<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>TechVirtuoso &#187; Featured</title>
	<atom:link href="http://techvirtuoso.com/articles/featured/feed/" rel="self" type="application/rss+xml" />
	<link>http://techvirtuoso.com</link>
	<description>Enterprise technology for and by those who live it.</description>
	<lastBuildDate>Fri, 30 Jul 2010 03:00:21 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.9.2</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>The Nexus One vs The iPhone (and life after iOS)</title>
		<link>http://techvirtuoso.com/2010/07/02/the-nexus-one-vs-the-iphone-and-life-after-ios/</link>
		<comments>http://techvirtuoso.com/2010/07/02/the-nexus-one-vs-the-iphone-and-life-after-ios/#comments</comments>
		<pubDate>Fri, 02 Jul 2010 18:36:45 +0000</pubDate>
		<dc:creator>Michael Stanclift</dc:creator>
				<category><![CDATA[Featured]]></category>
		<category><![CDATA[Mobile]]></category>
		<category><![CDATA[Android]]></category>
		<category><![CDATA[apple]]></category>
		<category><![CDATA[Google]]></category>
		<category><![CDATA[ios]]></category>
		<category><![CDATA[iPhone]]></category>
		<category><![CDATA[nexus one]]></category>

		<guid isPermaLink="false">http://techvirtuoso.com/?p=1227</guid>
		<description><![CDATA[As I explained in a previous entry on Tuesday, I&#8217;ve made the decision to leave the world of Apple mobile devices for the land of Google Android. To briefly bring you up to speed:
Ever since the iPhone supported Exchange, I’ve been a huge supporter. I’ve spent two good years on the iOS with my iPhone [...]]]></description>
			<content:encoded><![CDATA[<p><img class="alignright size-large wp-image-1235" title="The Nexus One" src="http://techvirtuoso.com/wp-content/uploads/2010/07/200px-Nexus_One-125x246.jpg" alt="" width="125" height="246" />As <a href="http://techvirtuoso.com/2010/06/29/decision-is-final-apples-failure-is-sending-me-to-android/">I explained in a previous entry on Tuesday</a>, I&#8217;ve made the decision to leave the world of Apple mobile devices for the land of Google Android. To briefly bring you up to speed:</p>
<blockquote><p>Ever since the iPhone supported Exchange, I’ve been a huge supporter. I’ve spent two good years on the iOS with my iPhone 3G. &#8230; When the iPhone 4 was announced, I followed the WWDC keynote with great anticipation. I ooh’d and aah’d at all the advances in design and software. &#8230; (after getting it) Taking it home that night, I started to notice something was a little off with my phone. &#8230; (antenna issues) I dropped a few calls that weekend, including one to my father who seem’d to have lost my mother, but I could make due. &#8230; The view from most of the people within the Apple world was that it was firmware related, and would be quickly fixed. Then Steve Jobs opened his mouth. &#8230; I found myself deeply disappointed in the device and the operating system. Enough so that I’ve made the switch to Android.</p></blockquote>
<p>There, now that we&#8217;re all up-to-date, I&#8217;m happy to say that my Nexus One is activated and I&#8217;ve had the last couple days to play with it. Having had experience with many different mobile device styles and platforms, including Windows Mobile, Palm OS (the original, not the WebOS) and iPhone, I can honestly say that <strong>the Nexus One and Android OS is the best mobile experience I&#8217;ve ever had.<span id="more-1227"></span></strong></p>
<p>I say play, but really, I use my phone as a tool. It&#8217;s a tool for me to communicate with friends, family and co-workers. Not just through phone calls, but SMS, email, Facebook, Twitter and IM. I need that tool to work reliably all the time, because if its not, I&#8217;m going to miss out on the important events of my life. This shouldn&#8217;t come as a shock to anyone with a smartphone. It&#8217;s pretty standard stuff.</p>
<p>I put a lot of thought into what device to make a switch to, so why did I choose the Nexus One? It&#8217;s been out since January, and can&#8217;t be considered a new device. In two weeks Motorola will release the Droid X and you can already get the HTC EVO 4G from Sprint, today.</p>
<ul>
<li>I needed a solid phone, now. Not on July 15, so that made the Droid X a non-starter.</li>
<li>2x I needed a solid phone now. Since the HTC Incredible is on backorder until the return of Jesus, it&#8217;s not an option, and thus Verizon was out since those were the only two phones I was interested in.</li>
<li>Sprint&#8217;s network in Kansas City can be considered third world, in some areas. Having experienced this while living less than 2 miles from the Sprint world headquarters in Overland Park, while using a Treo 700wx, didn&#8217;t even allow me to consider the HTC EVO 4G.</li>
<li>Everyone I know in this area is on AT&amp;T, because unlike what you may see in San Fransisco or New York, they have the superior network in Kansas City. As a result, my entire family and a large chunk of my local friends are all on AT&amp;T. Seeing as these are the people I communicate with most often, the free mobile-to-mobile made them an attractive network to be on. It&#8217;s also the same network I was with on my business account for the iPhone. This made transferring my number to a personal account a lot easier.</li>
<li>I was attracted to purchasing an unlocked phone and keeping myself out of a contract. Since the Nexus One came direct from Google, and not tied to the provider, I can use it on any GSM network. I realize it would limit me to only two in the US, and if I used T-Mobile on it I&#8217;d only get EDGE speeds for data, but the ability is attractive and also the ability to travel outside the US and swap SIMs without any fuss was one I added into consideration.</li>
</ul>
<p><strong>Ordering &amp; Delivery</strong></p>
<p>The process of ordering the phone from Google was almost flawless.</p>
