qtslogo10.gif (7142 bytes)
ad1.gif (2831 bytes)
hvl_home.gif (1239 bytes) hvl_about.gif (1244 bytes) hvl_techres.gif (1285 bytes) hvl_customers.gif (1285 bytes)
hvl_stay.gif (1256 bytes) hvl_contact.gif (1236 bytes) hvl_sitemap.gif (1230 bytes) hvl_jobs.gif (1261 bytes)
May 2006  

Volume 6 Issue 5

June 2, 2006

To view this update as a Web page, copy this link into your browser: http://www.qtsnet.com/stayinformed/quiknews/quiknews may2006.htm.

To subscribe or unsubscribe, please follow instructions at the bottom of this page.

Welcome to the May edition of QTS QuikNews, our monthly e-mail newsletter. In this monthly e-mail, you will receive an update of what's new at QTS - new products we support, new patches and upgrades, solution ideas and promotions to save you money, and information about our company and our clients.

In this issue:

  • QTS and Partner News
  • Events
  • President's Corner
  • QuikSecure Tip of the Month
  • Patches and Upgrades
  • Product Support Lifecycle Watch
  • Solution Spotlight
  • Special Offers
  • Partner Spotlight

QTS AND PARTNER NEWS

WELCOME TO NEW CUSTOMERS
QTS offers a “welcome aboard” to the following new customers:

·         Brother International Corporation

·         Khronos LLC

QTS IS HIRING!
QTS is recruiting for senior and mid-level technical personnel, as well as an entry to mid-level sales/service specialist.  If you know anyone who might be a good fit, please have them submit their resume to Liz Meechan, our Office Manager. Liz can be reached at lmeechan@QTSnet.com, or (973)984-7600 x223.

PRESS RELEASES

QTS ACHIEVES MICROSOFT INFORMATION WORKER COMPETENCY AS GOLD CERTIFIED PARTNER
6/1/2006: QTS today announced that as a Gold Certified Partner it has completed the requirements for the Information Worker Competency under the Microsoft Partner Program.  This is QTS' fourth competency certification, on top of QTS' current competencies for Network Infrastructure, Advanced Infrastructure and Security Solutions.  Read more at http://www.QTSnet.com/stayinformed/l3_stay_pr66.htm

Back to Top

PRODUCT NOTICES AND ADVISORIES

MICROSOFT OFFICE REBATE
Customers who purchase Microsoft Office 2003 Professional through an Open License or Open License Value program by June 30th may be eligible to receive up to $125 per license as a rebate from Microsoft.  See https://www.microsoftincentives.com/officeopenrebate/ for more information, or contact your QTS Account Manager.

TERMINAL SERVICES CAL TRADE-UP EXTENDED!
Due to a change in the way Microsoft licenses Terminal Services as of April 2003, customers may be eligible for free Terminal Services Client Access Licenses (CALs).  With the release of Windows Server 2003, the “built-in” CALs under Windows 2000 were eliminated.  However, customers owning Windows XP Pro receive a free Terminal Services CAL for each XP license.  This offer has been extended, but we strongly recommend processing this promptly.  For more information, visit http://www.microsoft.com/windowsserver2003/ howtobuy/licensing/tscaltransfaq.mspx.

Back to Top


PRESIDENT'S CORNER

Following up on last month’s column on Office 2007, this month I would like to spend some time discussing Windows Vista, the upcoming new release of the Windows operating system.  Windows Vista is the replacement to Windows XP on the desktop – the server version of Windows, code named “Longhorn,” is targeted for release in the second half of 2007, whereas Windows Vista will be available for electronic download late this year (the current target is November), with retail and OEM availability in January. 

QTS has four customers participating in the Windows Vista Technology Adoption Program, and our engineers are just now starting to work with the recently released Beta 2 code.  We will be deploying Windows Vista Beta/Release Candidate code in production at these clients, working with Microsoft to test for application compatibility and to use the newest version of Microsoft’s Business Desktop Deployment Solution Accelerator – Microsoft’s tools for imaging, application compatibility and migration.  Based on our early experience, and the feature set we are seeing, we are very motivated to see the Windows Vista product launch and become generally available. 

