Conflicker Worm Update

A recent development regarding the Conficker virus has been detected, where it is now directing infected machines to download new, harmful files, thus activating the botnet. Here’s how this new behavior works:

Conficker sends out email spam without the PC owner’s knowledge. In addition, Conficker uses pop-ups to warn of PC infection and offers fake antivirus software, called 'SpywareProtect2009' at a price of $49.95. If purchased, credit card information is stolen and the virus downloads even more malicious software.

If you encounter a pop-up like this, do not click on the pop-up at all - not even to close the box. To remove the pop-up without infection, open your Task Manager (Ctrl+Alt+Delete), and end the task from your Browser (Explorer, Firefox, etc.). You should take additional precautions to ensure you are not already infected and have adequate protection:

• Keep your Operating Software up-to-date
• Learn more about Conficker
• Invest in a high-end security product

Sonicwall TZ210 UTM Appliance

The SonicWALL TZ 210 Series of network security appliances eliminates firewall performance bottlenecks while delivering unsurpassed Unified Threat Management (UTM) protection. Unlike other vendors’ solutions, the SonicWALL TZ 210 offers both protection and performance without compromise. The TZ 210 and TZ 210 Wireless-N deliver unmatched stateful packet inspection speeds of up to 200 Mbps, dramatically improving network performance and allowing you to get the most out of your network investment. The improved performance enables SonicWALL’s patented Deep Packet Inspection technology to inspect and ruthlessly eliminate viruses, spyware, and other threats. The TZ 210 provides a full range of firewall capabilities in an easy-to-manage solution that can adapt to standalone or distributed configurations. Like more than a million other SonicWALL appliances protecting businesses around the world, each TZ 210 delivers reliable, cost-effective network protection and performance.

Protection - Keep your network safe from threats
Performance - Remove the network performance bottleneck
Flexibility - Fits into any small or distributed enterprise organization
Ease-of-Use - Easy to set-up, operate and manage
Business Continuity - Failover, failback and more

Protection
Deep Packet Inspection Engine - A configurable, high-performance deep packet inspection engine for extended protection to key Internet services such as Web, e-mail, file transfer, Windows services and DNS

ICSA-Certified Stateful Packet Inspection Firewall - Industry-recognized standards for enterprise-class firewall protection, ensuring the integrity and validity of each connection, packet, source and destination

Comprehensive Security - Supports SonicWALL’s suite of security services including Gateway Anti-Virus and Anti-Spyware, Intrusion Prevention Service, Enforced Client Anti-Virus, Content Filtering Service and Global Security Client.

SonicWALL PortShield - The SonicWALL PortShield architecture provides the flexibility to configure port level security for the LAN, providing protection not only from the WAN and DMZ, but also between devices inside the LAN.

Performance
High-performance Architecture - Utilizing the advanced processing technology found in the SonicWALL NSA Series, the TZ 210 delivers throughput speeds of up to 100 Mbps.

Wireless (802.11b/g/n) - Supports the 802.11n standard which is over five times faster than the current status quo of 802.11g.

Gigabit Interfaces - Includes 2 Gigabit Ethernet Interfaces and 5 Fast Ethernet interfaces to deliver bottleneck-free network performance.

Flexibility with Control
Wireless Guest Services - Create user accounts for occasional guest users such as consultants and contractors that permit wireless connections to the Internet without providing access to the corporate network.

Multiple Zones for Different User Types - Create multiple zones of access for different user types, providing an unprecedented level of control without compromising the security of the network.

Time-based and Group Policies - Create security policies that can be enforced according to pre-defined schedules. Specify start and end ranges on an individual or group policy basis, offering more granular network control. Create and assign security policies to a large number of users with minimal effort, simplifying User Level Authentication for Internet and VPN access.

Virtual Private Networking - Enable secure site-to-site VPN connections with IPSec-based connectivity. For secure remote access, both SSL VPN and IPSec VPN clients are included enabling gateway enforcment, centralized management and configuration flexibility in managing and securing remote workforce network access.

Ease-Of-Use
Set-up and Management - An innovative Web interface utilizes a comprehensive suite of easy-to-use configuration and management wizards designed to guide you through the set-up of common network configurations (e.g., public server wizard, VPN wizard, NAT wizard).

Integrated auto-MDIX Ports - An integrated 5-port auto-MDIX switch automatically and transparently detects and corrects incorrectly wired cables such as cross-over cables, making network installation substantially simpler and less expensive.

Comprehensive Central Management Using SonicWALL GMS - SonicWALL’s award-winning Global Management System (GMS) provides network administrators with the tools for simplified configuration, enforcement and management of multiple global security policies, VPN and services for multiple system, all from a central location.