<p>I placed an order for the out-of-contract AT&amp;T version on June 29, for $529, at around 9AM. The web store was very straight forward and easy to use. My only complaint is that the confirmation screen can be confusing for those who don&#8217;t know which bands the AT&amp;T phone uses vs the T-Mobile, and it doesn&#8217;t clearly say on the receipt and invoice. However, this was my only complaint. Google gave me the option to engrave a custom message on the back of the phone, for free, but said it would delay the device by up to 72 hours in shipping. Since I needed the phone by next Friday, I opted not to. If I&#8217;d known how fast things would ship, I would have reconsidered. Overnight shipping via FedEx was free. I opted to purchase an extra battery for $25.</p>
<p>By lunchtime Tuesday, my phone had left the Googleplex and was on it&#8217;s way to my office. By 8AM on Wednesday, it was in our campus mailroom ready to use. Less than 24 hours after I&#8217;d placed the order. Already, I&#8217;m impressed at their speed.</p>
<p><strong>Build Quality</strong></p>
<p>Out of the box, the build quality of the Nexus One is obvious. In your hand, it feels lighter than an iPhone 4, about the same as the 3G/3GS. Size wise, it&#8217;s slightly longer and thicker than the iPhone 4, but looks smaller than the 3G/3GS. The face is glass, wrapped in an aluminum band which crosses over the back and bottom of the face. The slightly darker plastic feels very nice to the touch, and is much easier to keep a grip on compared to the all glass back of the iPhone 4, or even the slick plastic back of the 3G/3GS. The curves are attractive, and feel very natural in your hand, compared to the squared off and ridged feel of the iPhone 4.</p>
<p>Other than the glass front, there are no places on the Nexus One where I feel like normal use will damage or scratch the device. The back of my iPhone 3G over the course of 2 years had normal wear and tear, but the iPhone 4 I used for a week, after three days of use, had a large scratch in the glass on the back, right where my wedding ring sits. This scratch was easily visible and easy to FEEL. My tungsten band had cut into the glass after only a short term of casual use. Two days later, another scratch appeared.</p>
<p>I have no indication that the Nexus One will have any of those issues.</p>
<p><strong>Hardware</strong></p>
<p>Apple doesn&#8217;t like to talk about the internals of their devices, unless they actually have a technical advantage over their competition, except to say that their &#8220;magical&#8221; or &#8220;amazing&#8221; &#8212; that said, others constantly tear down and analyze their equipment, so we end up knowing a good deal about them. In contrast, HTC (who makes the Nexus One) and Google (who designed it) are pretty open about the hardware specifications. Reason being, the Nexus One was designed to push mobile devices (and Android) forward, something it has been pretty successful at doing. When the Nexus One came out, the only thing to compare it to in the Apple world was the iPhone 3GS, which in a hardware tear down, the Nexus One was superior in nearly every way. Now that the iPhone 4 is out, we have something else to compare it to&#8230; and in a side by side comparison they stack up pretty well against each other.</p>
<p><em>Processor<br />
<span style="font-style: normal;">The iPhone 4 features a &#8220;custom&#8221; ARM chip called the A4, the same chip that is in the iPad. This chip is able to run at 1GHz but the current understanding is that it&#8217;s purposefully under-clocked by Apple to reduce battery consumption and the amount of heat that it gives off in such a small body.</span></em></p>
<p><em><span style="font-style: normal;">In comparison, the Nexus One features a 1GHz Snapdragon processor. The chip is not underclocked and can actually be over-clocked using non-stock kernels. While Apple sets their chips down a notch to keep them from heating up, I always had issues with iPhone&#8217;s being warm in my hands after long periods of use. With the Nexus One, I&#8217;ve never had that problem.</span></em></p>
<p><em>Memory<br />
<span style="font-style: normal;">Both the Nexus One and iPhone 4 feature 512MB of RAM. The previous 3GS only had 256MB, as does the iPad.</span></em></p>
<p><em><span style="font-style: normal;">In terms of internal storage, the iPhone has the advantage of a built in 16GB/32GB of storage. On the flip side, it is non-expandable. The Nexus One only has 512MB of internal storage for the operating system and applications, however, with Android 2.2 applications can now be installed on the external micro-SD card, which is capable of going to 32GB. Bundled with the phone, is a 4GB card.</span></em></p>
<p><em><span style="font-style: normal;">This is a double edged sword of sorts. Trying to find 16GB microSD cards is no problem, and a great SanDisk card can be found on Newegg or Amazon for as little as $30 plus shipping. However, the jump to the 32GB cards more than quadruples the price in some cases. </span></em><em><span style="font-style: normal;">To be honest, I wish Google would have included a larger card as 4GB is tiny when you start adding pictures, music and video to the device. For the $529 I paid, they could have easily ponied up for a little more memory. Add-in installed applications, and it fills up quick. </span></em></p>
<p><em><span style="font-style: normal;">The best path I&#8217;ve seen is what Motorola is planning for the upcoming Droid X. 8GB of internal storage PLUS a microSD slot able to go to 32GB WITH a 16GB included at purchase. This equals 24GB of storage for the same price (with contract) as a iPhone 4 16GB. If you&#8217;re willing to go a little farther you could surpass the max storage of the iPhone platform at 40GB. (8GB internal + 32GB expanded) &#8212; it&#8217;s my hope that this is the model that every Android phone takes in the future.</span></em></p>
<p><em>Screen<br />
<span style="font-style: normal;">Nothing beats the &#8220;Retina Display&#8221; of the iPhone 4. Nothing. It&#8217;s superior DPI, resolution and color clarity is unparalleled. It looks good in all lighting conditions even at low brightness. It&#8217;s the one thing about the iPhone that anyone can look at and compare the previous versions and instantly see massive improvements.</span></em></p>
<p><em><span style="font-style: normal;">However, the Nexus One screen is still very nice. A lot has been said about the PenTile display and the color clarity, and while it&#8217;s not as nice as the iPhone 4, I find it to be superior to the 3G/3GS screen, and a lot better than most other devices. It&#8217;s also slightly larger than the iPhone 4 (3.7&#8243; vs 3.5&#8243;) which isn&#8217;t a horrible thing. I will say that it takes a little adjustment, and for someone who has smaller than average fingers, any bigger and I&#8217;d be afraid it&#8217;d be too hard to hold. This is one thing where I worry about devices like the Droid X and EVO (4.2&#8243;+), that for most users it&#8217;ll be too large to comfortably hold and type on. Some people like the large screen, I feel that the Nexus One is about the biggest I could comfortably use.</span></em></p>
<p><em><span style="font-style: normal;">I&#8217;ve found that in low/no light, the AMOLED screen on the Nexus One is superior for long term reading compared to the iPhone 4. I like to sit in bed after my wife has gone to sleep, catch Jon Stewart or Letterman on TV and use my phone to read the news, Twitter, etc, and with the iPhone 4 my eyes would get tired and irritated quickly. With the Nexus One screen, it was much easier to use for long periods of time. </span></em></p>
<p><em>Camera<br />
<span style="font-style: normal;">The camera on the iPhone is hard to beat. However, the Nexus One is pretty comparable. Both feature a 5MP sensor with an LED flash. However, the iPhone sensor has a lot more power behind it and as a result the color quality and speed at which the camera fires is superior. Although, the Nexus One seems to have a lot deeper depth of field and a slightly wider angle of view, resulting in images where more of it is in focus. </span></em></p>
<p><em><span style="font-style: normal;">It&#8217;s a trade off, as an proamature photographer, the thought of having a great camera with me at all times is very appealing, and with my iPhone 3G it was my daily shooter for almost anything. There were times I&#8217;d find myself taking pictures of things where my Canon point and shoot or even my Nikon D200 DSLR would have been the far superior choice. However, as Chase Jarvis says (and wrote a book and iPhone app about) &#8220;the best camera is the one you have with you.&#8221;</span></em></p>
<p><em><span style="font-style: normal;">When you look at color quality vs image sharpness/focus, it&#8217;s a tie. However, the speed at which the iPhone 4 is able to perform takes the cake, and when you add in 720p video out of the box (the Nexus One will do it with third party software) it&#8217;s impossible to do anything but hand it to Apple on this.</span></em></p>
<p><em><span style="font-style: normal;">My ONE caveat in saying that, is that iOS 4 currently has a bug that adds a &#8220;green ghost&#8221; to the center of images taken under florescent lighting. However, I&#8217;m confident Apple will correct this and as pointed out to me, HTC has had issues like this in the past, and even the big dogs of Nikon and Canon who do nothing but make cameras have similar issues with their high end DSLRs that frequently require firmware updates to correct.</span></em></p>
<p><em><span style="font-style: normal;"><strong>Android vs iOS</strong></span></em></p>
<p><em><span style="font-style: normal;">I could spend the next three days comparing these two operating systems, their features, multitasking abilities (or inabilities) and their quirks. But, there are already many reviews out there doing exactly that. However, I will point out a few key points that I find beneficial on each platform.</span></em></p>
<p><span style="font-style: normal;"><em>Integration<br />
<span style="font-style: normal;">The Nexus One is probably the only fair comparison to the iPhone when it comes to the integration of hardware and software. It&#8217;s the only device that Google has had total control (along with their partner HTC) in building the device and designing the Android OS around it. Obviously this is Apple&#8217;s primary business model in all of their hardware products, and little explanation of the benefits they see from it are needed.</span></em></span></p>
<p><span style="font-style: normal;"><em><span style="font-style: normal;">That said, Android is very well integrated with the Nexus One, and the entire process of using the device is nearly perfect end-to-end in terms of tie in with other Google powered services such as the Maps, Gmail, Contacts, Calendar, Google Talk, Google Voice and of course Search. The fact that every text box or search field can be powered by voice commands that are highly accurate (as long as you speak clearly) is a huge plus. In contrast, Apple has to rely on a lot of third party technologies that are integrated with the iPhone like&#8230; Google Maps and Search. Even Apple&#8217;s implementation of MobileMe as an &#8220;all in one&#8221; provider of email, calendar and contacts is somewhat flawed. My wife uses MobileMe for her primary email after purchasing a 3GS and we&#8217;re just waiting for it to expire and switch her to Gmail or Live Mail after their ActiveSync service comes online. She complains constantly about MobileMe not pushing email and about calendar events disappearing. Problems I didn&#8217;t even have with iOS tied to Microsoft Exchange 2003/2007, which always seemed to work flawlessly.</span></em></span></p>
<p><span style="font-style: normal;"><em><span style="font-style: normal;">The Nexus One is pure Google, end to end. For some people who worry about what Mountain View and their datacenters are up to, that&#8217;s scary, but the device is very well integrated into all their services. It&#8217;s a total Google package, or as they put it &#8220;the Google experience.&#8221;</span></em></span></p>
<p><span style="font-style: normal;"><em>Notifications<br />
