MY PROFILE | PRIVACY 
Vol. 15, #18 - Apr 26, 2010 - Issue #776
Is It Necessary To Defrag Virtual Machines?

This issue of WServerNews is sponsored by
  1. Editor's Corner
    • Is It Necessary To Defrag Virtual Machines?
    • Automated Malware Analysis
    • Know Any College Kids Who Are Good At Cyber Security?
    • Sci-Fi Writers' Quotes Of The Week
  2. Admin Toolbox
    • Admin Tools We Think You Shouldn't Be Without
  3. Webinars & Seminars
    • VIPRE Email Security for Exchange Product Demonstration - 4/27
    • Webcast: Patch Plus AV: Protect More, Save Time, Spend Less 4/29
  4. Tech Briefing
    • SURVEY: Is Virtualization Helping Or Hurting Uptime?
    • Careers Slideshow: 10 Hottest IT Freelance Skills
    • Microsoft Introduces Cloud-based Win7 Desktop Management App
    • A Whole Bunch Of '2010' Code RTM'ed
    • Your BlackBerry's Dirty Little Security Secret
    • Why Aren't Solid State Disks Getting Cheaper?
    • How McAfee turned a Disaster Exercise Into a REAL Learning Experience for Our Community Disaster Team
  5. Windows Server News
    • Microsoft Says SQL Server 2008 R2 Brings BI To The Masses
    • Windows Server 2008 R2 Active Directory spotlight
    • Understanding Server Security In The Cloud
    • Virtual Desktop Infrastructures And The Private Cloud
    • Hyper-V Virtualization Security Guidelines And Tips
  6. Third Party News
    • Sunbelt and Malwarebytes Partner to Improve Internet Security
    • New Malware Can Take Control Of Macs - VIPRE MAC Client Underway
    • VIPRE Antivirus Premium Awarded ICSA Labs Certification
    • VIPRE Enterprise & CounterSpy Enterprise Hotfix 2
  7. WServerNews Fave Links
    • This Week's Links We Like. Tips, Hints And Fun Stuff.
  8. WServerNews - Product of the Week
    • Watch a Demo Get a $20 Amazon.com Gift Card
Watch a Demo Get a $20 Amazon.com Gift Card

iPrism Web Filter, the TCO leader in Web Security, is a comprehensive appliance with easy setup & zero maintenance. iPrism doesn't require ANY changes to your current network, even Citrix! Watch a demo of iPrism & get a $20 Amazon.com Gift Card for your time.
http://www.wservernews.com/100426-iPrism

Editor's Corner

Is It Necessary To Defrag Virtual Machines?

The Pivot Point technical blog written by VMware performance guru, Scott Drummonds, asked this question March 1st this year. Their second take on April 14 was filled with a series of performance graphs that show some interesting benefits of guest defragmentation. There is an expression though, that goes: "Consider the source". In this case, the tests were done by VMWare partner Raxco, a company selling defragmenting products.

Obviously, positive tests would benefit them. However, I have known the people at Raxco for more than 20 years, and I'm sure their tests are not falsified. You should check out the graphs and form your own opinion. One particular data point stood out: the average I/O latency dropped from about 55 ms to less than 4 ms. While this is a phenomenal number, the increase depends on characteristics of the storage system, so the mileage in your own environment may vary significantly.

One of the people that commented on the blog said: "I remain cautiously optimistic of the value of guest defragmentation. I think the exchange of small I/O for large I/O is indisputably a Good Thing. However, virtual environments are very complex and I harbor some concerns about guest defragmentation in virtual environments that must be considered".

It's an interesting question to ponder. Perhaps try it out and do your own test with products like Diskeeper and PerfectDisk. Here is the blog post with the performance results:
http://www.wservernews.com/100426-Guest-Defragmentation


Automated Malware Analysis

Need to defend against a fire-hose of malware pouring in?

Sunbelt's new CWSandbox Version 3 will help you. It's the industry's premier automated malware analysis tool. It's flexible, scalable, and fully automated so you can monitor and report on the behavior of suspect samples.

You can quickly analyze the behavior of suspect files by executing a sample inside the secure sandbox and record all malicious activity including system changes, network traffic, API calls, and much, much more.

With Sunbelt's Sandbox V3 you have the power to analyze virtually any Windows application or file including infected documents, malicious URLs and PDFs, custom applications and scripts in Flash ads.

Unlike other analysis tools in the market today, CWSandbox gives you true automation. If you are entrusted with your organization's cyber-security, you need the ability to quickly respond to targeted attacks and other threats, while saving your valuable time and resources.

Fill out the request info form for your quote:
http://www.wservernews.com/100426-CWSandbox


Know Any College Kids Who Are Good At Cyber Security?

Do you know any college kids who are good at cyber security and go to school in New York, Delaware, or California? If yes they can get an all expenses paid scholarship to cyber camps this summer that could give them an inside track to the coolest jobs in the coolest places in cyber security. That's also where you will find data on how cyber-security- talented high school kids all over the country can qualify for full four year college scholarships (with summer internships):
http://www.wservernews.com/100426-Cyber-Challenge


Sci-Fi Writers' Quotes Of The Week

"To doubt everything or to believe everything are two equally convenient solutions; both dispense with the necessity of reflection." -- Jerry Pournelle

"Never insult anyone by accident." -- Robert A. Heinlein




Warm regards, and thank you for being a WServerNews subscriber. No trees were killed in the sending of this message, but a large number of electrons were terribly inconvenienced. Please tell your friends about us. They can subscribe here:
http://www.wservernews.com/100426-Subscribe

PS: Did you know this newsletter has a sister publication for XP users called WXPnews? You can subscribe here, and tell your friends:
http://www.wservernews.com/100426-WXPNews

PPS: And now we have our new Win7News! You can subscribe here, and tell your friends:
http://www.wservernews.com/100426-Win7News

Hope you enjoy this issue of WServerNews! Warm regards, Stu Sjouwerman  |   Email me: [email protected]

Don't Get Caught with Your Compliance Down

Know that feeling when you realize you forgot to do something really important? That's how you'll feel when your company is involved in legal proceedings, and you overlook something during the e-discovery. The consequences could be devastating. Judges are not amused with lost or destroyed evidence, and your organization could be fined millions of dollars. Worse, you could lose a court case that could otherwise be won. Avoid such a scenario with SEA. Sunbelt Exchange Archiver is affordable archiving for SME's. Ask for your quote here:
http://www.wservernews.com/100426-Sunbelt-Exchange-Archiver


Admin Toolbox

Admin Tools We Think You Shouldn't Be Without

Watch a demo of iPrism & get a $20 Amazon.com Gift Card for your time.
http://www.wservernews.com/100426-AT-iPrism

Download an exclusive free eBook, Essentials of Effective File Security by Greg Shields, and a free 30-day trial of Security Explorer from ScriptLogic:
http://www.wservernews.com/100426-Security-Explorer

More great free troubleshooting tools for Windows. Keep these tools handy for ironing out install issues, diagnosing application crashes, probing process activity, slaying resource hogs, and curing other Windows ills:
http://www.wservernews.com/100426-Troubleshooting-Tools


Webinars & Seminars

VIPRE Email Security for Exchange Product Demonstration - 4/27

Securing your Exchange Server is key to protecting your enterprise environment from spam, viruses, phishing, and other messaging threats. In this product demonstration, learn how the new version of VIPRE Email Security for Exchange (formerly Ninja Email Security) can help protect your network and cut your Exchange admin time in half with this powerful, policy-based email security product. Tuesday, April 27, 2010, 2:00pm - 2:30pm EDT
http://www.wservernews.com/100426-VIPRE-Email-Security


Webcast: Patch Plus AV: Protect More, Save Time, Spend Less 4/29

Join the CEOs of Shavlik Technologies and Sunbelt Software as they explore the power and value of pairing two best of breed technologies in a single, easy-to-use Agent. It's been nearly a year since Shavlik Technologies integrated Sunbelt Software's VIPRE Enterprise engine into the NetChk Protect Agent. Mark Shavlik and Alex Eckelberry will explain what they've learned from customers about the real value of reducing cost, complexity, and the number of agents you have to manage. Learn how Shavlik NetChk Protect Plus VIPRE Antivirus + Antispyware can help you:
  • Start managing your physical and virtual assets, software, patches, and AV in 30 minutes or less
  • Defend your networks against the top 4 threats faced by SMBs
  • Eliminate the impact of heavy weight AV on system resources like CPU and memory
  • Reduce the amount of time and IT resources needed to protect your machines against today's viruses, worms, rootkits, and botnets AND patch Microsoft and 3rd party applications -- all for about the price of what the Big 3 AV vendors charge you just for AV
Register At:
http://www.wservernews.com/100426-Patch-Plus-AV


Tech Briefing

SURVEY: Is Virtualization Helping Or Hurting Uptime?

Does your network deliver acceptable level of uptime? Have you virtualized your environment and if so, has virtualization enabled your organization to achieve better economies of scale and improved server and application availability? Is your server infrastructure getting the job done? Sunbelt Software and ITIC would like your experience. We've created a new survey. The questions are straightforward and it should take less than 5 minutes to complete. All responses are kept confidential. And once again, anyone who completes the survey is eligible to win one of two (2) free personalized iPods! To be eligible to win the iPods you must leave your Email address along with your comment in the final question comment box. Here's the link:
http://www.wservernews.com/100426-Survey


Careers Slideshow: 10 Hottest IT Freelance Skills

Full-time IT job growth may be relatively stagnant, but online freelance marketplace company Elance says IT contract gigs are going like gangbusters. Elance reported this week that the number of job posts for IT workers increased during first quarter by 29 percent compared to first quarter of 2009, and that freelance workers earned 35 percent more year over year. The following 10 skills were the most in demand by those hiring these workers on Elance, with the dollar value of the contracts earned:
http://www.wservernews.com/100426-IT-Freelance-Skills


Microsoft Introduces Cloud-based Win7 Desktop Management App

This week, Redmond announced the beta release of Windows Intune, a cloud-based Win7 desktop management service for mid-sized customers (25-500 PCs). This new product was built to facilitate the management and security of Win7-based PCs from "virtually anywhere". As part of the beta release, they are making the service available to 1,000 customers and partners in North America, and has committed making it generally available within a year of the beta release. Intune subscribers get rights to deploy Win7 Enterprise Edition (which you otherwise only get with Software Assurance), and also the Microsoft Desktop Optimization Pack:
http://www.wservernews.com/100426-Intune-Beta


A Whole Bunch Of '2010' Code RTM'ed

Redmond's engineering team was all enthused to share the news they went RTM with Office 2010, SharePoint 2010, Visio 2010 and Project 2010. MSFT also announced it released System Center Essentials 2010 (for SMB customers) and System Center Data Protection Manager (for enterprises) to manufacturing this week. SharePoint Server users have the most to gain from this release, which is due May 12 for volume-license holders and June 15 for consumers.

For the actual Office blogpost, this is the link:
http://www.wservernews.com/100426-Office2010-RTM

Regarding the System Center and DPM features, Network World has some good background data you should check out if you use either tool:
http://www.wservernews.com/100426-DPM2010-n-Service-Mgr2010

But Office 2010 could be hard sell for most enterprises. Like each new version of Microsoft's productivity application suite, Office 2010 offers some improvements over its predecessor. However, the lack of a star feature may make it unlikely to compel an enterprise to upgrade from Office 2007 -- unless, of course, you have rights through Software Assurance. More:
http://www.wservernews.com/100426-Office2010


Your BlackBerry's Dirty Little Security Secret

There are many creative ways for people to spy on you through your BlackBerry. A SOURCE Boston preview. Tyler Shields, senior member of the Veracode Research Lab, spends a lot of time picking apart those BlackBerry devices that are ubiquitous across the enterprise. What he's found may disappoint those who thought they were secure. At this week's SOURCE Boston conference, Shields will present his findings in a talk called "BlackBerry Mobile Spyware -- The Monkey Steals the Berries.

He'll explain how the bad guys can plant spyware on the device and make off with your sensitive data, and offer some advice on how users can defend themselves. He'll talk about an application called FlexiSpy, which allows users to get copies of SMS, call logs, e-mails, locations and listen to conversations within minutes of purchase. He quotes the FlexiSpy website as saying, "Catch cheating wives or cheating husbands, stop employee espionage, protect children, make automatic backups, bug meetings rooms, etc." Then there's Mobile Spy, which will "allow you to see exactly what they do while you are away," according to the website. "Are your kids texting while driving or using the phone in all hours of the night? Are your employees sending company secrets? Do they erase their phone logs?"
http://www.wservernews.com/100426-Security-Secret


Why Aren't Solid State Disks Getting Cheaper?

After the NAND flash memory market took a bath in 2007 and 2008 due to oversupply, prices in 2009 and 2010 have largely been flat or increased, and it will remain that way until new fabrication technology hits the market and manufacturers ramp up overall production. Read More
http://www.wservernews.com/100426-SSD


How McAfee turned a Disaster Exercise Into a REAL Learning Experience for Our Community Disaster Team

"Thanks to McAfee we were forced to test our response to a Disaster while in the midst of a real "disaster". The positive that came out of the exercise is the fact that we had a successful exercise while using our "backup" communication system. It was a true test of our ability to adjust to and respond to a disaster in less than perfect circumstances. Isn't that really what our goal was? We all know that many "disasters" having multiple components and today we saw firsthand how true that is: Real Life Story at SANS:
http://www.wservernews.com/100426-Disaster-Exercise


Windows Server News

Microsoft Says SQL Server 2008 R2 Brings BI To The Masses

Redmond announced the release to manufacturing of Microsoft SQL Server 2008 R2, its' platform for managing, accessing and delivering information. SQL Server 2008 R2 will be available to customers in early May through Microsoft's distribution and partner channels. Microsoft is touting SQL Server 2008 R2's managed self-service business intelligence (BI) for reporting and analysis as a key enhancement of the release, along with its' enterprise-class scalability and platform integration spanning the datacenter to the cloud. More:
http://www.wservernews.com/100426-BI-to-the-Masses


Windows Server 2008 R2 Active Directory spotlight

The latest version of Windows Server includes several new Active Directory features in areas such as backup, recovery and data management. Check out which enhancements are likely to have the greatest impact:
http://www.wservernews.com/100426-Active-Directory-Spotlight


Understanding Server Security In The Cloud

Security has become a major concern for organizations considering cloud computing services. Read this expert article to learn how to secure your cloud services and receive guidance on keeping your data safe from intrusion: (Registration Required)
http://www.wservernews.com/100426-Security-in-the-Cloud


Virtual Desktop Infrastructures And The Private Cloud

Are you thinking about hosting your desktop infrastructure in the cloud? Guarantee a smooth transition with these key tips on developing a private cloud: (Registration Required)
http://www.wservernews.com/100426-Infrastructures-Private-Cloud


Hyper-V Virtualization Security Guidelines And Tips

Despite the many beneficial features of Hyper-V, the hypervisor is not without security vulnerabilities. Read this article to gain insight into security tips and best practices to help protect your virtual environment: (Registration Required)
http://www.wservernews.com/100426-HyperV-Security-Guidelines


Third Party News

Sunbelt and Malwarebytes Partner to Improve Internet Security

Sunbelt announced that it has entered into a strategic partnership with Malwarebytes, the makers of malware cleaning tools to increase the security of the Internet.

Together, as an initial joint offering, Sunbelt Software and Malwarebytes have created a dedicated Website portal to offer consumers free tools to clean systems which have become so infested with malware that normal PC functions and performance are significantly hindered. The portal is at:
http://vipre.malwarebytes.org.

In addition to this initial first offering, the companies are also working together on a broad range of initiatives for sharing information on emerging threats, methods to mitigate risk, and other joint efforts.

For users dealing with infected PCs, the companies recommend visiting http://vipre.malwarebytes.org for immediate remediation. The site will allow users to run Sunbelt's VIPRE Rescue computer recovery solution, alongside Malwarebytes' Anti-Malware solution. VIPRE Rescue is updated daily and designed specifically to disinfect computers where the installation of any security software for malware remediation is not possible. Visitors to the site are also urged to run Malwarebytes' Anti-Malware, a leading anti-malware tool, aimed at cleaning up a variety of current and emerging malware threats facing home PCs. Running both tools provides a comprehensive dual-action system cleaning to repair PCs that are inoperable due to entrenched malware infestations.

