In recent years, chatbots like ChatGPT have become increasingly popular as a tool for learning and research. However, educational institutions have valid concerns about the potential distractions and inappropriate content that these chatbots can provide to students. One solution to this problem is the use of SafeDNS software, which can block inappropriate content and also chatbots like ChatGPT.
SafeDNS is a cloud-based web filtering solution that is designed to protect users from accessing harmful or inappropriate content on the internet. SafeDNS uses a combination of real-time content analysis and advanced filtering algorithms to block access to sites that contain malicious or inappropriate content.
In addition to blocking harmful websites, SafeDNS also has the ability to block access to specific applications and software, such as chatbots like ChatGPT. By blocking access to these chatbots, educational institutions can help ensure that students remain focused on their academic work and are not distracted by chatbots that are designed to engage and entertain.
However, there are ways such language models can aid students in their learning process. They can ask questions related to their studies, and receive answers in real-time. This can help clarify concepts and solve doubts. AI can provide examples and illustrations to help students understand complex concepts in a better way. It can also suggest online resources such as articles, videos, and tutorials related to the student’s queries or topic of interest, generate practice exercises and questions for students to solve, to help them reinforce their learning. From creating interactive learning games for students to practice and reinforce their understanding of a concept to providing synonyms, antonyms, and suggesting corrections for misspelled words, such AI models can be a benefit to students, if used correctly.
While chatbots like ChatGPT can be useful tools for learning and research, they can also be a source of distraction and inappropriate content for students. SafeDNS provides an effective solution to this problem by blocking access to these chatbots and other inappropriate content on the internet. By using SafeDNS, educational institutions can help ensure that students remain focused on their academic work and are not exposed to harmful or distracting content on the internet.
Article written with the help of ChatGPT.
About Version 2 Digital
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.
Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.
About SafeDNS SafeDNS breathes to make the internet safer for people all over the world with solutions ranging from AI & ML-powered web filtering, cybersecurity to threat intelligence. Moreover, we strive to create the next generation of safer and more affordable web filtering products. Endlessly working to improve our users’ online protection, SafeDNS has also launched an innovative system powered by continuous machine learning and user behavior analytics to detect botnets and malicious websites.
Organizational hierarchies help streamline user and permission management. When creating and editing organizations, you can define an organizational hierarchy that allows for inherited user permissions.
The users assigned to the selected parent organization will maintain the highest assigned permission in the child organization unless specified in their user permissions. For instance, if a user is a viewer in the parent organization, but an administrator in the child organization, they will maintain their admin status in the child organization when the parent-child relationship is created.
Organization hierarchies can be three levels deep, and user permissions in a child organization can be upgraded, not downgraded, from the currently set permissions in the parent organization.
CrowdStrike integration improvements
The CrowdStrike integration now populates asset software information from Falcon Discover. Additionally, IP addresses imported by CrowdStrike are now considered primary addresses and will be used for correlation, and the CrowdStrike credential verification is now seperated by service.
Operating system CPE assignment
The operating system Common Platform Enumeration (CPE) field is a string describing detected operating system software aligned to the CPE naming scheme. This field is queried using the syntax os.cpe23:<text>. In cases where runZero was able to fingerprint the operating system but the NIST database does not contain an official matching entry, an unofficial CPE will be generated and include r0_unofficial in the other field of the CPE.
New protocols and fingerprints
The runZero scanner now reports legacy RDP authentication, decodes additional ISAKMP/IKEv2 fields, and improves the fingerprinting of AirPlay devices.
A new query was added to quickly identify OpenSSH 9.1 Servers affected by a memory double-free vulnerability.
See runZero 3.6 in action
Watch the video to see a preview of some of the newest features in runZero, including organizational hierarchies, research updates, software inventory from CrowdStrike, and OS CPE information.
Release notes
The runZero 3.6 release includes a rollup of all the 3.5.x updates, which includes all of the following features, improvements, and updates.
New features
Organizational hierarchies are available allowing for permissions to be inherited by child organizations based on an established parent.
runZero now identifies the CPE associated with fingerprinted assets and assigns an unofficial CPE where an official match is not found in the NIST database.
