#21792 Penetration test

Created from Lead: https://artichoke.shield.syncromsp.com/leads/14599694/convert

Hi Peet, We will be having another pen test and I was wondering if it would be best to wait to get the router swapped out or do you think it's fine to go with the Kerio as-is? Thanks, ~jb -- * JohnBelobraidic P A R T N E R S C R E A T I V E 603 Woody Street Missoula, Montana 59802 406 541 2263 partnerscreative.com

Your best bet would be to wait until after the upgrade as an external pen test really is just about the firewall. But keep in mind when we drop the Kerio Control box, we do have to swap VPN clients. It should not be all too complicated but ... 🤞🤞🤞 That said, if you need to get it done before the switch do it. Just now the results of the test won't be exceedingly accurate until done after the pfSense is in place. I've got the first batch of hardware delivered yesterday. I'm still working on installs and configuration. Cheers.Peet

Hi Peet, I just want to follow up on this discussion. Can we get these network upgrades completed soon, perhaps by the end of the month? We'd like to have it in place so that we can schedule our network scan / pen test with LMG Security in October. Thanks, Tony > > > ---------- Forwarded message --------- > From: Artichoke Support - Peet  > Date: Wed, Aug 17, 2022 at 10:58 AM > Subject: Penetration test (message id: 58420434) > To:  > >

Peet. FYI - Blackfoot has scheduled the connection for September 27th. ~jb On Tue, Sep 13, 2022 at 11:18 AM Tony Ferrini < [email protected]> wrote: > Hi Peet, > > I just want to follow up on this discussion. Can we get these network > upgrades completed soon, perhaps by the end of the month? We'd like to have > it in place so that we can schedule our network scan / pen test with LMG > Security in October. > > Thanks, > Tony > > > >> >> >> ---------- Forwarded message --------- >> From: Artichoke Support - Peet  >> Date: Wed, Aug 17, 2022 at 10:58 AM >> Subject: Penetration test (message id: 58420434) >> To:  >> >>

Sorry for the delay. I'm out of town for my nephew's wedding. Fingers crossed, but yes the new router can be in place before the end of the month. Ping you next week?

Hi Peet, All of our network upgrades with Blackfoot are complete. Can you give us an ETA on the router swap? As a reminder, we're hoping to start a pen test with LMG soon and would like to get the router done first. Thanks! * TonyFerrini P A R T N E R S C R E A T I V E 603 Woody Street Missoula, Montana 59802 partnerscreative.com On Fri, Sep 16, 2022 at 11:02 AM Artichoke Support - Peet  wrote:

Hi Peet, I know we inquired about this already last week but Susan wants us to reach out to you again to reiterate the sensitivity. We need to get this router update complete as soon as possible so that we can proceed with our penetration testing. We have a contractual obligation with our biggest client, and are already behind on that obligation. So we really need to get this wrapped up right away. Please provide a date that you'll have the router update complete so that we can schedule our pen testing. (and heads up JB is out the next few days) Thanks, Tony * TonyFerrini P A R T N E R S C R E A T I V E 603 Woody Street Missoula, Montana 59802 partnerscreative.com On Thu, Sep 29, 2022 at 3:15 PM Tony Ferrini < [email protected]> wrote: > Hi Peet, > > All of our network upgrades with Blackfoot are complete. Can you give us > an ETA on the router swap? As a reminder, we're hoping to start a pen test > with LMG soon and would like to get the router done first. Thanks! > > * TonyFerrini > P A R T N E R S C R E A T I V E > 603 Woody Street > Missoula, Montana 59802 > partnerscreative.com > > > On Fri, Sep 16, 2022 at 11:02 AM Artichoke Support - Peet >  wrote: >

Tony, et all. I'm sorry that I wasn't clear in my recommendation, but the router is not required to be replaced before your pen test. I would prefer that it is, but I absolutely do not want to hold up your obligation. I'm not sure where I missed in our communication that the completion of your pen test was part of an obligation with your client. The pfSense solution is not a drop in replacement for there Kerio Control solution. The routing, security filters and VPN server are all completely different. New VPN clients need to be deployed and configured. Users will require instruction and I'd like the experience to be as seamless as possible. All that said, your external exposure with Kerio Control and pfSense is virtually identical. While the VPN engines and configuration is very different, both Kerio Control and pfSense expose a single SSL vpn port externally. No other traffic is passed or acknowledged. I'll be happy to provide a full scan external of the pfSense deployment after its implemented using OpenVAS with community feeds which provides the same information an external scan from LMG. My ultimate goal is to retire all Kerio Control deployments and replace them with pfSense, but Regardless, I've extended the license for your current Kerio Control router. Please schedule your testing at your earliest convince. Thanks.Peet