"Malwarebytes is proud to be working with Sunbelt Software, a known leader in the fight against the growing challenges facing home PC users," said Marcin Kleczynski, CEO of Malwarebytes Corporation. "Our first collaboration provides an effective method for consumers to remediate malware infestation, and we look forward to future efforts together that will protect and educate home users on best practices for keeping PCs safe from current and future threats."
http://vipre.malwarebytes.org

New Malware Can Take Control Of Macs - VIPRE MAC Client Underway

It's no longer true that MACs are impervious to viruses. There are actually 115 known malware strains at the moment, developed for the MAC exclusively. The link below is an example of just one. Sunbelt is working on a VIPRE client for the MAC, and we should come out with that in the near future, we're targeting a Q2 launch:
http://www.wservernews.com/100426-Mac-Malware-Warning


VIPRE Antivirus Premium Awarded ICSA Labs Certification

VIPREŽ Antivirus Premium has received certification for Desktop/Server Anti-Virus Detection and Cleaning from ICSA Labs, an independent division of Verizon Business. VIPRE Antivirus Premium earned certification for its high-performance anti-malware protection, which includes desktop firewall.

"The growing volume of threats makes it more critical than ever to have access to reliable, high-performing endpoint security products that deliver fast, powerful and comprehensive malware protection," says Andrew Hayter, anti-malcode program manager at ICSA Labs. "Given the number of anti-malware options available to consumers, it is important that products are rigorously tested by a third-party certification body, such as ICSA Labs, to verify that high standards of quality and reliability are met."

VIPRE Antivirus Premium is designed to provide the fundamental, necessary desktop malware protection that users need in today's threat environment. Instead of creating a product loaded with "marketing" features (such as parental controls or online backup), Sunbelt focused on the core features that provide users with comprehensive protection - desktop firewall, host-based intrusion prevention (HIPS), malicious URL filtering and an intrusion detection system (IDS).

ICSA Labs Anti-Virus Certification is achieved by meeting all criteria aimed at preventing the end user from becoming infected by viruses in-the-wild, as well as the ability to detect and remove those viruses prior to causing infection. VIPRE Antivirus Premium protection is designed to ensure the proper detection of self-replicating viruses before they can do any damage to the host system, or compromise user data or security.
http://www.wservernews.com/100426-ICSA-Labs-Certification


VIPRE Enterprise & CounterSpy Enterprise Hotfix 2

Product Notification: VIPRE Enterprise & Counterspy Enterprise
Date: April 20th, 2010
Notification Type: Update

Product: VIPRE Enterprise & Counterspy Enterprise
Version: All
Operating System: All product-supported Operating Systems

Overview:

Sunbelt Software would like to inform you of our upcoming Hotfix 2 release for our CounterSpy Enterprise and VIPRE Enterprise 4.0 products. This update applies specifically to the agent software. Below is a summary of the changes in Hotfix 2:

Agent Hotfix 2 - CounterSpy Enterprise & VIPRE Enterprise Agents
  • Targeted release date: Wednesday, April 21, 2010 (late afternoon/early evening EDT)
The following items will be addressed in this release:
  • The HIPS driver in CounterSpy Enterprise and VIPRE Enterprise Agents will be removed, as this can result in undesired behavior.
  • Exclusions added to the Always Allowed list will now be obeyed, regardless of On-Access settings.
Note: this release will require updated agents to be rebooted.

We are planning a Hotfix 3 release for VIPRE Enterprise Premium agents on or around April 28th. This release includes fixes for the HIPS driver that is part of the firewall, and a fix to Admin-added Advertising URLs. More information on this release will be sent next week.

WServerNews Fave Links

This Week's Links We Like. Tips, Hints And Fun Stuff.



WServerNews - Product of the Week

Watch a Demo Get a $20 Amazon.com Gift Card

iPrism Web Filter, the TCO leader in Web Security, is a comprehensive appliance with easy setup & zero maintenance. iPrism doesn't require ANY changes to your current network, even Citrix! Watch a demo of iPrism & get a $20 Amazon.com Gift Card for your time.
http://www.wservernews.com/100426-iPrism-Demo