Product improvements
A new query was added for OpenSSH 9.1 servers affected by a memory double-free vulnerability.
Improved SNMP fingerprint coverage capabilities and added new attributes for SNMP protocol version (at the asset level) and authentication details (at the service level).
Improved handling of invalid multi-valued subjectAlternativeNames on x.509 certificates.
The scanner now supports identifying RDP authentication methods, including legacy and NLA, supported by target hosts.
The scanner now supports the ability to decode ISAKMP/IKEv2 replies
A new canned query for OpenSSH 9.1 servers which contain a memory double-free vulnerability has been added.
Performance of the Active Directory (LDAP), Azure AD, and Google Workspace integrations has been improved.
SNMP protocol versions are now tracked at the asset level.
SNMP services will now keep track of how they authenticated and using what protocols.
Hostname extraction from malformed subjectAlternativeNames on TLS certificates has been improved.
Site scopes with subnets ending in /32 (for IPv4) and /128 (for IPv6) are no longer parsed to single IPs and will appear as CIDR entries in the subnets list.
Improved error validation UX around email addresses when setting up an email alert channel.
Services, Screenshots, and Software inventory pages now include associated site subnet tags.
runZero now identifies the CPE associated with fingerprinted assets and assigns an unofficial CPE where an official match is not found in the NIST database
Integration improvements
Improved fingerprinting of operating systems imported via the LDAP and VMware integrations.
Stability and performance of VMware asset correlation has been improved.
VMware assets are now merged across sites.
The Intune integration has been improved to better handle Intune API rate limiting.
IP addresses reported by CrowdStrike are now considered primary addresses, and will be used for asset correlation.
CrowdStrike credentials verification is now separated by service
Bug fixes
A bug that could prevent automatic metric calculations from completing has been resolved.
A bug that could prevent stale assets from being automatically removed on subsequent task runs has been resolved.
Several minor bug fixes and UX improvements have been made to the redesigned task page.
A bug that prevented OS fingerprinting and information extraction over RDP has been resolved.
A bug preventing users from copying or editing connector and analysis tasks has been resolved.
A bug causing new recurring tasks to display an incorrect first run date has been resolved.
A bug causing the dashboard asset trends graph tooltips to appear away from the graph has been resolved.
A bug causing task page inspection cards to automatically collapse has been resolved.
A bug that could result in build-up of frequently recurring tasks has been resolved.
A bug that could cause extremely large tasks to remain queued for processing indefinitely has been resolved.
A bug that could prevent export of service attribute reports has been resolved.
A bug preventing license requirement indicators from being visible on some pages has been resolved.
A bug preventing saving of credentials due to bad org-access settings has been resolved.
A bug preventing recalculation of the next scheduled run time for a scan has been resolved.
A bug that could cause inaccurate asset counts in the Organization Overview report has been resolved.
A bug that could cause site import to fail when missing optional fields has been resolved.
A bug that could prevent the VMWare connector task page from loading has been resolved.
A bug that could cause duplicate MSDefender attributes on an asset has been resolved.
A bug where firewalls (and similar devices) responding to many non-asset IP addresses during scanning would lead to unexpected assets in inventory has been resolved.
A bug preventing the active scans dashboard widget from navigating to the associated task on click has been resolved.
A bug preventing site subnet tags from appearing in the dashboard Asset tags widget has been resolved.
A bug that could cause CrowdStrike tasks to fail when missing software permissions has been resolved.
A bug that could prevent bogus services from certain firewalls from being completely filtered has been resolved
A bug that could lead to a browser crash in the latest release of Chromium based browsers on MacOS has been circumvented.
About Version 2 Digital
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.
Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.
About runZero runZero, a network discovery and asset inventory solution, was founded in 2018 by HD Moore, the creator of Metasploit. HD envisioned a modern active discovery solution that could find and identify everything on a network–without credentials. As a security researcher and penetration tester, he often employed benign ways to get information leaks and piece them together to build device profiles. Eventually, this work led him to leverage applied research and the discovery techniques developed for security and penetration testing to create runZero.
A common challenge for many businesses is efficiently managing user permissions as new solutions are deployed and adopted. How do you ensure that the right people have the right permissions to access the data they need for their jobs? Missteps on provisioning permissions can lead to unauthorized access to data, creating major headaches for IT and security teams.
