<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Read, Deploy, Enjoy!</title>
	<atom:link href="http://www.kevintaber.com/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.kevintaber.com</link>
	<description>IT done stress free: A great place to share configurations and discover best practices</description>
	<lastBuildDate>Sat, 19 May 2012 05:27:41 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.2</generator>
		<item>
		<title>Solaris 11 iSCSI multipathing with Citrix XenServer</title>
		<link>http://www.kevintaber.com/2012/05/19/solaris-11-iscsi-multipathing-with-citrix-xenserver/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=solaris-11-iscsi-multipathing-with-citrix-xenserver</link>
		<comments>http://www.kevintaber.com/2012/05/19/solaris-11-iscsi-multipathing-with-citrix-xenserver/#comments</comments>
		<pubDate>Sat, 19 May 2012 05:27:40 +0000</pubDate>
		<dc:creator>ktaber</dc:creator>
				<category><![CDATA[Storage]]></category>

		<guid isPermaLink="false">http://www.kevintaber.com/?p=905</guid>
		<description><![CDATA[Here is a PDF of my configuration set up for the Solaris 11 host.
Perform a Manual IP install option when performing a text based install.
&#160;
I will update this later with XenServer content.
]]></description>
			<content:encoded><![CDATA[<p>Here is a <a href="http://www.kevintaber.com/pdf/Solaris11iSCSI.pdf">PDF </a>of my configuration set up for the Solaris 11 host.</p>
<p>Perform a Manual IP install option when performing a text based install.</p>
<p>&nbsp;</p>
<p>I will update this later with XenServer content.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.kevintaber.com/2012/05/19/solaris-11-iscsi-multipathing-with-citrix-xenserver/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>How to protect your Android from malware</title>
		<link>http://www.kevintaber.com/2012/05/16/how-to-protect-your-android-from-malware/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=how-to-protect-your-android-from-malware</link>
		<comments>http://www.kevintaber.com/2012/05/16/how-to-protect-your-android-from-malware/#comments</comments>
		<pubDate>Wed, 16 May 2012 13:33:52 +0000</pubDate>
		<dc:creator>ktaber</dc:creator>
				<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://www.kevintaber.com/?p=895</guid>
		<description><![CDATA[There are two things you can do to protect your Android device from an infection.

Only download apps from the Google Play store via your phone or the web site. (I cannot stress this enough!)
Install a free/paid antivirus app like Norton Antivirus &#38; Security

Primarily if you avoid 3rd party [...]]]></description>
			<content:encoded><![CDATA[<p>There are two things you can do to protect your Android device from an infection.</p>
<ol>
<li><strong><span style="line-height: 18px;">Only download apps from the <a href="https://play.google.com" target="_blank">Google Play</a> store via your phone or the web site. (I cannot stress this enough!)</span></strong></li>
<li><strong><span style="line-height: 18px;">Install a free/paid antivirus app like <a href="https://play.google.com/store/apps/details?id=com.symantec.mobilesecurity" target="_blank">Norton Antivirus &amp; Security</a></span></strong></li>
</ol>
<p><span style="line-height: 19px;">Primarily if you avoid 3rd party web sites to obtain your apps, you should be in the clear.</span></p>
<p><span style="line-height: 19px;">Try to pay attention to the company that is releasing the app and go with the manufacturer app rather than a random person&#8217;s. Of course there are reputable apps not made by the parent companies so look at download counts and things of that nature to see if it is safe to install.</span></p>
<p>Example: NortonMobile</p>
<p><a href="http://www.kevintaber.com/wp-content/uploads/2012/05/Google-Play-Company.png"><img class="alignnone size-full wp-image-896" title="Google Play Company" src="http://www.kevintaber.com/wp-content/uploads/2012/05/Google-Play-Company.png" alt="" width="269" height="208" /></a></p>
]]></content:encoded>
			<wfw:commentRss>http://www.kevintaber.com/2012/05/16/how-to-protect-your-android-from-malware/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Exchange Queue 452 4.3.1 Insufficient system resources</title>
		<link>http://www.kevintaber.com/2012/05/09/exchange-queue-452-4-3-1-insufficient-system-resources/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=exchange-queue-452-4-3-1-insufficient-system-resources</link>
		<comments>http://www.kevintaber.com/2012/05/09/exchange-queue-452-4-3-1-insufficient-system-resources/#comments</comments>
		<pubDate>Wed, 09 May 2012 14:57:57 +0000</pubDate>
		<dc:creator>ktaber</dc:creator>
				<category><![CDATA[Microsoft]]></category>

