Forgot your password?
typodupeerror

Submission + - Anthem Blocking Federal Auditor from Doing Vulnerability Scans (digitalguardian.com)

chicksdaddy writes: File this one under "suspicious behavior." Anthem Inc., the Indiana-based health insurer has informed a federal auditor, the Office of Personnel Management, that it will not permit vulnerability scans of its network — even after acknowledging that it was the victim of a massive breach that leaked data on tens of millions of patients.

According to this article (http://www.healthcareinfosecurity.com/anthem-refuses-full-security-audit-a-7980/op-1), Anthem is citing "company policy" that prohibits third party access to its network in declining to let auditors from OPM's Office of the Inspector General (OIG) conduct scans for vulnerable systems. OPM's OIG performs a variety of audits on health insurers that provide health plans to federal employees under the Federal Employee Health Benefits Program, or FEHBP. Insurers aren't mandated to comply — though most do.

This isn't Anthem's first time saying "no thanks" to the offer of a network vulnerability scan. The company also declined to let OIG scan its network in 2013. A partial audit report issued at the time (http://www.opm.gov/our-inspector-general/reports/2013/audit-of-information-systems-general-and-application-controls-at-wellpoint-inc-1a-10-00-13-012.pdf) warned that the company, then known as WellPoint, "provided us with conflicting statements" on issues related to information security, including Wellpoint's practices regarding regular configuration audits and its plans to shift to IBM's Tivoli Endpoint Manager (TEM) platform.

Submission + - Linux and multiple internet uplinks: a new tool

Alessandro Zarrilli writes: Linux is able do multipath routing since a long time: it means being able to have routes with multiple gateways and to use them in a (weighted) round-robin fashion. But Linux misses a tool to actively monitor the state of internet uplinks and change the routing accordingly. Without it, on a LAN perspective, it's like having a RAID0 on network: just one uplink goes down and all of your LAN-to-WAN traffic goes down too. Documentation and examples on the subject are lacking, existing solutions are few and deeply integrated in firewall/routing specific distributions. To address these issues, a new stand alone tool was just released: Fault Tolerant Router. It also includes a complete (iptables + ip policy routing) configuration generator.

Comment Good IT is Possible (Score 1) 892

I worked in a large company as a help desk guy for several years. Most of the offices in the company were happy with their IT support. The IT staff was highly qualified. The IT managers were very good. The network admins that supported the servers did a great job. The WAN engineer guys did a great job. The IT Directors were brilliant when it came to figuring out ways to keep the end-user population happy. I realize this might be the exception rather than the rule. I feel fortunate to have worked in a good IT environment.

Slashdot Top Deals

The best things in life go on sale sooner or later.

Working...