One way around this challenge is to start with solid user and permission management practices that help you assign access to your users, such as role-based access control (RBAC). RBAC is a security approach that authorizes and restricts users’ access based on their roles within an organization. While RBAC is an effective way to manage user access control at scale, you can add extra layers of protection to ensure that the right roles are being assigned. A good example of this would be using hierarchies to propagate the inheritance of permissions.
Let’s take a look at how you can use runZero organizations for data segmentation and hierarchies to streamline user permission management.
The role of organizations
Organizations are a powerful feature that allow you to create separate entities for your assets and control what users can do with the organizational data. In runZero, you can use organizations to group and manage asset data, Explorers, tasks, sites, and scan configurations. The flexibility of organizations allows you to segment your data by company, department, customers, or however you like. For example, you might want to set up different organizations for each environment you have – such as development and production – because you want to segment the data. Or if you’re a service provider, you may have an organization for each one of your customers.
In some cases, your business may want to set up multiple organizations to manage asset data as well as streamline permissions management. Imagine having to review and assign organizational access for each user. That’s time-consuming and prone to user error. So how can you ensure consistent provisioning of user permissions throughout your organizations?
Introducing organizational hierarchies
runZero 3.6 introduces organizational hierarchies, which enables you to create parent-child relationships between organizations. This approach is based on a top-down permissions distribution model, where the child organizations inherit the permissions configured within the parent organization.
The parent organization sets the minimum permission level a user has to that organization and any children. Child organizations with lower permissions than the parent organization will inherit the effective higher permission. For example, if the parent organization has a user’s permissions set to annotator, then the child organizations can be upgraded to user or administrator, but downgraded permissions won’t have any effect.
Imagine you have a parent organization called Mom Org that has a child organization called Baby Org. Within Mom Org, a user named Chris has been assigned an administrator role. As a result, Chris can access the Baby Org organization as an administrator.
Let’s take a look at how you can set up organizational hierarchies in runZero.
How to set up organizational hierarchies in runZero
To set up an organizational hierarchy, you can either create a new organization or modify an existing one. You can always edit your organizations and assign a new parent (or no parent at all).
Here’s how you can assign a parent organization:
Make sure to provide a name and description for the organization. This information captures context about the organization and the type of data it contains.
Make sure to set any expiration dates for stale assets, offline assets, and scan data. This determines how long these data types are stored by runZero.
Under parent settings:
If you want to add the organization under a parent organization, choose an organization to assign as the parent. You can choose a child organization to be a parent as well – runZero supports up to three levels of nesting.
If you don’t want to assign a parent to the organization, choose None. You can add child organizations later, if needed.
Save your organization.
After you save your changes, the new hierarchical permissions will take effect. From the Organizations page, you can see how many children each organization has.
Additionally, you can view the details page for a specific organization to see the parent hierarchy.
How to view user permissions
To see what a user’s permissions look like, you can view a user’s details to see their role for each organization.
Go to your Users page and click the name of the user whose permissions you want to view.
The user details page shows a table that contains all of the organizations that the user has access to and the role that they are assigned.
If the role is listed in the Assigned role column, then it was explicitly configured for the user. If the role is listed in the Inherited role column, then the permissions were set by the default role or parent organization. The higher level of the two columns will be the effective access that the user has to that organization.
Simplify the complexities of user access management with organizational hierarchies
As your business continues to grow and scale, so does the need for control over complexity. To protect and secure your data, you need to have the right systems and measures in place for effective user access management. Once you have solid RBAC practices in place, you can add extra layers of protection, such as organizational hierarchies, to ensure that the right roles are being propagated to users.
Ready to get a stronger handle on user and permission management in runZero? Try out organizational hierarchies today.
About Version 2 Digital
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.
Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.
About runZero runZero, a network discovery and asset inventory solution, was founded in 2018 by HD Moore, the creator of Metasploit. HD envisioned a modern active discovery solution that could find and identify everything on a network–without credentials. As a security researcher and penetration tester, he often employed benign ways to get information leaks and piece them together to build device profiles. Eventually, this work led him to leverage applied research and the discovery techniques developed for security and penetration testing to create runZero.