Windows Vista brings a number of key benefit areas to the table.  Microsoft’s messaging around the product is centered around three core tenets – Confident, Clear and Connected.  Confident refers to the enhanced reliability and security of the operating system – an area where Vista brings major improvements to an already solid Windows product.  Clear is about finding and organizing information – Vista presents a much more intuitive way to find, browse and view files, as well as strong search technology which works on its own but also integrates with Windows SharePoint Portal Server on the back-end for enterprise search capabilities.  Connected is about supporting a broader range of integrations and networking support, particularly around mobility and notebook/tablet support. 

To me, the most significant improvement area, and the most compelling upgrade point, is around Security.  At the top of this list is the new User Account Control (“UAC”) feature, which allows us to restrict users to basic rights on their computers.  Most of us are used to having to give users Administrator rights on their system to make at least some applications work, which is a very vulnerable posture from a security perspective since if the user is logged in as an Administrator, then malicious code can execute at that rights level and cause significant damage.  By restricting users to “user” level rights for most tasks, and allowing for escalated privileges when specifically needed, the security risks on the desktop platform are significantly lowered.  What used to take massive work in prior versions of Windows, to the extent it was even possible in some environments, is now the default in Vista. 

However, there are other significant security enhancements in Vista.  Group Policy controls have been significantly expanded – there are over 3000 Group Policy options in Vista, versus roughly 1200 in Windows XP, allowing for much more granular control and lockdown of Vista computers.  Furthermore, one of those features allows you to lock down USB ports to prevent or control “thumb drives” and the exposure that is possible by copying significant amounts of data to small, easily removable devices.  Some organizations have resorted to “epoxy” (glue) to render USB ports un-usable for this very reason, so locking down the ports via Group Policy accomplishes the same objective in a less permanent way (Microsoft therefore refers to these policy items as “epoxy” settings).  Vista also allows for encryption of data partitions on PCs (the “BitLocker” feature  available in the Enterprise Edition of Vista), to deal with the growing problem of notebook theft and risk of data loss – this leverages a PKI/Certificate Services infrastructure for key management, and is Active Directory integrated (and also requires significant planning to do this properly).  Internet Explorer version 7 has been enhanced, particularly with new anti-phishing technologies and additional security controls.  Patch management has also been improved and enhanced, and anti-spyware and some antivirus capabilities are now built into the operating system. 

The new user interface is a visible, obvious area of change.  The basic version of Vista will have a more refined interface, with an enhanced folder interface and better document preview capabilities.  The interface has been enhanced based on usability testing to make it more intuitive, reducing the learning curve for new computer users.  The Start Menu, Explorer and other features have been re-designed to make it easier to find programs and files. 

Moving from Windows Vista Basic to the “Aero” version (same media, but hardware-dependent) significantly enhances the user experience.  Aside from the “glass” feature (formally called transparency), the Aero interface supports faster and more reliable graphics composition, Taskbar Thumbnails (the ability to see, in the taskbar, not just what programs are running, but what data is in the programs), Windows Flip (replaces Alt-Tab with a more precise preview of open programs/data) and Flip 3-D (a better way to move between running programs).  These features require a graphics card supporting at least 128MB of graphics memory and compatible with the Windows Display Driver Model (WDDM).  More information on hardware compatibility for the Basic and Aero versions of Windows Vista may be found at http://www.microsoft.com/technet/windowsvista/evaluate/hardware/default.mspx.

Related to this is the search capability, which is integrated throughout Vista.  So, for example, one can search for a program or command to launch the program, rather than navigating through menus looking for an icon buried somewhere in the menu system.  Search has been enhanced, and leverages a common technology with SharePoint Portal Server and MSN.  This presents significant value in time savings and employee effectiveness, particular when combined with Office 2007 and SharePoint Portal Server. 

