Welcome to Bank Tech University Day Two. Bank Tech University

Transcription

1 Welcome to Bank Tech University Day Two Presented by Joshua Jacobs Sawyers & Jacobs LLC Bank Tech University 2011 Bank Tech University Day Two Afternoon Session Embracing Social Media Windows 7 Migration Path Wi-Fi Integration Desktops, Laptops, Tablets, or Smartphones? Extend Your Virtual Network 2 1

2 NETWORK MANAGEMENT BEST PRACTICES Presented by Joshua Jacobs Sawyers & Jacobs LLC Bank Tech University 2011 Embracing Social Media Bank Tech University

3 Facebook 6.8% of all URLs accessed by businesses are directed to Facebook 25% of all Internet traffic in the United States went to Facebook Growth is up 60% from 2009 Sources : Network Box and Hitwise 5 Facebook More than 500 million active users 50% of active users login in any given day Average user has 130 friends Over 700 billion minutes spent each month on Facebook Source : Facebook 6 3

4 Facebook Average user connected to 80 community pages, groups, and events Average user creates 90 pieces of content each month Over 30 billion pieces of content shared each month Source : Facebook 7 Facebook Mobile Over 200 million users access Facebook via mobile devices Mobile users are twice as active on Facebook Source : Facebook 8 4

5 Facebook, Twitter, and LinkedIn Facebook and Twitter are being integrated into advertising and promotional campaigns. LinkedIn can be more useful than job ads or even a candidates resume when making a hiring decision. 9 Social Media Serves as a centralized hub between the Bank and the customers. Prosumers offer key insight into products and support for other users. Allow us to see what customers like, criticize, or are indifferent about. 10 5

6 Twitter Category Overview Source: Websense 11 Facebook Category Overview Source: Websense 12 6

7 Beware the Risks 41% of Facebook users willing to divulge personal information to stranger. Freddi Staur (an anagram of ID Fraudster ) invited 200 strangers to friend him. 72% of respondents divulged one or more address 84% listed their full date of birth 87% provided details about their education or workplace 78% listed their current address or location 23% listed their current phone number 26% provided their instant-messaging screen name Source: Sophos 13 Beware the Risks 40% of all Facebook status updates have links 10% of those links are spam or malicious Compare to though: 89.1% of all is spam 14 7

8 Facebook Advertising Highly customizable to target very specific demographics with very ygranular reporting 15 Facebook Ad Reporting 16 8

9 Facebook Ad Budgeting Set spending limits, watch how much is spent per day, ypyp pay per view or per click 17 Windows 7 Migration Path Bank Tech University

10 End of Sales Source: Microsoft 19 End of Support Source: Microsoft 20 10

11 Mainstream versus Extended Support Mainstream Support: Ends 5 years after products general availability or 2 years after successor product is released, whichever is longer. Extended Support: Ends 5 years after products general availability or 2 years after the SECOND successor product is released, whichever is longer. Extended support is only available to commercial users. Source: Microsoft 21 Ready for the Upgrade? 1. Check with all vendors to ensure applications will function in Windows Will all applications and drivers work within the 64- bit version or do you need to install the 32-bit version? 3. Determine how will you deploy Windows

12 Windows 7 Versions Released October 22, 2009 and comes in six flavors Versions banks will deploy include: Windows 7 Professional: XP Mode Ability to join domains 23 Windows 7 Versions Released October 22, 2009 and comes in six flavors Versions banks will deploy include: Windows 7 Professional: XP Mode Ability to join domains Windows 7 Ultimate & Windows 7 Enterprise XP Mode Ability to join domains BitLocker Drive Encryption DirectAccess BranchCache AppLocker 24 12

13 Windows 7 Versions Released October 22, 2009 and comes in six flavors Versions banks will deploy include: Windows 7 Professional: Windows 7 Ultimate & Windows 7 Enterprise Versions banks do not want to deploy on the network: Windows 7 Starter Windows 7 Home Basic Windows 7 Home Premium 25 XP Mode Created to help businesses upgrade their primary OS while still being able to run applications that were never upgraded for Vista or 7 support. Provided as prepackaged virtual machine (will need to install Windows Virtual PC first)

14 BitLocker Uses AES algorithm with 128-bit encryption key by default but setting can be changed to utilize 256-bit encryption key Able to encrypt: Operating System Data Drives, including external drive (BitLocker To Go) 27 BitLocker Using GPO, can require any fixed or removable data drive to be encrypted before being written to. Methods to unlock BitLocker OS Drive: Default is Trusted Platform Module (TPM) chip Startup PIN (Used with our without TPM chip) Startup Key, stored on a USB drive (Used with or without TPM chip) Startup Key & PIN (Used with or without TPM chip) 28 14

15 BranchCache Caches copy of read files on hosted server or compatible clients. Requires: Windows 2008 R2 Windows 7 29 BranchCache Reduces bandwidth usage for file copies and only works for file reads. Security rights aware (will not allow a user to read a cached file they don t have access to)

16 AppLocker Requires Windows 7 Ultimate or Enterprise. Prevent unlicensed software from running in the desktop environment if the software is not on the allowed list Prevent vulnerable, unauthorized applications from running in the desktop environment, including malware Stop users from running applications that needlessly consume network bandwidth or otherwise affect the enterprise computing environment 31 AppLocker Prevent users from running applications that destabilize their desktop environment and increase help desk support costs Help to ensure that the desktop environment is in compliance with corporate policies and industry regulations Create policies i to allow for application i upgrades

17 32-bit versus 64-bit The main benefit to using a 64-bit version of Windows is the ability to access more than 4 GB of RAM. You will notice faster response times while having multiple applications open as well. 33 Windows 7 Upgrade Options There is NO direct upgrade path from Windows XP to Windows 7, you will be reinstalling. You can upgrade Windows 7 from Vista SP 1 or SP

18 Windows Easy Transfer Needs to be run as administrator Exports items in a users profile to external hard drive, network drive, or directly to new computer Can choose which users s to transfer and what items you want to transfer 35 Windows Easy Transfer 36 18

19 Windows Easy Transfer 37 Windows Easy Transfer Be sure to assign unique password to.mig file to keep it from being imported by anyone else. Be sure to ask if items are stored anywhere outside of the users profile

20 Windows Automated Installation Kit Windows System Image Manager (Windows SIM): Used to open Windows images, create answer files, and manage distribution shares and configuration sets. ImageX: Used to capture, create, modify, and apply Windows images. 39 Windows Automated Installation Kit Deployment Image Servicing and Management (DISM): Used to apply updates and drivers to Windows image Windows Preinstallation Environment (Windows PE): Minimal OS environment used to deploy Windows 40 20

21 Windows Automated Installation Kit User State Migration Tool (USMT): Used to migrate user data from previous Windows OS to Windows 7. This is like a large scale Windows Easy Transfer utility. Except not as easy 41 Wi-Fi Integration Bank Tech University

22 Wireless Security Myth versus reality: WEP is extremely insecure and is easily cracked WPA has been cracked WPA2 has been cracked The devil is in the details 43 Expectations Examiners are requesting either wired or wireless access when onsite at your bank. Employees are used to working wirelessly everywhere else. Customers expect wireless access

23 Deploying Wireless First determine your goal. Are you providing full wireless network access? Are you providing Internet only or guest access? Who will be allowed to connect to the wireless network? 45 Guest Access Providing guest access can be as easy as purchasing a $75 dollar WAP and a $50 dollar DSL or Cable connection. Decide if you want to require a WPA key, simply have an I agree to terms page, and/or utilize any type of content filter

24 Network Access Will you deploy a stand-alone WAP, multiple WAPs with a controller, or multiple WAPs without a controller 47 NGFW Some NGFW can act as a wireless controller enabling integration of the wireless network into rules and IPS features

25 Desktops, Laptops, Tablets, or Smartphones? Bank Tech University 2011 The Internet, Bah Newsweek 2/27/95 The truth in no online database will replace your daily newspaper, no CD-ROM can take the place of a competent teacher and no computer network will change the way government e works. you can't tote that laptop to the beach. Yet Nicholas Negroponte, director of the MIT Media Lab, predicts that we'll soon buy books and newspapers straight over the Intenet. Uh, sure. We're promised instant catalog shopping just point and click for great deals. We'll order airline tickets over the network, make restaurant reservations and negotiate sales contracts. Stores will become obselete. So how come my local mall does more business in an afternoon than the entire Internet handles in a month? Even if there were a trustworthy way to send money over the Internet which there isn't the network is missing a most essential ingredient of capitalism: salespeople

26 What does your computer look like? 51 It s about the applications It doesn t matter what your workstation looks like as long as it can perform the functions you require

27 Multiple devices Many users today do not have a single device and but have multiple ways to access various types of data. Laptop with VPN for mobile access to full suite of applications. Smartphone for access to and other limitedfeature applications. Tablet for quick and easy web access, note taking, etc. 53 What is allowed and what isn t? Users on your network are already using them, but do you know how? Have users added access to multiple devices without your knowledge? Have remote access tools like GoToMyPC, LogMeIn, or PocketCloud been installed by end users? 54 27

28 Extend Your Virtual Network Bank Tech University 2011 Desktop Virtualization VMware View provides desktop virtualization on the vsphere platform. (Note: Citrix XenDesktop offers very similar features)

29 Desktop Virtualization Separate the operating system, user data, and applications VMware View Linked Clones Uses a technology called linked clones to create master image for a group of workstations. Can be persistent or nonpersistent (saves user settings or doesn t)

30 VMware View Security & Redundancy Secures all data in the data center instead of on user workstations spread out across the network. Can utilize vsphere High Availability (HA) to provide desktop failover VMware ThinApp Allows applications to be packaged into a single executable file. Upgrade applications once for all users. Run application without administrator rights

31 VMware View Benefits Allow banks to provide reliable backups of user desktops. Provide method to apply operating system and application patches. Extend useful life of workstations ready for a refresh. Provide central platform for server and desktop products. 61 Server Virtualization

32 VMotion Automatically or manually migrate live virtual servers without impacting the end user. Virtual servers are automatically moved to best optimize the available resources (DRS) Bring a server down for hardware maintenance without shutting down a virtual server Storage VMotion Live migration of virtual machine disks across storage arrays without any server downtime. Move machines to a faster storage array to increase performance or move machines to a difference storage array for physical maintenance

33 High Availability Monitors virtual servers for hardware failures. Automatically restarts virtual servers on another physical servers with no user intervention required. Restarts virtual server when operating system failure is detected Fault Tolerance Automatically fails over to redundant virtual machine when the protected machine fails to respond. Automatically creates new secondary virtual machine after failover

34 Data Recovery Deploys as virtual machine and allows disk-based backup and recovery. Allows restoration of individual files or entire images 67 Common Misconfigurations Not using all the features that are licensed High-availability but not turned on Fault tolerance but not enabled for any machines Thin Provisioning not used to conserve SAN space Networks not defined 68 34

35 Summary Social Media isn t going away, work to understand and utilize it. Begin plans to implement Windows 7 by Windows XP end-of-life deadline. Consider implementing secured and controlled wireless access. Enable users to be productive with multiple devices. Implement virtualization into your network. 69 Joshua Jacobs 1085 Halle Park Circle, Suite 101 Collierville, TN (901) Thank you Bank Tech University