Version 2 Digital 是立足亞洲的增值代理商及IT開發者。公司在網絡安全、雲端、數據保護、終端設備、基礎設施、系統監控、存儲、網絡管理、商業生產力和通信產品等各個領域代理發展各種 IT 產品。透過公司龐大的網絡、通路、銷售點、分銷商及合作夥伴,Version 2 提供廣被市場讚賞的產品及服務。Version 2 的銷售網絡包括台灣、香港、澳門、中國大陸、新加坡、馬來西亞等各亞太地區,客戶來自各行各業,包括全球 1000 大跨國企業、上市公司、公用事業、醫療、金融、教育機構、政府部門、無數成功的中小企及來自亞洲各城市的消費市場客戶。
“What’s New?” is a series of blog posts covering recent changes to Comet in more detail. This article covers the latest changes in Comet Voyager over February 2023.
There were just three Comet software releases during February – two in the 22.12.x Voyager release series, plus the launch of our latest quarterly series 23.3.0 “Leda”.
February is a short month, and it was also a quiet month for new feature development as we focused on quality assurance ahead of the new quarterly software release. Most new feature development this month has been held back as a result, so you will see many more exciting new features land in the 23.3.x “Voyager” series when it reopens shortly next month in March.
The latest 22.12.x versions of Comet included improvements to the email reporting features that launched at the start of the 22.12.x series.
The Recent Activity email report template now includes a table legend in the email footer, helping to distinguish the color series from each other. By way of comparison, when you view Comet Server’s Recent Activity page in a web browser, it’s possible to hover the mouse over each color segment to display more detailed information about the breakdown of different job types. However, email is a more limited technology medium and an equivalent hover feature is not available. The legend is a simple solution that makes the Recent Activity email report more accessible to Comet Server operators who are not yet familiar with the colors.
The email feature has received more attention to detail, leading to us developing additional fixes for email report previews; for filtering the subset of customers; and for partial configuration of time boundaries.
Another one of our areas of focus this month has been the granular single-file restore system, that now shares some common core functionality across both the Disk Image and Hyper-V Protected Item types. Granular restore now supports more types of NTFS compressed file, including a fix for files that have been compressed with the LZNT1 algorithm. We also fixed an issue with reading single files from within NTFS partitions that have a highly fragmented MFT (Master File Table).
Additionally, we have fixed additional issues with the new Hyper-V single-file restore if a single Protected Item contains multiple virtual machines with multiple VHDX images, as well as fixing cosmetic issues when toggling between Protected Item types in the Comet Backup desktop app.
There have been improvements to the process of syncing Comet data with Gradient MSP. As a reminder, this is an external service that can correlate your Comet user accounts and storage usage with RMM invoices in systems such as Autotask, Syncro RMM, Connectwise, and many more.
The latest versions of Comet Server allow more fine-grained control of the connected feature set; the ability to toggle sending backup job failures to the RMM; optimizing the number of alerts that are sent; and providing clearer error messages if there is an error from Gradient’s service.
All of our focus on bugfixes this month has been building up to one thing – a smooth and seamless release of our latest quarterly milestone software version. This time, it’s named “Leda”, and this rolls up the whole quarter’s worth of 22.12.x enhancements into a new fixed point for you to build your business on.
Like Comet’s previous recent quarterly software releases, “Leda” is named after a moon of Jupiter. Jupiter has a great number of moons and more are continuing to be discovered. When Leda was discovered as recently as 1974, it was one of Jupiter’s 13 known moons. Today, Jupiter has 92 known moons, with the most recent discovered just this month in February 2023!
As well as that, we have many more videos available on our YouTube channel, including guides on getting started with Comet, individual features, demonstrations with our technology partners, and webinars for previous quarterly software releases.
About Version 2 Digital
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.
Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.
About Comet We are a team of dedicated professionals committed to developing reliable and secure backup solutions for MSP’s, Businesses and IT professionals. With over 10 years of experience in the industry, we understand the importance of having a reliable backup solution in place to protect your valuable data. That’s why we’ve developed a comprehensive suite of backup solutions that are easy to use, scalable and highly secure.