<span style="font-style: normal;">The funny thing about the iPhone notifications system, is that it didn&#8217;t used to bother me, until I used the Android system and saw how far superior it is. No more hunting for desktop icons with indicators, spread across multiple screens, with Android every system or program notification is displayed in a single drop down menu at the top of the status bar. They can all be cleared with the push of one button, or opened and flipped back to the app that needs your attention. No app can overtake another app you&#8217;re viewing with random status windows, they all cleanly take their place and await your attention in the top corner.</span></em></span></p>
<p><span style="font-style: normal;"><em><span style="font-style: normal;">In this area, the Android OS is superior to the iOS in every way. </span></em></span><em><span style="font-style: normal;">Maybe for iOS 5, Apple can finally implement a </span>real </em>notification system.</p>
<p><em>Applications<br />
<span style="font-style: normal;">One of the things I was really worried about after making the switch, was that the applications I&#8217;d grown to love on the iPhone, wouldn&#8217;t be there on the Nexus One. I was wrong.</span></em></p>
<p>While the Android Market features a fraction of what the iTunes App Store has, it&#8217;s only been around a fraction of the time. The built in Twitter and Facebook applications for Android are top notch, and beautifully integrate into the Contact list on the phone, as well as flow with the rest of the Android interface. While the Twitter application lacks some of the advanced features of the official iPhone Twitter App (aka Tweetie 2) it&#8217;s still a great application. The upcoming social networking platforms like Foursquare all have their official applications, as well as many others. To my great surprise, I&#8217;ve yet to be unable to find <em>the app I was looking for</em> in the Market. In many cases, the application developers have ported their programs to Android and in other cases, a nearly identical program exists. I don&#8217;t do a lot of gaming on my phone, so I can&#8217;t speak to the Market vs App Store in that respect, but there are plenty of other resources that can if you know where to look.</p>
<p>One thing the Market has that Steve Jobs would rather die before he allows is a open submission process. There are apps in the Market that <em>require</em> your phone to be &#8220;rooted&#8221; to function. (For you iPhone users, root = jailbreak+) &#8212; And beyond that, with the click of check box, non-market approved applications can be installed from any source.</p>
<p><em>Updates<br />
<span style="font-style: normal;">Because the Nexus One is the Google flagship phone, it&#8217;s been updated pretty frequently since it&#8217;s launch. Other Android phones have not been so lucky and official 2.2/Froyo updates for devices like the Droid and EVO have yet to be released, and some devices such as the Hero and Moment may never get official updates. My Nexus One came with Android 2.1 installed, and since then has been updated twice. Once as a full upgrade to Android 2.2 soon after unboxing, and again last night with a security patch. While the frequency of updates for all devices leaves something to be desired (and Apple has Google beat in this department) the method in which updates come really shakes Apple&#8217;s tree.</span></em></p>
<p><em><span style="font-style: normal;">The over the air update process for Android is something Apple should be looking into right now, if they&#8217;re not already. I have known too many iPhone owners who&#8217;ve never even plugged their phone into a computer, let alone sync&#8217;d and updated with iTunes. As a result, people on the iPhone 3G can still be running 2.0 firmware when there is 3.1.3 or 4.0 for their consumption.</span></em></p>
<p><em><span style="font-style: normal;">The manual update process for Android is fast, and fairly simple. On the Nexus One it&#8217;s simply a matter of copying the updated firmware to the SD card, rebooting the phone while holding down a magic button combo, and selecting the firmware update. The upgrade from 2.1 to 2.2 took around 5 minutes, and the patch last night was about 2 minutes. This includes copying the file to the card and booting the device into the update mode. Most times it takes iTunes/iPhone this long to even begin the process syncing to tell you there is an upgrade for the phone. Then there is a process of writing the entire upgraded firmware to the phone (300MB) instead of just what needs updating (900KB) &#8212; in my view, Android wins. For anyone technical enough to read this website, the manual update process should be a cakewalk.</span></em></p>
<p><em><span style="font-style: normal;">For the average non-technical user who actually does sync, and stays up to date, the iTunes method is probably superior to the manual update method&#8230; but nothing beats over the air updates.</span></em></p>
<p><em><span style="font-style: normal;"><strong>Final</strong></span></em></p>
<p>In conclusion, I have found the Nexus One to be superior for my needs as a power user. If you&#8217;re the type of person who buys an iPhone just to jailbreak it soon after, or finds themselves restricted by Apple&#8217;s methods, then Android is the obvious choice to switch to. The Nexus One, while not fully superior hardware wise to the iPhone 4, can hold it&#8217;s own in processing power, and when combined with Google&#8217;s fully integrated and yet open platform, is a win-win.</p>
<p>I&#8217;ve been very happy thus far with my choice to switch, even from the latest and greatest that Apple has to offer.</p>
]]></content:encoded>
			<wfw:commentRss>http://js-kit.com/rss/techvirtuoso.com/p=1227</wfw:commentRss>
		<slash:comments>12</slash:comments>
		</item>
		<item>
		<title>Not everything made by Cisco is made of gold</title>
		<link>http://techvirtuoso.com/2010/03/08/not-everything-made-by-cisco-is-made-of-gold/</link>
		<comments>http://techvirtuoso.com/2010/03/08/not-everything-made-by-cisco-is-made-of-gold/#comments</comments>