Another significant area of enhancement revolves around deployment.  First and foremost is Windows Imaging – a technology originally released with the Operating System Deployment (“OSD”) Feature Pack to SMS 2003.  Windows Imaging allows for creation of operating system images, similar to what Symantec Ghost allows for.  However, unlike Ghost, Windows Imaging is a file based imaging format that does not require completely reformatting the hard disk (this allows for a complete, in-place image upgrade using Windows Imaging and Windows PE, while preserving user settings and data on that hard disk with the User State Migration Tool).  Windows Imaging combined with the device flexibility of Vista can allow for significant image consolidation (theoretically, down to one image for all computer systems).  This in and of itself can be a significant savings, but furthermore these images can be edited offline – files can be added to an image simply by dragging and dropping the files to the image from within a utility.  Application compatibility is a major issue and concern for any operating system upgrade, and we will be helping Microsoft to test and refine the new Application Compatibility Toolkit – a database of software programs and the known compatibility issues and fixes, to help make programs work under Vista.  This will be released concurrent with Vista, to help customers move into deployment.  Some of these tools have been available under the Business Desktop Deployment Solution Accelerator, as free downloads, and we’ve been training customers on them through the DSP program QTS is participating in.  However, the Vista version of these tools is significantly enhanced, and having worked with these tools in April at Microsoft’s Vista Airlift, I am looking forward to their refinement and release. 

Laptop support in Vista is significantly improved in several ways.  Boot up time is significantly sped up, as is the “hibernation” function.  Wireless support has been improved, as has power management, allowing systems to be more secure and battery life to be extended.  Since power costs continue to rise, this is actually an area where some hard ROI can be demonstrated.  Vista will also support improved peer to peer networking, supporting mobile teams (for example, an accounting team working together from a client site, or in an airport). 

There are several version of Vista planned for release, so choosing the right version(s) will require some planning, There will be different versions and flavors targeted at the consumer, small business and medium/large business markets.  Interestingly, there will not be separate versions for Media Center and Tablet devices as there are today – these capabilities will be built into the base product.  More detail on this is available within the Windows Vista Product Guide on the Microsoft web site.

This leads to a logical question – how do you get Vista when it is released.  Although many of you are used to buying new PCs and getting the operating system with it, there is some real merit to purchasing Software Assurance to get and maintain OS upgrade rights.  Specifically, the Enterprise version of Vista will be available to Software Assurance customers and will include some features that won’t be in the retail/OEM version – BitLocker, Virtual PC Express Edition and Language Pack support.  These features are only available in the Enterprise Edition, which is only provided through Enterprise Agreements and other licensing programs with Software Assurance.  This is targeted around an imaging approach to deployment, which is Microsoft’s recommendation.  Software Assurance can be added to most OEM hardware licenses within a 60 day window of purchase of the computer – contact your software licensing reseller or QTS for more information on this if you have purchased new PCs recently and wish to do so.

So, there is a lot to absorb with this major new release of Windows, and we are looking forward to the next few months as we build our experience with this product, and help Microsoft to improve it.  And if you’re interested in being an early adopter, give us a call – we’ll already have four deployments in play by the time the product is released and available to you as final production code. 

As always, feel free to email me your comments or thoughts at nrosenberg@QTSnet.com. Thank you.

Neil Rosenberg
President & CEO
Quality Technology Solutions

Back to Top


PARTNER SPOTLIGHT

This month QTS is spotlighting its network penetration testing partner, Razorpoint Security Technologies, Inc.  Based in New York City, Razorpoint Security specializes in researching and analyzing security vulnerabilities and conducting comprehensive security testing.  Razorpoint Security’s testing goes well beyond the average “port scan” or “vulnerability scan” exercises.  They look at your network through the eyes of those looking to do you harm.  As Razorpoint Security’s president Gary Morse says, “We know what they know, we know what they see, and we know what they do.”

Razorpoint Security’s assessments provide business leaders and corporate clients the necessary security services and solutions that help keep corporate networks secure.  They have exceptional expertise in network security, attack/penetration testing and identifying security vulnerabilities especially as they relate to Internet solutions and web applications.  They provide security services that focus the view of your operating environment.  Razorpoint Security offers all sectors of business the services to maintain a firm grasp on the evolving state of network security.

Razorpoint Security’s attack/penetration tests identify potentially disastrous security vulnerabilities and help ensure the protection of network infrastructures and e-business ventures.  While many security firms provide singular penetration tests with limited documentation, Razorpoint Security offers a year-round assessment schedule, customized documentation deliverables, and monthly security advisories that help keep clients up to date.

As Razorpoint Security Technologies approaches the start of its fourth year in business, they have clearly become a leading force in the network security industry.  In addition to providing comprehensive security services to its clients, Razorpoint Security has become a prime media source on information security.  News outlets such as The New York Times Magazine, ABC/CourtTV, CBS News, Crain’s NY Business, Entrepreneur Magazine, CSO (Chief Security Officer) Magazine, CRN Magazine and Wired News are among those that have tapped Razorpoint Security for their expertise.

As local leaders in the security field, QTS and Razorpoint Security have worked together to develop a Penetration & Attack Testing offering that fits into QTS’ QuikSecure methodology and is a logical progression for customers who have completed QTS’ QuikSecure Security and Vulnerability Assessment offerings.  This QuikSecure PAT offering is offered through QTS and has been scaled and priced appropriately for the Medium Business market space.

For more information on Razorpoint Security Technologies, please view their web site at www.razorpointsecurity.com, email them at sales@razorpointsecurity.com, or call (212)744-6900.  Or, contact your QTS Account Manager.

Back to Top

Visit www.QTSnet.com for company information.

QUIKSECURE TIP OF THE MONTH

Each month, we now provide a security recommendation to our QuikNews readers based on content from our recent QuikSecure Security Assessments.  One of these reports typically includes 100-200 specific recommendations such as this, but we’re providing some “free advice” here to our readers.

ISSUE – Is VPN authentication being performed using the VPN proprietary user database?
 
IMPACT – Users and passwords must be maintained in a separate database in the VPN device, and the more places identity must be managed in, the less likely passwords will be changed and the more likely security gaps will develop.

RECOMMENDATION – Implement centralized authentication against a RADIUS server or Active Directory.  Also, consider Strong Authentication using tokens (such as RSA ACE Server/SecurID) or Digital Certificates.

QTS EVENTS

Please note that QTS seminars are open only to customers and prospective customers, and not to other vendors, partners and consultants.

CxO LUNCHEON SEMINAR: SECURING YOUR MICROSOFT NETWORK – SECURE REMOTE ACCESS AND IDENTITY MANAGEMENT

Join Microsoft, Citrix and QTS for this informative lunch seminar on how to enable secure remote access to your network and its resources, for your employees, contractors, partners, suppliers and customers, and how to best manage identity and network access for your employees and other users of your network.  The event is being held on Thursday, June 8th  at the Ruth’s Chris Steakhouse in New York (midtown).  For more information or to register, contact your QTS Account Manager, or visit www.clicktoattend.com and enter event code 105694.  Note that this event is open to customers with 100+ computer users only. 

Back to Top

PATCHES & UPGRADES

Call the Customer Support Center to have us apply QTS-standard patches and keep your systems current. The following patches have been recently released and are generally recommended by QTS:

* New Security Updates are available in May for Symantec ESM, Symantec Network Security, Symantec Gateway Security, Vulnerability Assessment, Symantec Client Security and Incident Manager.

To receive notifications of new Microsoft product downloads and Service Packs, click here.

Also, please click here for applicability of Microsoft Security Bulletins to the products in use at your environment. Contact your QTS Account Manager if you would like our Customer Support Center to monitor these bulletins for you and advise with recommendations for your environment upon release of new bulletins.

Note that Microsoft releases security patches on the second Tuesday of each month. New Security Updates to Windows and Office are available.

Symantec (formerly Norton) Antivirus Corporate Edition signature files are currently at version 80531s (5/31/2006). CA eTrust Antivirus 6.x/7.x signature files are currently at version 23.72.23 (5/31/2006). McAfee VirusScan / NetShield signature files are currently at version 4774 (5/31/2006). Trend Micro signature files are currently at version 3.471.00 (6/1/2006).  Please keep your antivirus signatures, and your scan engines, current! If you do not have your system set up to automatically distribute updates from your server to your PCs, please call your QTS Account Manager or the Customer Support Center.

Some patches can cause problems, especially in combination with other software programs or patch levels. Please talk to us to verify whether we see any possible problems in your environment before patching your systems independently. We make best efforts to test patch combinations but cannot guarantee compatibility between software and hardware manufacturers’ products.

Back to Top

PRODUCT SUPPORT LIFECYCLE WATCH

The following products are pending “end of life” status by their manufacturers, and therefore customers should be planning for system upgrades or replacement.