Business Continuity
Failover and Failback Technologies - Ensures continuous uptime for IPSec VPN tunnels by failing over to a wireless WAN connection should the broadband connection fail. Once the broadband is re-established, the TZ 210 fails back, providing the best connection speed possible.

WAN Redundancy and Load Balancing - Configure a secondary WAN port, delivering highly reliable network connectivity and robust performance. This secondary WAN port can be used in “active-active” load sharing or failover configuration providing a highly-efficient method for maximizing total network bandwidth.

ISP Failover - Ensure continuous uptime for Internet and IPSec VPN connectivity by failing over to a second ISP link should the primary link fail. Through ISP failover, the TZ 210 delivers highly reliable network connectivity for constant access to critical data.

Conflicker Worm

Courtesy of Trend Micro, here are some valuable tips.

How do I know whether my my PCs are infected?
Scan your PCs using their current Trend Micro product or HouseCall to see whether they are infected. If it is determined that they are infected, find instructions for removal below:
•
Consumers
•
Small Business
•
Medium Business, Enterprise

How do I protect my PCs from being infected?
•
Immediately install patches/updates for MS08067 and other vulnerabilities as soon as vendors release these patches. You should configure their PCs to receive automatic updates and patches from Microsoft and software vendors.
•
Make sure your security software is up to date.
•
Disable the “Drive Auto-run” feature to avoid infections from USB drives.
•
Employ secure passwords using a combination of letters, numbers and symbols and frequently change them.
•
Take caution when searching online for DOWNAD and Conficker information. There are reports of rogue antivirus packages that are taking advantage of the situation. They will tell you that you are infected and ask you to pay money to download their application, which in many cases turns out to be malware.

Additional information from Sophos

In less than six months, the Conficker/Downadup worm has infected thousands of business networks--making it the most widespread worm infection since SQL Slammer in 2003.

If your computers are unpatched, they’re still at risk.
Download a free Conficker detection and removal tool from Sophos
Conficker uses advanced malware techniques to exploit vulnerable computers, weak passwords and USB storage devices. Learn more about how the Conficker worm works in a free 10-minute podcast with Paul Ducklin of Sophos.
Listen to the podcast about Conficker

For all your security needs, contact Ashlin.

Compact, Outdoor-ready Pan/Tilt/ Zoom Network Camera

AXIS 215 PTZ-E Network Camera is an outdoor-ready, day and night pan/tilt/zoom camera designed for easy and cost-efficient installation in demanding indoor and outdoor environments such as parking lots, train stations and business premises. AXIS 215 PTZ-E provides IP66-rated protection against dust and water. The built-in heaters, fans and a removable sunshield ensure that the camera can be used in varying weather conditions and temperatures ranging from -20 °C to 40 °C (-4 °F to 104 °F). The compact camera comes with a pre-mounted wall bracket, as well as Ethernet and power cables for quick installation. A standard 1.5" NPT adapter is also included for other mounting possibilities; e.g., pendant-mounted on a ceiling.

Smallest, Smartest Axis Wireless Network Camera

AXIS M1031-W Network Camera is ideal for securing locations such as small businesses, boutiques, restaurants, hotels or residences. The camera offers both wireless (IEEE 802.11g) and wired connection to the network for flexible installation. Some of the camera's other features include:
Superior video quality in its class at 30 frames per second in VGA resolution.
Passive infrared (PIR) sensor for detecting movement - even in the dark.
White LED for illuminating the scene automatically at an event or when requested by the user.
Offers two-way audio communication with integrated microphone and speaker.

VideoIQ Makes Video Surveillance Simple!

Protecting and monitoring your perimeters is extremely important to all video surveillance customers. However, having guards constantly walk the perimeters or view live streaming video is both costly and inefficient. Fortunately, the VideoIQ ICVR product helps to rid the customer of both of these inefficiencies. The intelligent analytics built into the ICVR acts as a "digital guard" that watches over single and/or multiple territories. The ICVR alerts either local or remote guards once a security breach is detected by the system. Within seconds, video clips of the recorded event are delivered on the screens allowing the security guards to respond quickly and take necessary action. The built-in audio over IP function allows security guards to use loud speakers to inform the intruder that they have been caught and prevent the potential crime before it happens. Having the ability to decrease potential criminal threats and cut overhead costs is a video surveillance customer's dream. Make that dream come true by calling your Ashlin sales rep today!

Sonicwall Promotions Q1 2009

Current Programs & Promotions
SonicWALL Competitive Trade-Up Program »
In today’s economic climate, businesses can’t afford to spend more of their IT budget to receive less performance and security. Don’t throw good money after bad—trade your select, costly-to-maintain, underperforming non-SonicWALL solutions to SonicWALL’s latest high-performance solutions. Featuring Reassembly-Free Deep Packet Inspection™ (RFDPI) technology, SonicWALL’s next-generation solutions deliver Unified Threat Management with unparalleled granularity and breakthrough performance.
Valid Countries:
Worldwide
Offer Expires:
31 Mar 2009
Buy SonicWALL NSA and Clean-up and Save on SSL VPN »
For a limited time, purchase and register any of the SonicWALL NSA products included in this offer and claim a SonicWALL Secure Remote Access (SRA) appliance at no additional cost. When paired together, SonicWALL NSA plus SSL VPN provide a Clean VPN environment with complete mobility as well as comprehensive inbound and outbound security.
Valid Countries:
North America
Offer Expires:
31 Mar 2009
Secure Upgrade Program »
Network threats have become more sophisticated—but so has SonicWALL. The SonicWALL Secure Upgrade Program provides an easy, affordable way to boost security and performance by trading up previously-purchased registered SonicWALL products for SonicWALL’s latest high-performance solutions. Featuring patented Reassembly-Free Deep Packet Inspection™ (RFDPI), SonicWALL’s next-generation solutions deliver Unified Threat Management with unparalleled granularity and breakthrough performance.
NOTE: End user redemption only.
Valid Countries:
Worldwide
Offer Expires:
31 Mar 2009
Email Security Try and Buy Program »
SonicWALL® is offering a Try and Buy Program allowing qualified customers to review a SonicWALL Email Security appliance or Windows® software in their network environment for up to 30 days.
SonicWALL Email Security provides effective, high-performance and easy-to-use inbound and outbound e-mail threat protection. Ideal for organizations ranging from less than 25 users to those with 100,000 or more, this self-running, self-updating solution delivers powerful inbound protection against spam, virus and phishing attacks while preventing outbound leaks of confidential information and violations of regulatory compliance laws.
Contact your local SonicWALL reseller for details or fill out the form to be pre-approved to take advantage of this Try and Program.
Note: End user redemption only
Valid Countries:
North America
Offer Expires:
31 Mar 2009

$250 Firewall and Router Buyback

In today’s business environment maintaining customer confidence and protecting your business means securing your broadband connection and network. Taking steps to safeguard critical data - customer records proprietary files accounting information and more - is vital to your success. The multitude and versatility of Internet threats such as viruses worms hackers and zero-hour attacks requires a host of different solutions that are often difficult to integrate and require a large financial investment to ensure the security availability and secure accessibility of corporate resources.

Designed for the small business Check Point Safe@Office® 500 unified threat management appliances deliver proven Internet security. A single Safe@Office appliance can protect a network of up to 100 users (recommended) from a wide array of Internet threats providing a solid line of defense against threats ranging from hacking attempts and denial of service attacks to phishing and viruses. Safe@Office offers you a number of methods to access your network remotely and securely so you can increase productivity and ensure business continuity without compromising network security. Key features of the Checkpoint Router and Managed firewall services.

• Gateway Antivirus
• Gateway Antispam
• Remote Access VPN
• Complete Connectivity
• Web-based Management
• Automatic Updates
• and WEB FILTERING (for an additional fee)

For a very limited time we can offer a $250 discount if you trade in an existing router. That means for as little as $50 you can upgrade to a firewall from the leading Israeli security company, Checkpoint. In addition we offer hardware maintenace, and all the above managed services for only $25 per month.

WiFi Manager

WiFiManager manages your wireless network. Don't expect it to work with cheap home type access points, but with more industrial strength units like Cisco, Netopia, Symbol, SMC it can detect rogue access, intruders and hackers. You can download a free copy of the software from the link above to manage a single access point; if you have many access points, you can purchase a license for your network. Also available is a little piece of hardware, the RF monitor, which attaches to the network using a PoE (power over ethernet LAN cable) and detects unauthorized access to any access point on the network. The RF monitor can monitor about a 20,000 sq. ft. area.

WiFiManager also manages all access points by allowing centralized SSID management, WEP and WAP encryption, MAC address tables; virtually all aspets of monitoring and managing wireless access points.

Ashlin is now a reseller of this and all products from Adventnet.

Save and Money and Increase Security by Printing Your Own Cheques

Ashlin supplies a number of items that facilitate the internal production of cheques.

Cheque Printing Software
If you use Quicken, QuickBooks, Peachtree, or Microsoft Small Business Accounting we have an excellent software solution for you from www.dotnetchecks.com. We use this product internally and it has proven to be invaluable, easy to setup, and to use. This solution is very affordable only costing $95.95US for Quicken or $359.95US for the rest.