		<pubDate>Mon, 08 Mar 2010 20:14:36 +0000</pubDate>
		<dc:creator>Jake Sonelly</dc:creator>
				<category><![CDATA[Featured]]></category>
		<category><![CDATA[IT Technology]]></category>
		<category><![CDATA[Review]]></category>
		<category><![CDATA[asa]]></category>
		<category><![CDATA[cisco]]></category>
		<category><![CDATA[linksys]]></category>
		<category><![CDATA[network]]></category>
		<category><![CDATA[vpn]]></category>

		<guid isPermaLink="false">http://techvirtuoso.com/?p=1005</guid>
		<description><![CDATA[The scenario:  You’ve found yourself working at a company that is  experiencing phenomenal growth.  The employees have actually decupled  in the past year and show no signs of slowing in the near future (on  this note, when was the last time you saw the “decupled”  in print?). You have inherited a [...]]]></description>
			<content:encoded><![CDATA[<p><strong><a rel="attachment wp-att-1014" href="http://techvirtuoso.com/2010/03/08/not-everything-made-by-cisco-is-made-of-gold/newciscologo/"><img class="alignright size-medium wp-image-1014" style="margin-right: 10px; margin-left: 10px; border: 0pt none;" title="NewCiscologo" src="http://techvirtuoso.com/wp-content/uploads/2010/03/NewCiscologo-136x80.png" alt="" width="136" height="80" /></a>The scenario</strong>:  You’ve found yourself working at a company that is  experiencing phenomenal growth.  The employees have actually decupled  in the past year and show no signs of slowing in the near future (on  this note, when was the last time you saw the “<a href="http://www.merriam-webster.com/dictionary/decuple" target="_blank">decupled</a>”  in print?). You have inherited a network that is truly a  Frankensteinian creation that not even the original architects  understand any more.  You have noticed that you neither have a working  firewall nor a decent VPN system, though Cisco VPN is used by a handful  of key employees to connect to a Cisco 1800 series router.  The IP  scheme for the organization, which spans three sites, is using the  192.x.x.x address space. You wish to straighten everything out with a  minimum of downtime and as seamless as possible for the end-users.  What  do you do?</p>
<p>Well, instead of telling you what to do, allow me to tell you what  not to do.  Not just that, let me drill into your collective skulls what  not to do.  Are you ready?  Here it comes:</p>
<p>Do not, and this is  key, so write it down… do <span style="text-decoration: underline;"><em>not</em></span> buy a <a href="http://www.cisco.com/cisco/web/solutions/small_business/products/security/SA_500/index.html" target="_blank">Cisco SA 500</a> series device.</p>
<p><span id="more-1005"></span>Did you get all that down?  Now, I know some of you are thinking,  “Wait a minute there, sir!  Cisco makes excellent business systems!  I  am shocked at your lack of understanding!”  For those of you saying  that, you have probably used something like the <a href="http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/prod_brochure0900aecd80402e36.html" target="_blank">Cisco ASA 5505</a> to wrangle your network and think Cisco  walks on water.  It&#8217;s okay&#8230; until recently I was one of you.  I’m here  to tell you that putting the SA 500 in the same category as the ASA 5505  is akin to putting your child’s refrigerator “art” in the same category  as the Mona Lisa (sorry, moms).</p>
<p>Here’s the lowdown on this “Security Appliance” that will be the  bane of your existence.   First, the unit is essentially and enhanced  and rebranded Linksys product <a href="http://bmighty.informationweek.com/blog/main/archives/2009/09/cisco_refreshes.html" target="_blank">meant for small businesses</a>.  Now, I like that Cisco  bought Linksys when it comes to home and small business products and up  until meeting this hardware from hell, I had thought the merger would  never go wrong. So what is so wrong with something like this?  Well, if  you like certain features like a command-line interface, support for any  VPN client other the Linksys (whoops, I mean, “Cisco”) QuickVPN and  other things you&#8217;ve come to expect from a Cisco device, than you’ll  understand the issue I have with this product.</p>
<p>Second, the price points for these units are right up there with the  vastly superior ASA 5505.  You’re paying the same price for this <a href="http://www.time.com/time/specials/2007/article/0,28804,1658545_1658533_1658529,00.html" target="_blank">Yugo</a> of a device as you would for one equaling a  Camaro.  Why would someone in their right mind do something like this?   Let me tell you how someone could be misguided into purchasing this  unit.  Unlike the ASA 5505, the SA 500 allows you to integrate <a href="http://www.verisign.com/authentication/enterprise-authentication/enterprise-otp/" target="_blank">Verisign’s One-Time Password</a> service for VPN  access.  Now, I understand how OTP is a good thing, but for a  medium-sized company, I’ve found tying <a href="http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00806de37e.shtml" target="_blank">VPN access to AD Authentication (using IAS)</a> is not a  bad alternative (especially if you’re using <a href="http://technet.microsoft.com/en-us/library/dd277328.aspx" target="_blank">best security practices</a> and least user access).</p>
<p>So, let’s say you are okay with the lack of Cisco VPN support and  you’re young, so you love purely web-based GUI interfaces (This is you  if you&#8217;ve ever thought &#8220;Command line&#8230; what is this, 1985?&#8221;).  What  other issues would you run into?  Well, for one, the SA 500 doesn’t allow  you to activate support for QuickVPN unless you’re on a 10.x.x.x  network.  So, you know, you would have to redo your entire corporate IP  scheme.  If that isn’t doing it for you, keep in mind that there is a  big difference between Cisco VPN and Linksys/Cisco QuickVPN:</p>
<div style="padding-left: 30px;"><strong>Cisco VPN</strong>: VPN client creates  a virtual interface on your computer. This allows you to route traffic  to the tunnel and get an IP address from the host.  This also allows for  name translation via internal DNS and other features.</p>