Okay. We'll proceed with LMG on the penetration testing. It would still be nice to know some kind of anticipated date for the router change. If, as you say, this isn't an easy transition and users will require instruction we'd like to know the timeline on that so we can plan and prepare our staff. So it would be helpful to know more details on that. It's probably a good time for the three of us to get back together to discuss some of our upcoming IT goals. As you know, we've been working through our Canto DAM implementation the past several months. We agreed some time ago that it would make sense to get through that piece before moving into SharePoint. But we are close on that piece now and we've set a goal of February 1 to get our office on SharePoint. Do you have some time in the next week or two to discuss? Thanks Peet. * TonyFerrini P A R T N E R S C R E A T I V E 603 Woody Street Missoula, Montana 59802 partnerscreative.com On Thu, Oct 6, 2022 at 12:10 AM Artichoke Support - Peet  wrote:

Peet, Can you give us some dates/times the week of October 24 you'd be available to discuss our migration to SharePoint? Thanks, Tony On Fri, Oct 7, 2022 at 9:35 AM Tony Ferrini < [email protected]> wrote: > > Okay. We'll proceed with LMG on the penetration testing. > > It would still be nice to know some kind of anticipated date for the > router change. If, as you say, this isn't an easy transition and users will > require instruction we'd like to know the timeline on that so we can plan > and prepare our staff. So it would be helpful to know more details on that. > > It's probably a good time for the three of us to get back together to > discuss some of our upcoming IT goals. As you know, we've been working > through our Canto DAM implementation the past several months. We agreed > some time ago that it would make sense to get through that piece before > moving into SharePoint. But we are close on that piece now and we've set a > goal of February 1 to get our office on SharePoint. > > Do you have some time in the next week or two to discuss? > > Thanks Peet. > * TonyFerrini > P A R T N E R S C R E A T I V E > 603 Woody Street > Missoula, Montana 59802 > partnerscreative.com > > > On Thu, Oct 6, 2022 at 12:10 AM Artichoke Support - Peet >  wrote: >

Peet, We are having some pain points with our distributed staff and this SharePoint project has become a priority. Susan has decided that she wants to be involved in our next meeting with you to begin planning for SharePoint. It is very difficult to coordinate open times in her schedule. Can you provide us with some times that you're available to meet and discuss SharePoint? Thank you * TonyFerrini P A R T N E R S C R E A T I V E 603 Woody Street Missoula, Montana 59802 partnerscreative.com On Wed, Oct 12, 2022 at 8:55 AM Tony Ferrini < [email protected]> wrote: > Peet, > > Can you give us some dates/times the week of October 24 you'd be available > to discuss our migration to SharePoint? > > Thanks, > Tony > > > On Fri, Oct 7, 2022 at 9:35 AM Tony Ferrini < > [email protected]> wrote: > >> >> Okay. We'll proceed with LMG on the penetration testing. >> >> It would still be nice to know some kind of anticipated date for the >> router change. If, as you say, this isn't an easy transition and users will >> require instruction we'd like to know the timeline on that so we can plan >> and prepare our staff. So it would be helpful to know more details on that. >> >> It's probably a good time for the three of us to get back together to >> discuss some of our upcoming IT goals. As you know, we've been working >> through our Canto DAM implementation the past several months. We agreed >> some time ago that it would make sense to get through that piece before >> moving into SharePoint. But we are close on that piece now and we've set a >> goal of February 1 to get our office on SharePoint. >> >> Do you have some time in the next week or two to discuss? >> >> Thanks Peet. >> * TonyFerrini >> P A R T N E R S C R E A T I V E >> 603 Woody Street >> Missoula, Montana 59802 >> partnerscreative.com >> >> >> On Thu, Oct 6, 2022 at 12:10 AM Artichoke Support - Peet >>  wrote: >>

Peet, We have to answer a few questions for LMG to get started on a security scan. We answered what we could and JB suggested I send you the document with the last few items. I attached the document here. Thanks for any clarification you can provide on the last few items. * TonyFerrini P A R T N E R S C R E A T I V E 603 Woody Street Missoula, Montana 59802 partnerscreative.com On Thu, Oct 6, 2022 at 12:10 AM Artichoke Support - Peet  wrote:

I think this should answer the Q's ... Cheers.Peet

Thanks Peet On Wed, Nov 2, 2022 at 1:35 PM Artichoke Support - Peet  wrote: