Category: Uncategorized

As the security needs of our clients have increased, we are investing in more robust management and monitoring tools to protect and proactively care for your workstations, servers and network infrastructure.

Depending on your current policies and standards, you may notice changes in your antivirus from Webroot to BitDefender and Ninja will coexist with ConnectWise Automate for a period of time until all functions have been migrated.

We are excited about the increased stability and reporting we hope to see from these changes. Your security is our highest priority.

If you have questions, please give me a call.

Joseph
(704) 814-8819

Most of you are very familiar with the email spam & virus filter that we know and love, SecureTide from AppRiver. This year AppRiver is rebranding SecureTide to be “Advanced Email Security“! Along with this name change comes new email security features:

• Business Email Compromise (BEC)
• Protection against Impersonation, Conversation Hijacking & Phishing
• Display name protection / Impersonation Protection

Beginning in April 2019 all $5 domain fees will be removed. The cost of Advanced Email Security will be increased to $2/user. This ramp up will be complete in December when the final increase to $3/user is implemented.

Did you know that we have Engineers available for emergency support after hours? We have a new paging service that alerts the on-call Engineer of your need quickly and reliably. Network Care subscribers will see a $2 after-hours service fee on their monthly invoice for this. We have additional coverage for emergencies one hour before and five hours after normal hours, in addition to weekends.

So if it really can’t wait until business hours, you can call the Help Desk (704) 814-8819 US or (519) 491-2909 (CAN) to leave a message, or email emergency@quo.cc. In either case, the on-call Engineer will be paged and return your call.

One of the most insidious hacks we’ve seen is the creation of an auto-forward rule in Outlook. Here is how it works.

A hacker guesses/cracks your email password. Instead of doing anything you will notice, the hacker creates an Outlook rule to forward everything that comes into your mailbox to an external account. Then he logs out and no one is the wiser.

You can change your password. You can turn on 2FA (two-factor authentication). He’s still going to get a copy of every email you receive. The hacker is now poised to follow-up with a subsequent attack on you or your firm for wire fraud or identity theft.

There’s hope! We have scanned every mailbox that we administer. We DID find some forwarding rules and deleted them after confirming with the mailbox owner that the rule was bogus. We have also changed the 365 server policies to prohibit any user from creating a “forward all rule” to an external recipient.

Rest easy. That hacker door has been closed.

As you saw in our last newsletter, the time for supporting Windows 7 is coming to a close. It’s time to upgrade.

Microsoft stopped supporting Windows 7 in January 2015. Since then, if you need assistance with a Windows 7 issue, you must pay Microsoft for support. Quo Vadis chose to continue free support four more years than Microsoft, until January 2019, when we too, will charge for any support provided to a Windows 7 computer.

The lack of security updates coupled with the old driver hassles in Windows 7 makes it imperative to upgrade/replace with Windows 10.

We have found the hidden tool that Microsoft provides to upgrade for free to Windows 10! Let’s upgrade your newer workstations as soon as possible. If you’ve got any computers that are getting long in the tooth, we can discuss the replacement options. Our engineers can show you how to upgrade them for free.
https://www.microsoft.com/en-gb/software-download/windows10ISO
We can boot from a USB stick or download from the web. Obviously, downloading will take a long time…

There are two options during the upgrade:

1. Upgrade it in place, keeping the data and Windows profile.
2. Start fresh, wipe the workstation and reinstall from scratch.

We recommend option 2, as it’s cleaner and ensures fewer complications. However, we can certainly attempt option 1, with our engineers assistance as a plan B.

Please call Joseph or David, to go over each option and what will work best for your business.
US: 704-814-0398 (Joseph)
CA: 519-357-1364 (David)

Imagine…your admin just received an email FROM YOU, instructing him to send money to a bank account in Bosnia. He resists, and emails you to request clarification. You immediately respond that you want the money sent right away – it’s so very important. Your admin follows your directions and sends your money to a hacker in Bosnia.

Here’s another one. One of your favorite clients calls up to ask why you sent him such an offensive email. And there’s another caller waiting to tell you the same thing. Your reputation has been tarnished and your business will suffer. We do a message trace and find that the email was actually sent from your mailbox to over 600 recipients.

Far fetched? I wish that were true. Every month we hear of a mail breach similar to this story. What really happened here? Your email password has been compromised. The hacker is IN your mailbox; watching; learning; prepping. When the timing is right, the hacker poses as you, attempting to move funds. Sadly, it works nearly every time.

There is a very simple way to avoid this from ever happening to you or your staff. It’s called two-factor authentication. You use it all over the place – except your mailbox. It’s time for that to change. Just like the fingerprint or face scanner on your phone; just like the numbers texted to your phone that allow you to view your banking records; you must lock down your mailbox!