<p><strong>QuickVPN</strong>: VPN client only encrypts the traffic to the other  end. It does not use a virtual interface. You will only have your local  IP address when connected (this means if the user happens to share the  same IP scheme as the host, they can&#8217;t connect).  Also, QuickVPN tunnels  do not pass NetBIOS broadcast packets, meaning there is no name  translation without Host-file editing.</p>
</div>
<p>The SA 500 still looking that great to you?  Remember that  since there is no CLI, you’ll be unable to simply copy the config from  your old Cisco Switch over to your new model, so there will be  considerable downtime.  This will be far from seamless and, I would  expect, cause massive amounts of user headache.</p>
<p>So, if you’re going to be buying a new Cisco device, and your  company has more than 10 &#8211; 20 users… do everyone a favor and purchase a  Cisco ASA 5505, everyone will thank you.  Now then, I need to get back to  trying to hammer this square peg into this round hole here.</p>
]]></content:encoded>
			<wfw:commentRss>http://js-kit.com/rss/techvirtuoso.com/p=1005</wfw:commentRss>
		<slash:comments>5</slash:comments>
		</item>
		<item>
		<title>Why lazy sysadmins and IE 6 make the net unsafe</title>
		<link>http://techvirtuoso.com/2010/01/16/why-lazy-sysadmins-and-internet-explorer-6-make-the-net-unsafe/</link>
		<comments>http://techvirtuoso.com/2010/01/16/why-lazy-sysadmins-and-internet-explorer-6-make-the-net-unsafe/#comments</comments>
		<pubDate>Sat, 16 Jan 2010 16:14:32 +0000</pubDate>
		<dc:creator>Michael Stanclift</dc:creator>
				<category><![CDATA[Editorial]]></category>
		<category><![CDATA[Featured]]></category>
		<category><![CDATA[dep]]></category>
		<category><![CDATA[Google]]></category>
		<category><![CDATA[ie6]]></category>
		<category><![CDATA[ie7]]></category>
		<category><![CDATA[ie8]]></category>
		<category><![CDATA[lazy]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[sysadmin]]></category>
		<category><![CDATA[vista]]></category>
		<category><![CDATA[windows]]></category>
		<category><![CDATA[Windows 7]]></category>
		<category><![CDATA[xp]]></category>

		<guid isPermaLink="false">http://www.ntexec.com/?p=922</guid>
		<description><![CDATA[The number of businesses still using Internet Explorer 6 is painful to see. Coupled with the fact that all of them are on Windows XP or Windows 2000, it turns from pain into terror, especially when it comes to security.
For a lot of system administrators, the reasons to stay outweigh the reasons to upgrade. Websites [...]]]></description>
			<content:encoded><![CDATA[<p><a href="http://techvirtuoso.com/wp-content/uploads/2010/01/mw_ie6_03.gif"><img class="alignright size-thumbnail wp-image-925" style="margin-left: 10px; margin-right: 10px;" title="mw_ie6_03" src="http://www.ntexec.com/wp-content/uploads/2010/01/mw_ie6_03-150x150.gif" alt="" width="150" height="150" /></a>The number of businesses still using Internet Explorer 6 is painful to see. Coupled with the fact that all of them are on Windows XP or Windows 2000, it turns from pain into terror, especially when it comes to security.</p>
<p>For a lot of system administrators, the reasons to stay outweigh the reasons to upgrade. Websites that break, plugins that won&#8217;t load, old software that isn&#8217;t updated anymore. Trust me, I&#8217;ve been there. However, a lot of it boils down to lazy and poor practices of system administration.</p>
<p>Yes, you&#8217;re lazy and you&#8217;re bad at your job. Internet Explorer 6 was released in 2001. Yes, 2001, most of us don&#8217;t even drive cars that old, let alone unleash people on the &#8220;information superhighway&#8221; with a browser that old. It was designed at a time when security was not the issue it is today. It was designed to work on operating systems like <strong>Windows 98 and Windows ME. </strong>Would you let people use Windows ME on your network? No! So why are you letting them use a browser that was built for it?!<span id="more-922"></span></p>
<p>&#8220;But it&#8217;s not our fault, we don&#8217;t write the bad software, or the non-compliant websites.&#8221;</p>
<p>You&#8217;re right, you don&#8217;t. But you have the responsibility and the power to keep your network, and the rest of the Internet safe.</p>
<p>The replacement for IE6 has been out now for just under 4 years. Actually, the replacement for it&#8217;s replacement has been out almost a year. Meaning all you lazy administrators had <strong>two chances</strong> to migrate your systems over to an updated browser. Yes, you&#8217;re lazy. If you have applications that &#8220;require&#8221; Internet Explorer 6, the decision should have been made to dump them or upgrade them long ago. A line in the sand should have been drawn that said you were not willing to support such an old and insecure piece of software.</p>
<p>Why is this such a big deal? Because security threats targeting users of Internet Explorer 6 continue to threaten the security of the Internet, and of your own network. Just this week, Microsoft admitted that IE6 was one of the vectors used to attack companies like Google. Why is Google still using Internet Explorer 6? Or I guess a better question is, why is Google even using Internet Explorer at all, when they develop Chrome? Either way, it&#8217;s disappointing to see that a company like Google, who tends to be on the bleeding edge of updates, is doing something stupid like running a almost decade old browser.</p>
<p>The most recent threat, has no effect on users of Internet Explorer 7 or 8, even on Windows XP. Actually, Jonathan Ness over at <a href="http://blogs.technet.com/srd/archive/2010/01/15/assessing-risk-of-ie-0day-vulnerability.aspx">MSRC Engineering</a> put together a nice little chart explaining what browsers and operating systems are at risk with the latest attack vector.</p>
<p><a href="http://techvirtuoso.com/wp-content/uploads/2010/01/table.png"><img class="size-full wp-image-924 alignnone" title="table" src="http://techvirtuoso.com/wp-content/uploads/2010/01/table.png" alt="" width="588" height="277" /></a></p>
<p>The short of it, if you&#8217;re still running Windows 2000 on workstations, you should be fired. If you&#8217;re running Windows XP and Internet Explorer 6, you should march into your CIO&#8217;s office on Monday and demand that you <em>at least </em>figure out how to migrate to Internet Explorer 7 ASAP, meanwhile worry that your network isn&#8217;t the next one to be attacked by these unpatched exploits. If you&#8217;re running Internet Explorer 7, you should turn DEP on to prevent future threats, or see if migrating to Internet Explorer 8 is possible.</p>
<p>But really, for the small group who has already migrated to Windows Vista or Windows 7, enjoy your weekend.</p>
<p>To all my fellow sysadmins out there: <strong>Stop being lazy, and start securing your networks.</strong></p>
]]></content:encoded>
			<wfw:commentRss>http://js-kit.com/rss/techvirtuoso.com/p=922</wfw:commentRss>
		<slash:comments>3</slash:comments>
		</item>
		<item>
		<title>Access Denied: Giving users local administrator permissions on their machine?</title>
		<link>http://techvirtuoso.com/2009/12/08/access-denied-giving-users-local-administrator-permissions-on-their-machine/</link>
		<comments>http://techvirtuoso.com/2009/12/08/access-denied-giving-users-local-administrator-permissions-on-their-machine/#comments</comments>
		<pubDate>Tue, 08 Dec 2009 14:56:36 +0000</pubDate>
		<dc:creator>Michael Stanclift</dc:creator>
				<category><![CDATA[Featured]]></category>
		<category><![CDATA[IT Technology]]></category>

		<guid isPermaLink="false">http://techvirtuoso.com/?p=813</guid>
		<description><![CDATA[A recent email discussion over a education security listserv got me thinking about the topic of giving users administrator rights to their local machines. This is a common discussion that comes up about once every month or so, when ever someone new joins the group. The discussion usually starts by asking for methods of removing [...]]]></description>
			<content:encoded><![CDATA[<p>A recent email discussion over a education security listserv got me thinking about the topic of giving users administrator rights to their local machines. This is a common discussion that comes up about once every month or so, when ever someone new joins the group. The discussion usually starts by asking for methods of removing administrator access in environments where rights have already been given, and then nosedives into a long discussion about the ethical and practical reasoning behind it.</p>
<p>There seems to be two schools of throught about all of this.</p>
<ol>
<li>Lock the user out of everything that would prevent malware from being installed or the user installing software they&#8217;re not suppose to, at the expense of user frustration and IT time spent approving and installing software requested by users.<br />
<em>Basically, the users are stupid and cannot be trusted. IT will have to monitor them.</em></li>
<li>Give the user access to everything and let them install whatever they want, at the expense of user frustration and IT time spent removing software they&#8217;re not suppose to have and malware that have been installed as a result.<br />
<em>Basically, trust the users and clean up after their messes when they don&#8217;t understand what they&#8217;re doing.</em></li>
</ol>
<p>In an educational setting, specifically in higher education, you have a lot of competing interests. You&#8217;re a business, selling a product (education) and have to compete with other businesses (schools) to gain more customers (students) &#8212; therefore, security like what you&#8217;d have at any enterprise is necessary. However, you have a group of highly educated and often times very ego-centric individuals called faculty that feel they have a right to gain access to anything and everything in order for them to independently do their job without interruption from IT, or having to ask them for assistance. I would imagine it&#8217;s something like working with engineers, but in this case 95% of the people have no idea how to use a computer. Last but not least, the university is an ISP, providing Internet access to students and employees on their personal machines. But that&#8217;s a topic for a future entry.</p>
<p>The idea that users need administrative access to their computer or that they somehow have a right to it is wrong in my opinion. When I go into my office, I have services provided to me by other departments on campus that I do not have full control over. If I need a light bulb replaced in my office, do I have a key to go do it myself or do I just call Physical Plant and have them come over? Sure it&#8217;d be faster and probably easier for plant to just go take care of it myself. Just because you can give someone full access to a machine, and they&#8217;re used to it at home, doesn&#8217;t mean they should have that access at work.</p>
<p>I have full access to the thermostat at home (well, I take that back&#8230; my wife does&#8230; I&#8217;m just a user there too) but I can&#8217;t just go adjusting the HVAC system at work how I want.</p>
<p>We make as much software as possible that we&#8217;ve pre approved user-installable through Group Policy Software Deployment and soon though System Center once we have that up and running. Our staff maintains a repository of approved software installs that require us to do it, so when the user cannot do it themselves it only takes us a few minutes. If a user walks up to our support center, we can usually get the software installed on their laptop right away. We&#8217;ve given our Help Desk very easy to use remote access software and can usually get stuff installed for them within 24 hours, if not as soon as they call in or email.</p>
<p>Does malware still get installed on systems where users lack administrative access? Yes. Which brings me to another point.</p>