		<guid isPermaLink="false">http://www.kevintaber.com/?p=879</guid>
		<description><![CDATA[Scenario:
Users were unable to send emails from copiers to our Exchange 2007 SMTP server. Also, Queue Viewer on Exchange 2010 showed a lot of items stuck that were meant to journal to our 2007 Exchange server. In Queue Viewer, the Last Error was: 452 4.3.1 Insufficient system resources
&#160;
What h [...]]]></description>
			<content:encoded><![CDATA[<p>Scenario:</p>
<p>Users were unable to send emails from copiers to our Exchange 2007 SMTP server. Also, Queue Viewer on Exchange 2010 showed a lot of items stuck that were meant to journal to our 2007 Exchange server. In Queue Viewer, the Last Error was: 452 4.3.1 Insufficient system resources</p>
<p>&nbsp;</p>
<p>What had happened was that the Exchange 2007 server’s C drive was full. Without the minimum required free space, back pressure settings in Exchange stop inbound email flow. Knowing that the queue had filled my drive, I needed to act fast to restore mail flow.</p>
<p>&nbsp;</p>
<p>Rather than looking for places to cleanup on the C drive, it is quickest and easiest to move the database and logs of the Transport Queue to another drive. <strong>Beginning with Exchange 2007 SP1, a handy cmdlet has been provided to make this change.</strong></p>
<p>Open the Exchange Management Shell, and issue the following command (using your own path):</p>
<pre>Move-TransportDatabase.ps1 –QueueDatabasePath E:\Exchange\Transport\Queue –QueueDatabaseLoggingPath E:\Exchange\Transport\Queue -TemporaryStoragePath E:\Exchange\Transport\Queue\Temp</pre>
<p>&nbsp;</p>
<p>You can then go to your Exchange 2010 Queue Viewer and check your relay queue by right-clicking on the hub version 8 queue and choosing Retry.</p>
<p><em>Worth Mentioning: I also installed and ran <a href="http://www.piriform.com/ccleaner" target="_blank">CCleaner</a> with IIS Log Files checked in addition to the defaults, and it cleaned off 44GB of logs.</em></p>
<p>&nbsp;</p>
<p><span style="text-decoration: underline;">Sources</span></p>
<p>Exchange 2007 Back Pressure</p>
<p><a href="http://technet.microsoft.com/en-us/library/bb201658(v=exchg.80).aspx">http://technet.microsoft.com/en-us/library/bb201658(v=exchg.80).aspx</a></p>
<p>&nbsp;</p>
<p>Exchange 2010 Back Pressure (not used in this case, but good to know)</p>
<p><a href="http://technet.microsoft.com/en-us/library/bb201658.aspx">http://technet.microsoft.com/en-us/library/bb201658.aspx</a></p>
<p>&nbsp;</p>
<p><strong>Changing the location of the Queue Database for Exchange 2007</strong></p>
<p><strong><a href="http://technet.microsoft.com/en-us/library/bb125177(v=exchg.80).aspx">http://technet.microsoft.com/en-us/library/bb125177(v=exchg.80).aspx</a></strong></p>
<p><strong><a href="http://technet.microsoft.com/en-us/library/bb738141(v=exchg.80).aspx">http://technet.microsoft.com/en-us/library/bb738141(v=exchg.80).aspx</a></strong></p>
]]></content:encoded>
			<wfw:commentRss>http://www.kevintaber.com/2012/05/09/exchange-queue-452-4-3-1-insufficient-system-resources/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Windows Server 2008 R2 FTP client hangs or timesout</title>
		<link>http://www.kevintaber.com/2012/05/08/windows-server-2008-r2-ftp-client-hangs-or-timesout/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=windows-server-2008-r2-ftp-client-hangs-or-timesout</link>
		<comments>http://www.kevintaber.com/2012/05/08/windows-server-2008-r2-ftp-client-hangs-or-timesout/#comments</comments>
		<pubDate>Wed, 09 May 2012 03:57:05 +0000</pubDate>
		<dc:creator>ktaber</dc:creator>
				<category><![CDATA[Microsoft]]></category>