* Windows NT Server 4.0 reached the end of its supported lifespan on 12/31/04.
* Novell ZENworks for Desktops 3.2 support ended on 5/31/05.

* Novell NetWare 4.2 reached end of life on 6/1/05.
* Novell NetWare 5.1 reached end of general support on 10/31/05.  Extended Support ends on 11/1/06.
* Novell NetWare 6 reached end of general support on 11/1/05.  Extended Support ends on 11/1/06.
* Citrix MetaFrame 1.8 reached end of support on 12/31/05.
* Microsoft Exchange Server 5.5 support ended on 12/31/05.

Please remember that end of life for a product does not only impact that product, but also other products that interact with it.  For example, end of life status for an operating system means that no new software products that are released will run on that operating system, as the manufacturers will no longer receive support from the operating system vendor.

Back to Top

SOLUTION SPOTLIGHT: SYMANTEC ENTERPRISE VAULT

Symantec's Enterprise Vault software provides a flexible solution for archiving and managing email, files and other data types.  Enterprise Vault can work with:

·         Microsoft Exchange Server (5.5-2003)

·         Windows Server File Storage

·         Windows SharePoint Portal Server (subject to certain limitations)

·         Instant Messaging (through third party API extensions)

·         Lotus Domino Journaling (full Domino support in late 2006)

Enterprise Vault allows you to define rules to control archiving and long-term storage of data, in a user-transparent manner.  When users want a message or file retrieved, they click on the placeholder and it is brought back seamlessly.  The solution combines elements of archival storage, Hierarchical Storage Management ("HSM") and full text indexing/search (leveraging the Alta Vista search engine).

Enterprise Vault is a modular product, allowing you to purchase the modules you need for the data and functionality you require.  In addition, modules are also available for:

·         Compliance - uses archiving and storage to manage processes and demonstrate compliance with SOX, GLB, etc.

·         Discovery - allows for flexible search/retrieval to comply with Legal Discovery requirements.

This solution, particularly based on its tight Exchange Server integration, is perfectly suited for environments with large or growing Exchange message stores where it is important to manage that growth while complying with Security Policies and still providing users with an intuitive, easy solution.

*For more information, click here.

Back to Top

SPECIAL OFFERS

MICROSOFT LIVE COMMUNICATION SERVER – FREE CLIENT ACCESS LICENSES
Microsoft is offering customers with Software Assurance on Microsoft Exchange that was active on or before 10/1/03 free CALs for Microsoft Live Communications Server, to match their Exchange CALs owned at that time.  Software Assurance can also be purchased for redeemed LCS CALs at the time SA on Exchange is renewed.  Contact your QTS Account Manager for more details.

SYMANTEC COMPETITIVE TRADE-UP
Symantec is offering customers who “trade in” qualifying competitive firewall/IDS products a credit toward the purchase of Symantec Gateway Security (SGS) firewall appliance or Symantec Network Security (SNS) Intrusion Protection System.  Contact your QTS Account Manager for more details.

Back to Top

QUIKNEWS ARCHIVES

For access to past issues of QTS QuikNews dating back to January 2001, click here.

Back to Top

 

 


SUBSCRIPTION INFO

This newsletter is distributed to QTS clients, recent contacts, and "friends of QTS." We respect your privacy and never share your contact information with others.

To Comment on this newsletter, send an email to QuikNews@QTSnet.com.

To Remove yourself from this mailing list please send a reply to this message with the word UNSUBSCRIBE in the subject field, or contact your QTS Account Manager.

To Subscribe to this Newsletter, go to http://www.qtsnet.com/contact/QuikNews.htm.

To View an archive of QTS QuikNews newsletters, please visit http://www.QTSnet.com/stayinformed/QuikNews/QuikNews_Index.htm.

(c) Quality Technology Solutions, Inc. All rights reserved.

 

Quality Technology Solutions, Inc.
201 Littleton Road, 2nd Floor
Morris Plains, NJ  07950

Tel: (973)984-7600
Email: QuikNews@QTSnet.com
Web: www.QTSnet.com

Back to Top

 


 

This site last updated 12/16/06
© 1999 Quality Technology Solutions, Inc.
201 Littleton Road, Morris Plains, New Jersey 07950
telephone: 973.984.7600       fax: 973.984.7650
email: info@qtsnet.com