If you use more advanced software we still have a solution for you from www.dotnetchecks.com starting at $995.95US. We even offer their version for professional printers for only $3,495.95US.

Secure MICR Toner
But how do you print secure cheques. First of all by using secure MICR toner. We supply TROY MICR TONER Secure™ which protects your cheques and other documents against faudulent alteration.

Security Printers
As a worldwide provide of Secure Output Solutions, TROY MICR Security Printers deliver the ultimate level of security for localized, distributed and production workgroup applications. TROY's security printing solutions offer breakthrough innovations in fraud-deterrent security, unsurpassed quality and operational controls, as well as flexible integration, technical expertise, service, and support. Each Secure Printer utilizes an HP LaserJet base unit.

Cisco Network Access Control Appliance Enforces Policy at Vulnerable End Points

The Cisco Network Access Control (NAC) appliance, together with Clean Access Server, Clean Access Manager and Clean Access Agent Software, provides a cost effective means of simplifying policy creation and maintenance so that vulnerable enpoints in the network are isolated and remediated before they can harm resources on the network.

With NAC, you can:

• Identify Users on the network
• Determine if Endpoints are vulnerable and non compliant with security policy
• Quarantine and remediate non compliant end points with updates from the Clean Access Server
• Create/Maintain policy across the network with Clean Access Manager. Preconfigured checks from over 50 vendors provide critical Windows updates, Anti Virus updates, Anti Spam Updates and other 3rd party checks

Invest 5 minutes of your time right now to watch a short video. You'll need Windows Media Player or Quick Time to watch it.

For details, go to www.cisco.com/go/nac or call John Mason at Ashlin, 416-256-3096 Ext. 1002

Top 10 Reasons to upgrade to Exchange 2007

Top 10 lists are always fun, so here is Microsoft's - a bit shortened, or you can see the long version.

1. Reduce costs with new data replication capabilities
2. Access everything from virtually anywhere - including from a telephone
3. Enterprise Class Mobile Messaging, calendaring and more - greatly improved
4. Unified messaging saves you money, and employees time
5. Comprehensive protection from spam, viruses, and phishing attacks - you even get hosted filtering and security included in the enterprise CAL license
6. COMPLIANCE
7. Web Access is finally ready for real life use
8. Reduce Adminstration with new tools (more efficient)
9. Deploying and Managing are easier and roles are modular
10. Native 64 bit application results in major improvements in performance and resource utilization

MobiKey: Secure Access from Anywhere

MobiKEY is an ultra-portable, smart-card enabled computing device that securely connects users to their desktop and network resources from any Internet-enabled Windows-based PC.

MobiKEY looks like a USB memory key, but is a read-only device. When you plug it into any computer with a high speed internet connection, MobiKEY gives you instant access to up to 5 different computers anywhere in the world, which has the MobiKEY access software installed. The connection is a VPN using a security certificate. This is a plug and play VPN connection to your desktop computer or office server.

We like this solution because its ultra-secure, very portable, and simple to use and setup. This is a VPN solution for the casual user.

Free security Service With WatchGuard

With WatchGuard's Unified Threat Management and security solutions, you'll have comprehensive, Zero Day protection from multiple threats in a single, easy-to-use solution. Their award-winning firewall and VPN appliances combine security, performance, and value for your growing network. And our intuitive centralized management provides powerful, granular controls for expert users, as well as indispensable ease of use for all.

From November 8 through December 31, 2006, purchase and activate a Firebox® X e-Series firewall appliance and receive a free one-year subscription to the security service of your choice! Each WatchGuard® security service is integrated with the Firebox X to provide an unbeatable combination of security capabilities – no additional hardware or software required. The free services include:

Gateway AV/IPS
spamBlocker
WebBlocker

Other Watchguard Promotions
Trade up Your Firebox® for a Faster Firewall
Available WorldwideFirebox® owners can have faster firewall/VPN and integrated intrusion prevention functionality at a great price! Receive a rebate today when you trade up a Firebox® appliance and buy a new Firebox® X Core™ or Firebox® Peak™ firewall.
Trade In Competing Appliances for Better Security Solutions
Available WorldwideUpgrade your existing firewall/VPN appliance with a new WatchGuard appliance! Now end users with a competitive firewall/VPN appliance can get an instant rebate when they purchase a new Firebox X Core or Firebox X Peak from a WatchGuard Authorized Reseller.
Save with SchoolMate™
Available WorldwideQualifying government and education institutions can earn an additional discount with WatchGuard's SchoolMate discount program!

Defend Against Image Spam

PineApp appliances now protect against Image-based spam which has been the bain of spam filters until now. In addition PineApp has also added the availability of IP-Reputation filtering by Commtouch.