<p>You also need to look at the amount of damage that can be done in the time period where a user with administrative access disables anti-virus to install something, or even where the AV client doesn&#8217;t detect it and the user isn&#8217;t aware enough to see what has happened. A few years ago, the malware was about annoying the user or deleting files, but as it has changed to becoming a security breach where data can be stolen often without the user even seeing they&#8217;ve been infected.</p>
<p>My wife works for a multinational accounting services firm, where she and her co-workers have access to information that would probably make any hacker wet their pants with excitement. Yet, they have administrative access to their company issued laptops, since they spend most of their time outside of the corporate office. In one case, she told me where one of her co-workers went weeks with a system she knew was infected with porn-popups, yet was &#8220;too busy&#8221; to do anything about it, like take it into the office and let IT look at the system. Did she know better? Despite required company IT education and training, probably not. Did my wife? You betcha.</p>
<p>That infection may have been harmless, or just designed to generate traffic to your friendly neighborhood porn site, but would the next one be so lucky? Sure, you may put good AV on systems and monitor them daily, but they can&#8217;t catch everything. It seems like we should be fighting to do everything in our power to prevent this from happening, even if it means it&#8217;s more difficult for the user and IT. The risk of not doing so outweighs the easy of use.</p>
<p>Do your users have administrative rights? Why or why not?</p>
]]></content:encoded>
			<wfw:commentRss>http://js-kit.com/rss/techvirtuoso.com/p=813</wfw:commentRss>
		<slash:comments>10</slash:comments>
		</item>
		<item>
		<title>What the heck are we doing here?</title>
		<link>http://techvirtuoso.com/2009/11/19/what-the-heck-are-we-doing-here/</link>
		<comments>http://techvirtuoso.com/2009/11/19/what-the-heck-are-we-doing-here/#comments</comments>
		<pubDate>Fri, 20 Nov 2009 03:13:28 +0000</pubDate>
		<dc:creator>Michael Stanclift</dc:creator>
				<category><![CDATA[Featured]]></category>
		<category><![CDATA[News]]></category>

		<guid isPermaLink="false">http://techvirtuoso.com/?p=708</guid>
		<description><![CDATA[So first off, on behalf of all of us, I want to apologize for not being around much in the last couple of months. Things of have been busy for all of us. We&#8217;ve also been trying to sort out what we&#8217;re going to do with this project.
Most of you know, when the five principles [...]]]></description>
			<content:encoded><![CDATA[<p>So first off, on behalf of all of us, I want to apologize for not being around much in the last couple of months. Things of have been busy for all of us. We&#8217;ve also been trying to sort out what we&#8217;re going to do with this project.</p>
<p>Most of you know, when the five principles of this site left Neowin back in July, we did so with the intent of starting a new site. But without getting into all the details&#8230; life got in the way. We really want to make the project successful, but we now see that we&#8217;ve been going about it in the wrong way.</p>
<p>The core idea behind founding TechVirtuoso was a sound one. Business IT people talking about business IT. Or as we say on the website &#8220;Enterprise technology for and by those who live it&#8221; &#8230; the elements we&#8217;ve laid out in the original charter for this site were good, but placed us in an area that is a bit too strict for what we could be doing.</p>
<p>Let&#8217;s face it, none of us are reporters. We&#8217;re IT people. Us trying to &#8220;report&#8221; on events in such a neutral and unbiased way as we&#8217;ve planned out, is not only difficult for us, but isn&#8217;t that interesting to you, the reader.</p>
<p>So this is what TechVirtuoso will be from this point forward. A place to talk about the projects we&#8217;re working on, ideas we have, concepts we&#8217;ve developed. When we find something we find interesting, we&#8217;ll talk about it, not feeling like we have to go out and &#8220;report&#8221; about news. When we started out on this project originally I was wrong in thinking that we needed to be structured in a way that produced unopinionated content&#8230; hearing the opinion of other IT people is exactly what we&#8217;re going to be about from this point forward.</p>
<p>Obviously, we need to talk about news, but why not do so in a way that allows us to show others about ourselves, and the things that interest us&#8230; instead of just being drones? When I think about what I&#8217;d want to see in a business IT site, it&#8217;s not just press releases and the latest buzzwords. I want to see how it&#8217;s going to help me do my job better. How it&#8217;s going to make my users happy &#8212; or really anger them. It would be much more interesting to others, to see how real IT people in other areas are actually using that technology.</p>
<p>From this point forward, we seek to turn this site into an &#8220;business IT lifestyle blog&#8221; &#8230; which also means talking about other non-enterprise things that we&#8217;re interested in.  None of us can go home from work and turn the IT world around us off. So we&#8217;re going to talk about all the IT around us, from the perspective of an IT professional. We live in a world where business IT features quickly make their way down to the consumer world, and vice versa.</p>
<p>So in addition to content, we&#8217;re going to be making a few other changes around here. The layout is going to get a facelift. We&#8217;ve also turned off our forums, because we&#8217;re not in the business of building those right now.</p>
<p>We hope that you enjoy the new TechVirtuoso. I know we&#8217;re going to enjoy creating it.</p>
<p><strong>Thanks,<br />
Michael Stanclift<br />
Shane Pitman<br />
Frank Owen<br />
Don Smith<br />
Eric Iles</strong></p>
]]></content:encoded>
			<wfw:commentRss>http://js-kit.com/rss/techvirtuoso.com/p=708</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