		<guid isPermaLink="false">http://www.kevintaber.com/?p=868</guid>
		<description><![CDATA[When connecting to an FTP server using the command line ftp client, you may notice that you can log in to a FTP server but can&#8217;t issue the ls or put commands. This is usually due to the Windows Firewall not playing nice with an Active, not Passive, FTP session.
Example of active mode FTP:
ftp&#038;gt [...]]]></description>
			<content:encoded><![CDATA[<p>When connecting to an FTP server using the command line ftp client, you may notice that you can log in to a FTP server but can&#8217;t issue the <strong>ls</strong> or <strong>put</strong> commands. This is usually due to the Windows Firewall not playing nice with an Active, not Passive, FTP session.</p>
<p>Example of active mode FTP:</p>
<p style="padding-left: 30px;">ftp&gt; ls</p>
<p style="padding-left: 30px;">200 PORT command successful.</p>
<p style="padding-left: 30px;">425 Failed to establish connection.</p>
<p>It is at this point though that the file listing never displays.</p>
<p>&nbsp;</p>
<p>Chances are it is a firewall issue. If you turned on the Windows Firewall Logging, you would notice the log file mention src-port 20 was blocked in the RECEIVING.</p>
<p><strong>Windows Firewall with Advanced Security &gt; Action &gt; Properties</strong></p>
<p><a href="http://www.kevintaber.com/wp-content/uploads/2012/05/Windows-Firewall-Properties.png"><img class="alignnone size-full wp-image-876" title="Windows Firewall Properties" src="http://www.kevintaber.com/wp-content/uploads/2012/05/Windows-Firewall-Properties.png" alt="" width="414" height="461" /></a></p>
<p><a href="http://www.kevintaber.com/wp-content/uploads/2012/05/Windows-Firewall-Logging.png"><img class="alignnone size-full wp-image-875" title="Windows Firewall Logging" src="http://www.kevintaber.com/wp-content/uploads/2012/05/Windows-Firewall-Logging.png" alt="" width="426" height="391" /></a></p>
<p><strong>Solution: Enter both of these in an Administrator command prompt:</strong></p>
<pre>netsh advfirewall firewall add rule name="File Transfer Program" dir=in action=allow program=%SystemRoot%\System32\ftp.exe enable=yes protocol=tcp</pre>
<pre>netsh advfirewall firewall add rule name="File Transfer Program" dir=in action=allow program=%SystemRoot%\System32\ftp.exe enable=yes protocol=udp</pre>
<p><strong>If you need to remove the new rules for any reason, use the following command:</strong></p>
<pre>netsh advfirewall firewall delete rule name="File Transfer Program" program=%SystemRoot%\System32\ftp.exe</pre>
]]></content:encoded>
			<wfw:commentRss>http://www.kevintaber.com/2012/05/08/windows-server-2008-r2-ftp-client-hangs-or-timesout/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Printing from IBM i or AS400 to HP LaserJets</title>
		<link>http://www.kevintaber.com/2012/05/07/printing-from-ibm-i-or-as400-to-hp-laserjets/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=printing-from-ibm-i-or-as400-to-hp-laserjets</link>
		<comments>http://www.kevintaber.com/2012/05/07/printing-from-ibm-i-or-as400-to-hp-laserjets/#comments</comments>
		<pubDate>Mon, 07 May 2012 14:41:01 +0000</pubDate>
		<dc:creator>ktaber</dc:creator>
				<category><![CDATA[Uncategorized]]></category>

		<guid isPermaLink="false">http://www.kevintaber.com/?p=863</guid>
		<description><![CDATA[The easiest documentation to follow is IBM Software Technical Document 19932815.
In that document you can find the link for the printer specific information needed for the MFRTYPMDL setting, as well as a configuration example.
Here is a screenshot of the parts of the IBM Software Technical Documen [...]]]></description>
			<content:encoded><![CDATA[<p>The easiest documentation to follow is <a href="http://www-912.ibm.com/s_dir/slkbase.NSF/0/87a5b328400bbd37862569030070431d" target="_blank">IBM Software Technical Document 19932815</a>.</p>
<p>In that document you can find the link for the printer specific information needed for the <a href="http://www-912.ibm.com/s_dir/slkbase.NSF/7c4c0f5a4d52e3c4862569b4005d198a/ba0863cfa6463903862569c10078c903?OpenDocument" target="_blank">MFRTYPMDL</a> setting, as well as a configuration example.</p>
<p>Here is a screenshot of the parts of the IBM Software Technical Document that you need to pay attention to:</p>
<p><a href="http://www.kevintaber.com/wp-content/uploads/2012/05/crtdevprt.png"><img class="alignnone size-full wp-image-864" title="crtdevprt" src="http://www.kevintaber.com/wp-content/uploads/2012/05/crtdevprt.png" alt="" width="726" height="611" /></a></p>
<p>If possible always try to use the SNMP as the print connection and port 9100.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.kevintaber.com/2012/05/07/printing-from-ibm-i-or-as400-to-hp-laserjets/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Transfer contacts from BlackBerry to Android</title>
		<link>http://www.kevintaber.com/2012/05/01/transfer-contacts-from-blackberry-to-android/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=transfer-contacts-from-blackberry-to-android</link>
		<comments>http://www.kevintaber.com/2012/05/01/transfer-contacts-from-blackberry-to-android/#comments</comments>
		<pubDate>Wed, 02 May 2012 00:55:29 +0000</pubDate>
		<dc:creator>ktaber</dc:creator>
				<category><![CDATA[Uncategorized]]></category>

		<guid isPermaLink="false">http://www.kevintaber.com/?p=847</guid>
		<description><![CDATA[If for some reason you no longer have a a data connection and CAN&#8217;T use Google Sync, here is the easiest way to transfer your BlackBerry contacts to an Android device. In fact no cord or software is needed at all!
&#160;
Bluetooth is your friend and here are the steps:
&#160;

Pair your Android to  [...]]]></description>
			<content:encoded><![CDATA[<p>If for some reason you no longer have a a data connection and CAN&#8217;T use Google Sync, here is the easiest way to transfer your BlackBerry contacts to an Android device.<strong> In fact no cord or software is needed at all!</strong></p>
<p>&nbsp;</p>
<p>Bluetooth is your friend and here are the steps:</p>
<p>&nbsp;</p>
<ol>
<li><strong>Pair your Android to your BlackBerry and go to the Options of the BlackBerry.</strong></li>
<li><strong>Choose Bluetooth</strong></li>
<li><strong>Select your Android device in the list</strong></li>
<li><strong>Press the Menu key on the BlackBerry and select Options</strong></li>
<li><strong>Scroll to Contacts Transfer field and choose All Entries</strong></li>
<li><strong>Press the Menu key and choose Save</strong></li>
<li><strong>Then choose Transfer Contacts</strong></li>
</ol>
<p>Here is a <a href="http://youtu.be/Kd1_jpUYxHQ">YouTube video from BlackBerry</a> showing the steps listed above.</p>
<p>&nbsp;</p>
<p>Once the contacts are on your Android device you can then sync them to your Gmail from there.</p>
<p>On your Android go to Contacts. Press the Menu key and you should see something referring to Sync. Each manufacturer is slightly different but you can search online for more specific instructions.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.kevintaber.com/2012/05/01/transfer-contacts-from-blackberry-to-android/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>RunDLL error removal</title>
		<link>http://www.kevintaber.com/2012/04/24/rundll-error-removal/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=rundll-error-removal</link>
		<comments>http://www.kevintaber.com/2012/04/24/rundll-error-removal/#comments</comments>
		<pubDate>Tue, 24 Apr 2012 13:49:58 +0000</pubDate>
		<dc:creator>ktaber</dc:creator>
				<category><![CDATA[Microsoft]]></category>