2FA is a necessary security step for email protection. You no longer have to change your password periodically, because the account will be protected by more than a password, complex or otherwise.

Our team will be reaching out to implement 2FA for all our clients before the year is out.

If you do not wish to use 2FA, we will ask you to sign an Memorandum of Understanding that your email is at risk and you have chosen to avoid the only guaranteed protection available – even though the service is free.

It’s been a good run, but the old dog is now 9 YEARS OLD. Time to retire… out to pasture… in with the new!

Of course I’m not talking about your boss, I’m referring to Windows 7. As of the end of this year, Microsoft will no longer provide support for Windows 7, nor will Quo Vadis. We’ve been talking about upgrading those older workstations for many years now. So let’s look at the options ahead.

Windows 10 has been out since 2015. In the past three years there have been several major upgrades, and right now I find it quite stable, once the latest major update has been installed. Should you upgrade to Windows 10? Generally, I’d say, “probably not.” There are two reasons for this position. First of all, it’s probable that your Windows 7 computer is older than three years – and you’ve missed out on the free upgrade to Windows 10. So you’ll lose $100 for the software upgrade, not including any helpful labor. Second, there’s a good chance that a new workstation, which comes with Windows 10, will be far superior to your existing hardware.

As you’re shopping for a new computer, please remember that we support small businesses, not homes. Your operating system must be Windows 10 Professional, not Windows 10. If you purchase a home OS, you’ll need to upgrade it to Professional, which is another $99, plus labor. Any maintenance done after the fact on a computer upgraded in this fashion will need to be upgraded all over again. If you haven’t saved the upgrade receipt, you’ll end up paying a second time, too. Ouch.

Our track record for excellent partner selection continues. Many years ago, we partnered with PacketTrap for our remote monitoring and management tool (RMM). Not too long afterward, DELL purchased PacketTrap.

We partnered with SonicWALL and DELL found them worthy of purchase as well.

We partnered with Duo and Cisco has announced their acquisition of Duo.

We partnered with MozyPro many years ago and Carbonite has announced their acquisition of Mozy.

You have partnered with Quo Vadis, and we think this too, is a wise choice. 🙂

Dell computers are no longer shipping with VGA capabilities, so beware! You’re probably going to need a different video cable (HDMI is a good choice) or a new display. Here’s a quick review of the various connectors.

• VGA adaptors have 15 pins and the cable head is normally blue.
• HDMI is a spade connector with the corners angled on two sides.
• Display Port is similar in shape to HDMI, but has only one side angled.
• Mini Display Port is primarily used on MacBooks. It is a small rectangle which is almost square.
• DVI is a pain in the neck. The cable head is either white or black and there are three or four flavors. It has many pins and bars in the head, and I find it too tedious to get right the first time, if I’m buying online. I think it’s safer to move to HDMI or Display Port.
• USB-C is the latest USB connector. It handles video, audio and data. New MacBooks have USB-C. It is a skinny rectangle that can be inserted either way. It’s the future… get over the change.

The take-away here is to remember the video cable when ordering any computer replacements. Using the old monitor was the norm in years past, but perhaps not today.

I want to give you a quick primer on sending email. So, here’s the straight skinny.

When someone sends you an email, your mail server accepts the message from the sender’s mail server, unless it has been blacklisted. So far, so good.

If you have a good spam service, it will confirm that the email was delivered from a server authorized to send email for that domain. This is the easiest way to tell if an email is spam. The Internet provides very simple ways to confirm: if the server is legit, the mail gets through. Done.

The take-away in this article is that YOUR MAIL SERVER must be properly authorized so your own emails are not deemed to be spam. This is a task that Quo Vadis takes care of for you. Not to worry. UNLESS… you are using a service to send bulk mail on your behalf. You MUST tell us! We’ll do the heavy lifting in the background, but we need to know what service you’re using (Mail Chimp, Constant Contact, etc.) so we can adjust your DNS SPF records. This will ensure your mail doesn’t get mistakenly marked as spam.

Why use a bulk mail sender? If you try to send out a marketing piece or a newsletter from Outlook, you’re almost guaranteed to raise red flags these days. Internet Service Providers (ISP) all over the planet are being pummeled by their constituents to halt the delivery of spam. They check all kinds of things.

• Is your server authorized?
• How many recipients are there?
• How many messages are being sent per minute?

All these factors make it virtually impossible for the average Outlook user to send an “email blast” out to a congregation, client list, etc. For these tasks, the use of a valid, authorized bulk mail sender is crucial. Don’t try to do it yourself or you will end up getting blacklisted.