New Websites Launched

Website Design getting very busy now, seem to be working on several at the same time, however have managed to launch a couple of new ones, Scottish Wedding Planners and Gus Thompson Photography just gone live. Check them out, give me some feedback!

IT Security Consulting Support | Edinburgh

After a long selection process we now provide IT Security Consulting Support to a National Company based in Edinburgh.

Our primary role will be to firstly secure the companies network, then provide managed security and networking support on a daily basis to ensure the integrity of the companies data.

The company mostly uses Cisco devices within the core of the network (ASA, Routers, MLS, VOIP etc..) which allows us to design a very secure system based on Cisco's Self Defending Network Topology.

We will also run a system of continuous Penetration Testing, obviously using other outside agencies to try and crack our security (not likely!) along with auditing and day to day monitoring of network usage.

New Websites Live!

Not had time to build any projects pages for these just yet, but some new websites have recently gone live, you can see them here;

Fleet Management Solutions
Office Outsource UK
The Joy of Life

Currently we are building websites for a Farm Shop, a Wine and Whiskey Shop and a London Based Antique Dealer, keep an eye on our projects page for information

Cisco Network | Project Update

A large Cisco Project we have been planning for has finally started for a company based in Edinburgh.

The initial backend Cisco Routers, Switches and ASA have been installed on-site and set to work (pre-staging and testing was already conducted back at Aerovision IT Main Office).

Old networking kit has been competely removed (sorry Dell and Netgear) and the company now only uses Cisco within it's core infrastructure.

Everything has gone according to plan, the company is contining to work as normal whilst we monitor the traffic and implement the extensive security policies.

The next major task will be the installation of Cisco VOIP Telephones throughout the companies Head Office and Call Centre.

Twitter

Do you twitter? Well we do now, you can follow us here: twitter/aerovisionit

Active Directory Project | UK Wide Deployment

After several weeks in planning we have now started to roll-out new Domain Controllers around the UK for a large retail company.

The primary purpose of this project is to allow the IT Support Department to have centralised control of their resources using Microsoft Active Directory Services.

Rolling-out the Domain Controllers is easy (if not time consuming bearing in mind their satellite locations are all over the place!), the tricky part is configuring the Site-to-Site Replication Scheme. However we have accounted for their current bandwidth and designed a replication interval around their current usage.

DNS, Active Directory and File Services are replicating nicely with all sites being configured as part of one large UK Wide Domain.

Each site is then listed in seperate Organistional Units for management and security.

IP Addressing also had to be considered, we have implemented a VLSM IP Addressing Scheme, this allows for large seperate subnets to be created for each location whilst retaining the ability for route summarisation.

Penetration Test

Last week we conducted a thorough Penetration Test for an Edinburgh based retail company.

The primary area of concern for this particular company was the integrity and security of data held on their Servers.

We conducted the test as a well planned staged event.

First of all prior to arriving onsite we attempted to gain as much information as possible about the company and its business from the public domain. This highlighted a couple of possible vulnerabilites related to Social Engineering.

Then we arrived onsite and initially checked for any Physical Security problems, again some more issues were quickly determined which could lead to the Server hardware itself from being compromised.

The Penetration Test quickly escalates to Network Mapping and Aggressive Scanning of the company LAN in an attempt to simulate malicious software installed on any of the companies Workstations.

From this we were able to formulate several attack patterns against their Servers which enabled us to retrieve data and ultimately compromise all security.

Various techniques were used, but primarlly the aim was to retrieve User Account and Password Data which could then be used to access the Servers. However, due to obvious restrictions, we do not actually finalise these attacks, nor do we attempt to damage or steal any data ourselves!

Ultimately once we know where the weaknesses are, we can then advise on an in-depth solution to prevent any future security problems.