		<guid isPermaLink="false">http://www.kevintaber.com/?p=838</guid>
		<description><![CDATA[Recently I faced an issue where a user on a Remote Desktop Session Host received a RunDLL error message when logging in.
RunDLL
There was a problem starting
%path%/filename.dll
The specified module could not be found

What had happened was Windows Update performed the Malicious Software Rem [...]]]></description>
			<content:encoded><![CDATA[<p>Recently I faced an issue where a user on a Remote Desktop Session Host received a RunDLL error message when logging in.</p>
<p>RunDLL</p>
<p>There was a problem starting</p>
<p>%path%/filename.dll</p>
<p>The specified module could not be found</p>
<p><a href="http://www.kevintaber.com/wp-content/uploads/2012/04/RunDLL.png"><img class="alignnone size-full wp-image-839" title="RunDLL" src="http://www.kevintaber.com/wp-content/uploads/2012/04/RunDLL.png" alt="" width="292" height="137" /></a></p>
<p>What had happened was Windows Update performed the Malicious Software Removal, and the malware DLL was deleted&#8230; which is great. Now we just had to fix the registry so that it didn&#8217;t try to load that deleted DLL file.</p>
<p>Searches might lead you to try the command regsvr32 /u file.dll, but that won&#8217;t work. It requires access to the DLL which is deleted.</p>
<p>However, the quick and easiest way to fix this issue is to log in as an Administrator on the Session Host and use a Find&#8230; within Regedit. Be sure to backup your registry first!</p>
<p>Manually remove or unregister a dll from the registry:</p>
<ul>
<li><span style="line-height: 18px;">Open Regedit</span></li>
<li><span style="line-height: 18px;">Click Computer at the top left</span></li>
<li><span style="line-height: 18px;">Control+F </span></li>
<li><span style="line-height: 18px;">Input DLL name and choose Find Next</span></li>
<li><span style="line-height: 18px;">Delete the found entry and press F3 to continue searching for more instances of the dll and delete them too</span></li>
</ul>
<p><span style="line-height: 18px;"><a href="http://www.kevintaber.com/wp-content/uploads/2012/04/RegeditDLL.png"><img class="alignnone size-full wp-image-840" title="RegeditDLL" src="http://www.kevintaber.com/wp-content/uploads/2012/04/RegeditDLL.png" alt="" width="532" height="382" /></a></span></p>
<p>Below is the path they are commonly found. (the variable will be the user&#8217;s SID)</p>
<p><a href="http://www.kevintaber.com/wp-content/uploads/2012/04/RunDLLpath.png"><img class="alignnone size-full wp-image-843" title="RunDLLpath" src="http://www.kevintaber.com/wp-content/uploads/2012/04/RunDLLpath.png" alt="" width="618" height="17" /></a></p>
<p><span style="line-height: 18px;">After all instances of the dll have been deleted, have the user log off and back on to test that it worked. The roaming user profile should get copied back to the file server and should be good going forward.</span></p>
<p>Note: This can apply to any PC and not just a Terminal / RDS server.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.kevintaber.com/2012/04/24/rundll-error-removal/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Windows XP Drive Maps GPO not working</title>
		<link>http://www.kevintaber.com/2012/04/05/windows-xp-drive-maps-gpo-not-working/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=windows-xp-drive-maps-gpo-not-working</link>
		<comments>http://www.kevintaber.com/2012/04/05/windows-xp-drive-maps-gpo-not-working/#comments</comments>
		<pubDate>Thu, 05 Apr 2012 19:18:27 +0000</pubDate>
		<dc:creator>ktaber</dc:creator>
				<category><![CDATA[Microsoft]]></category>

		<guid isPermaLink="false">http://www.kevintaber.com/?p=831</guid>
		<description><![CDATA[If you have created a GPO with Windows 7 RSAT or Windows Server 2008 Group Policy Editor, you may notice that some Windows XP computers are not getting their drives to map.
Update KB943729 for XP will fix your problem and allow the newer policy CSEs to apply.
&#160;
Issue: Drives not mapping in Windo [...]]]></description>
			<content:encoded><![CDATA[<p>If you have created a GPO with Windows 7 RSAT or Windows Server 2008 Group Policy Editor, you may notice that some Windows XP computers are not getting their drives to map.</p>
<p>Update <a href="http://support.microsoft.com/kb/943729" target="_blank">KB943729</a> for XP will fix your problem and allow the newer policy CSEs to apply.</p>
<p>&nbsp;</p>
<p>Issue: Drives not mapping in Windows XP via GPO (Group Policy), yet gpresult was showing the User policy applied successfully.</p>
<p>Fix: KB943729 via Windows Optional Updates</p>
<p>Example of GPO:</p>
<p><a href="http://www.kevintaber.com/wp-content/uploads/2012/04/Drive-Map.png"><img class="alignnone size-full wp-image-834" title="Drive Map" src="http://www.kevintaber.com/wp-content/uploads/2012/04/Drive-Map.png" alt="" width="618" height="611" /></a></p>
]]></content:encoded>
			<wfw:commentRss>http://www.kevintaber.com/2012/04/05/windows-xp-drive-maps-gpo-not-working/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Cisco ASA ICMP configuration</title>
		<link>http://www.kevintaber.com/2012/03/23/cisco-asa-icmp-configuration/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=cisco-asa-icmp-configuration</link>
		<comments>http://www.kevintaber.com/2012/03/23/cisco-asa-icmp-configuration/#comments</comments>
		<pubDate>Fri, 23 Mar 2012 19:25:46 +0000</pubDate>
		<dc:creator>ktaber</dc:creator>
				<category><![CDATA[Networking]]></category>

		<guid isPermaLink="false">http://www.kevintaber.com/?p=818</guid>
		<description><![CDATA[The days of security by obscurity is going by the wayside in terms of ICMP. Hackers will typically confront known ports and scan for them, so blocking pings is not seen as a real defense as it used to be.
If you have a Cisco ASA that is configured to limit both inbound and outbound types of traffic [...]]]></description>
			<content:encoded><![CDATA[<p>The days of security by obscurity is going by the wayside in terms of ICMP. Hackers will typically confront known ports and scan for them, so blocking pings is not seen as a real defense as it used to be.</p>
<p>If you have a Cisco ASA that is configured to limit both inbound and outbound types of traffic and you want pings to work, then here is my suggestion.</p>
<p>Goal: Allow inside addresses to ping and traceroute outbound. Allow outside pings to come in.</p>
<p>Example: Allow my workstation to ping www.google.com and allow an outsider to ping my internet facing spam filter.</p>
<p>Inside rules:</p>
<p><strong>access-list inside_access_in extended permit icmp any any echo</strong></p>
<p><a href="http://www.kevintaber.com/wp-content/uploads/2012/03/inside-ICMP.png"><img class="alignnone size-full wp-image-819" title="inside ICMP" src="http://www.kevintaber.com/wp-content/uploads/2012/03/inside-ICMP.png" alt="" width="628" height="116" /></a></p>
<p>Outside rules:</p>
<p><strong>access-list outside_access_in extended permit icmp any any echo</strong></p>
<p><strong>access-list outside_access_in extended permit icmp any any time-exceeded</strong></p>
<p><a href="http://www.kevintaber.com/wp-content/uploads/2012/03/outside-ICMP.png"><img class="alignnone size-full wp-image-820" title="outside ICMP" src="http://www.kevintaber.com/wp-content/uploads/2012/03/outside-ICMP.png" alt="" width="624" height="66" /></a></p>
<p>Service policy:</p>
<p><strong>Configuration &gt; Firewall &gt; Service Policy Rules &gt; Global &gt; Rule Actions &gt; Protocol Inspection &gt; ICMP &gt; OK &gt; Apply</strong></p>
<p><a href="http://www.kevintaber.com/wp-content/uploads/2012/03/ICMP-Inspect.png"><img class="alignnone size-full wp-image-821" title="ICMP Inspect" src="http://www.kevintaber.com/wp-content/uploads/2012/03/ICMP-Inspect.png" alt="" width="536" height="490" /></a></p>
<p>By combining all 3 you will have ICMP inspection and ACLs that control what comes in and out in regards to ICMP.</p>
<p>If you check your ASDM Syslog Messages, Severity level: Warnings, you can see which type of ICMP is being blocked and refer to <a href="http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a0080094e8a.shtml#messtype" target="_blank">Cisco&#8217;s RFC 792 chart</a>.</p>
<p><a href="http://www.kevintaber.com/wp-content/uploads/2012/03/ASDM-Logging.png"><img class="alignnone size-full wp-image-826" title="ASDM Logging" src="http://www.kevintaber.com/wp-content/uploads/2012/03/ASDM-Logging.png" alt="" width="470" height="227" /></a></p>
<p>Code 8 in the Home &gt; Latest ASDM Syslog Messages would be the Echo ICMP according to the chart mentioned previously.</p>
<p><a href="http://www.kevintaber.com/wp-content/uploads/2012/03/ICMP-syslog-code.png"><img class="alignnone size-full wp-image-827" title="ICMP syslog code" src="http://www.kevintaber.com/wp-content/uploads/2012/03/ICMP-syslog-code.png" alt="" width="311" height="33" /></a></p>
]]></content:encoded>
			<wfw:commentRss>http://www.kevintaber.com/2012/03/23/cisco-asa-icmp-configuration/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>RDP connections randomly disconnect</title>
		<link>http://www.kevintaber.com/2012/03/14/rdp-connections-randomly-disconnect/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=rdp-connections-randomly-disconnect</link>
		<comments>http://www.kevintaber.com/2012/03/14/rdp-connections-randomly-disconnect/#comments</comments>
		<pubDate>Wed, 14 Mar 2012 14:43:10 +0000</pubDate>
		<dc:creator>ktaber</dc:creator>
				<category><![CDATA[Microsoft]]></category>

