Re: [Fed-Talk] Auditing crushed by VMware
Re: [Fed-Talk] Auditing crushed by VMware
- Subject: Re: [Fed-Talk] Auditing crushed by VMware
- From: "Valentine, Ruth Ann B." <email@hidden>
- Date: Thu, 15 Nov 2012 14:50:32 +0000
- Thread-topic: [Fed-Talk] Auditing crushed by VMware
Todd,
Have you tried looking at what particular events are flooding the system?
You can create a custom audit class to get the events you want and not the
nuisance events.
Ruth Ann
On 11/14/12 4:53 PM, "Rubin, Bruce Civ USAF AFMC AFRL/RIEBA"
<email@hidden> wrote:
>Todd,
>
>I don't know if there is a problem running numerous virtual machines (one
>at
>a time or simultaneously) but if they each have their own virtual HDD and
>there is sufficient RAM, I would be disappointed if there was a problem
>(except for possession of certain resources such as the keyboard, mouse,
>optical disk, USB ports, etc.).
>
>As for AV SW conflicting with each other on a Mac, I've been running on a
>Core 2 Extreme iMac using 10.6/10.7/10.8 free avast!, federal government
>provided Symantec Endpoint, and free Sophos all at once without any known
>problems (I have a 14 year old). I even had Intego's VirusBarrier running
>but I've removed that when my subscription ran out.
>
>--Bruce
>
>-----Original Message-----
>From: Todd Heberlein [mailto:email@hidden]
>Sent: Wednesday, November 14, 2012 4:43 PM
>To: Rubin, Bruce Civ USAF AFMC AFRL/RIEBA
>Cc: email@hidden Talk
>Subject: Re: [Fed-Talk] Auditing crushed by VMware
>
>> Does VirtualBox and/or Parallels Desktop for Mac generate similar
>> quantities of audit data?
>
>I don't know. I'm going to run some additional data analysis and
>experiments
>to see what is going on on VMware first.
>
>Perhaps next week I'll pick up a copy of Parallels and give it a go. Does
>anyone know if VMware and Parallels can co-exist on the same computer?
>(not
>run at the same time, just be installed on the same computer; in the past
>some AV systems conflicted with each other)
>
>Todd
>
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden