Wireshark Quickly analyze Wireshark® packet capture files to troubleshoot performance issues.
Network Analyzer & Bandwidth Monitoring Bundle Monitor network bandwidth usage with our free network analyzer and bandwidth monitor.
TFTP Server Free TFTP server for reliable and secure network file transfers.
IP Address Tracker Scan, track, and manage IP addresses and obtain detailed IP histories and event logs.
Real-Time Bandwidth Monitor Keep a close eye on bandwidth usage with this free bandwidth monitor from SolarWinds.
Real-Time NetFlow Analyzer See what types of traffic are on your network with SolarWinds free netflow analyzer.
Call Detail Record Tracker The free SolarWinds tool that lets you monitor VoIP performance.
Network Configuration Generator Automatically create template-based configuration scripts for network devices.
IP SLA Monitor Analyze IP service levels for network-based apps and services with our free IP SLA Monitor.
Advanced Subnet Calculator Help ensure that your IP addresses don’t conflict with one another, and save time managing DHCP, DNS, and IP addresses.
Wake-On-LAN Power up your network PC remotely.
Kiwi Syslog Server Free Edition View and archive syslog messages and SNMP traps in real time.
FTP Voyager FTP Client for Windows FTP, FTPS, and SFTP secure file transfer and automation with a full-featured scheduler.
SFTP/SCP Server Free SFTP server for reliable and secure network file transfers.

Server - MAP Toolkit 9.8

Today I would like to mention the new MAP Toolkit version 9.8 availability.

This is a tool that helps organization:

Assess their environment.
To have software reporting status to generate usage report
Track usage (O.S. & Sw) and preparing a migration to Windows Azure virtual machines.
It helps increase the agility and cost effectiveness of deploying the latest Microsoft technologies

Here they are sw/o.s. that apply it:

Exchange Server 2016.
SharePoint Server 2016.
Windows 10 and previous versions
Windows Server 2016 and previous versions.
Office 2016, Office 365 and previous versions.
It track usage of Windows Server 2012, SharePoint Server 2013, and Exchange Server 2013,

Download and more details could be find here.

Here they are some screenshots:

Monitoring - PRTG monitors freeware version until 100 sensors

I would like to mention this monitoring tool that is free up to 100 sensors to be monitored.

https://www.it.paessler.com/

Meanwhile you can review this blog sections about monitoring argument and related past published articles.

http://www.alessandromazzanti.com/search/label/Monitoring

Monitor - Veeam One free edition 9.5

In blog monitor section you can find several monitor tools/way.

http://www.alessandromazzanti.com/search/label/Monitoring

Other than that today I would like highlight again Veeam One free edition tool (obviously paid version is better but just to start) useful to monitor entirely Vmware/HyperV infrastructure is really a good beginning.

https://www.veeam.com/virtual-server-management-one-free.html

Product Overview Veeam ONE: Free vs Paid What's New in 9.5 (ONE)

DOWNLOAD FREE

Free forever – unlimited VMs

Following you can review some screen shots, consider that this product has several features, most important and straights are real time dashboard, statistician and report capability (for historian purpose and view top VM/hosts/ram/disk massive usage), real time alerting..
it can monitor Veeam Backup&Replication infrastructure with single backup job monitoring in conjunction with any other related issue.

Gain Your business actual status overview:

Building custom reports

Monitoring - Naemon Monitoring Server

Naemon is new monitoring suite that permit to give you a clear view of the state of your network and applications.

This is a replacement for nagios server, stable and that uses a dashboard called thruk.

Here it a tutorial that will use four Servers

192.168.1.170 - Naemon Server - centos 7
192.168.1.21 - nrpe client - centos 6
192.168.1.182 - nrpe client - ubuntu
192.168.1.75 - nscp client - windows server 2012R2

Tutorial

https://www.howtoforge.com/tutorial/how-to-install-a-production-ready-naemon-server/

AD - Lockout events on domain controller

About lockout users here they are Security AD Events:

- 4625 and 4771 on Windows 2008

- 529 on Windows 200X.

- 4740 If you have more than an account that usually lockout to better investigate this kind of problem you can have this information from the Security Log of your Domain Controller. If you have more than 1 DC, you can check each of your DC for Event ID 4740 (it's an information). In this Event Log, you will have the computer name of the logon request.

- See event ID 4767 for account unlocked.

You can use this eventviewer filter on each dcs:

Account Lockout and Management Tools

https://www.microsoft.com/en-us/download/details.aspx?id=18465

Netwrix Account Lockout Examiner Freeware Edition

https://www.netwrix.com/download.html?item=DD4D0C63-434E-4f76-9AF5-7AA7EBAEEAAE

About Exchange IIS logs repository (in case you suspect owa/activeSync/Rpc over http lockout problems) you must examine

C:\inetpub\logs\LogFiles\W3SVC1 8.26.20 Apple-iPhone8C2

RPC over HTTP

C:\Program Files\Microsoft\Exchange Server\V14\Logging\RPC Client Access

CAS:	%ExchangeInstallPath%Logging\HttpProxy\Mapi\HTTP
Mailbox:	%ExchangeInstallPath%Logging\MAPI Client Access\
Mailbox:	%ExchangeInstallPath%Logging\MAPI Address Book Service\

About other blogs articles:

Security - Netrwrix Tools auditing, security and monitoring

Security - Netrwix tool about lockout account and relative alerting

Server – Ruoli domain Controller Windows 200X Server

Firewall - Fortinet how to enable Email alerting on Fortigate FW

If you need to enable email alerting in your fortigate firewall you simple need to review this youtube video that clearly explain configuration.

Here is fortigate 5.4 manual:

http://docs.fortinet.com/uploaded/files/2915/fortigate-cookbook-54.pdf

Scripting - Monitor disk space, cpu load, memory and send html report through email

Here they are some scripts that monitor CPU, Disk Drives space and others:

1.) Powershell Script to Get CPU,Memory and C Drive utilization(Server Health Check)

a simple powershell script to get CPU Load, Memory utilization and C drive Utilization for a list of servers from a text file. So, this script takes servers from a text file and the result will be displayed in a HTML file and Sends email.

https://gallery.technet.microsoft.com/Powershell-Script-to-Get-78687c5e

https://gallery.technet.microsoft.com/scriptcenter/PowerShell-Script-Sample-f7164554

2.) Disk Space monitoring

a simple powershell script to get CPU. Memory utilization and C drive Utilization for a list of servers from a text file and the result will be displayed in a HTML file and sends email to your mailbox. I Feel It will be useful if you add this as a schedule task and run peridoically, it just reports you with the status to your email.

https://gallery.technet.microsoft.com/fd4f5235-1a80-41ed-87e2-189278fd376c

3.) PowerShell script to report free disk space on servers

script calculates free disk spaces in multiple servers (from a text file) and emails copy of csv report. The script is designed to report only servers with less than 10% free space. Customization info provided. Please rate, leave comments and ask questions.

This PowerShell script calculates free disk spaces in multiple servers and emails copy of csv report. The script is designed to report only servers with 10% or less free space. If you wish to report all free disk spaces, please comment out the following lines in the swcript: #Where-Object { ($_.freespace/$_.size) -le '0.1'} - This is found directly beneath the Get-WmiObject win32_logicaldisk command (Around line 50).

https://gallery.technet.microsoft.com/scriptcenter/PowerShell-Script-Sample-f7164554

4.) Monitoring and reporting free disk space and the critical services

This script is designated to collect free disk space on your logical drives and state of some Windows services using PowerShell cmdlets.Also, this script will use local or remote SMTP Server to send the report via e-mail.You can modify srvArray variable to monitor more services.

https://gallery.technet.microsoft.com/PowerShell-and-reporting-3dba70fc

5.) DiskSpace Monitoring

It's an improvement from the original Nag Pal's script

It will retrieve the letter, size, free space (GB), free space (%) from every volume on each server on the server list, and will mark in yellow if the free space is under 20% and in red if it under 10%.

The result file includes the date and also the heeder inside the file.

The improvements were made to include the date and to avoid errors where a server can’t be reached.

https://gallery.technet.microsoft.com/cc8176ab-348b-4152-b9a3-25b6ad950d3e

6.) CPU utilization and notify on a threshold breach

Here is a simple powershell script which will take a list of servers as input, monitors CPU load and sends email notifications incase of threshold breach(which is set in script). You may need to configure this script in scheduled task for continuous monitoring.

https://gallery.technet.microsoft.com/Powershell-script-to-11b10872

<------------>

Otherwise if you review this old post:

http://www.alessandromazzanti.com/2015/09/security-netrwrix-tools-auditing.html

There should be available these netwrix tools:

SYSTEMS MANAGEMENT TOOLS

Netwrix Disk Space Monitor: Be alerted in real-time via email when disk space falls below certain thresholds on one or more of your servers.

Download >

Netwrix Event Log Manager: Collect, alert and report on events from the Windows servers across your network.

Download >

Netwrix Service Monitor: Monitor services on multiple servers simultaneously and be alerted via email when one or more services stop unexpectedly. Optionally, automatically restart monitored services ensuring maximum uptime.

Monitoring - AD health check with Powershell

There is an interesting powershell script, on microsoft website, that can be easily scheduled.

It run various AD checks and finally it send an email in html format (and so easily viewable)

It can be schedulet everty tot minutes about iteratively infrastructure check:

AD - Daily Health Check Automation

https://gallery.technet.microsoft.com/AD-Daily-Health-Check-3d0932db

Here is an alternative script:

https://gallery.technet.microsoft.com/scriptcenter/Active-Directory-Health-709336cd

Server - MMC customization and add Taskpad

To manage server you need to use mmc snapin.

Remote Server Administration Tools for Windows 7 with Service Pack 1 (SP1)

2012 Server – RSAT anche in 2008 R2 SP1 e 2008 SP2

Windows 10 - Remote Server Administration Tools for Windows 10

But there is an interesting feature that give you opportunity to link any script in mmc to launch them for remote monitoring/tasks.

Here is relative screenshot that well explain concept.

For example if you like to execute remote dcdiag or repadmin /summary on remote dc you can use them in conjunction with psexes and these diagnostic AD tools/commands:

Scripting - Eseguire comandi remoti sui pc in rete con PSEXEC

Scripting - Eseguire .vbs ed installazioni programmi su pc remoti in un dominio o un workgroup con PSEXEC

PSexec - How to execute remote commands about .vbs, .exe, microsoft patch installation...

Ad test:

Server – Effettuare il test di AD

Server - Commands to verify Domain Controller/Domain Status, schema version, move 5 PDC roles, export DHCP

PSexec - How to execute remote commands about .vbs, .exe, microsoft patch installation...

Here is article that explain mmc customization process

http://social.technet.microsoft.com/wiki/contents/articles/2816.how-to-create-custom-mmc-and-add-taskpad.aspx

Eng. Alessandro Mazzanti

Pagine

Monitor #PRTG how to migrate server

Monitoring - LibreNMS

Monitor - Syslog using PRTG or Kiwi Syslog Server

Security/Hacker/Antivirus - Worms definition term

Firewall/Security - IPS ( Intrusion Prevention Systems ) overview