		<guid isPermaLink="false">http://www.kevintaber.com/?p=807</guid>
		<description><![CDATA[In the last 2 days just a few of our thin clients that connect using RDS to our Session Hosts were having their connections timeout and disconnect. It was happening to our older XP thin clients as well as our newer Windows 7 thin clients.
After researching the issue further, I noticed that the [...]]]></description>
			<content:encoded><![CDATA[<p>In the last 2 days just a few of our thin clients that connect using RDS to our Session Hosts were having their connections timeout and disconnect. It was happening to our older XP thin clients as well as our newer Windows 7 thin clients.</p>
<p>After researching the issue further, I noticed that the disconnected sessions were all happening on the same Session Host. First thing that popped into my head was authentication..meaning NTP issue! Time services are very important to keep authentication working smoothly. Sure enough the clock was 4 minutes off.</p>
<p>A command line of: <strong>w32tm /monitor</strong> revealed that it was in sync with my domain controller so that seemed odd. But the domain controller it was sync&#8217;d to did in fact have the correct time while the Session Host did not.</p>
<p>Command line: <strong>services.msc</strong> Once opened I was surprised&#8230; there was no Windows Time service in the list.</p>
<p>Command line: <strong>w32tm /unregister</strong></p>
<p>Command line: <strong>w32tm /register</strong></p>
<p>Now my services.msc showed Windows Time but if I tried to Start the service I received Error 1290</p>
<p><a href="http://www.kevintaber.com/wp-content/uploads/2012/03/Error.png"><img class="alignnone size-full wp-image-808" title="Error" src="http://www.kevintaber.com/wp-content/uploads/2012/03/Error.png" alt="" width="416" height="230" /></a></p>
<p>Restarting the server will fix the issue, but since there are users logged in at the moment, I just used the <strong>time</strong> command to manually set it until the next reboot.</p>
<p><a href="http://www.kevintaber.com/wp-content/uploads/2012/03/Time.png"><img class="alignnone size-full wp-image-809" title="Time" src="http://www.kevintaber.com/wp-content/uploads/2012/03/Time.png" alt="" width="683" height="130" /></a></p>
<p>Also, make sure your thin client / local machine have the proper time too.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.kevintaber.com/2012/03/14/rdp-connections-randomly-disconnect/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

