Network World: Okta, OneLogin top single sign-on review

We are awash in passwords, and as the number of Web services increases, things are only going to get worse. Trying to manage all these individual passwords is a major problem for enterprise security. Many end users cope by re-using their passwords, which exposes all sorts of security holes. One solution is a single sign-on (SSO) tool to automate the logins of enterprise applications and also beef up password complexity, without taxing end users to try to remember dozens of different logins.

In this review for Network World, I tested eight products: SecureAuth, OneLogin, Okta, Symplified, Intel’s McAfee Cloud Identity Manager, Numina Application Framework, SmartSignin and Radiant Logic. Okta and OneLogin came out on top.

You can see the various screenshots on my Pinterest Board here.

Network World: Web-based conferencing comes of age

As more people telecommute, having a reliable way to connect via desktop video conferencing takes on greater importance. And for employees working in the office, Web-based meetings are a less expensive and less time consuming alternative to business travel.

Web-based conferencing services aren’t new, but they have been getting better, easier to use and less expensive. The options range from one-on-one desktop screen sharing to group video chats to large-scale presentations such as Webinars or “virtual conferences.”

We looked at eight desktop conferencing services, a mix of market leaders and newcomers, including Adobe Connect, Cisco Webex, Citrix GotoMeeting, InterCall Unifed Meeting (in beta with v5), LogMeIn Join.Me Pro, Microsoft Lync 2013 (in beta, and part of Office 365), Skype Premium (now owned by Microsoft), and Vyew.com Professional. Connect and Webex come out on top.

You can read my complete review in Network World here.

Three new SMB-oriented video screencasts for Symantec

This month I put together a series of three video screencasts on Symantec’s small business oriented cloud-managed services line. These are for folks that don’t have a dedicated IT person, but know enough to be dangerous. They represent a new direction for Symantec: packing a bunch of features, but making them dirt simple to deploy and manage. Two of them leverage the same SaaS-based agents and a Web-based console that means that a VAR can manage your network without even being physically present. The three videos are all very short and to the point and show the ease of use quite vividly. They are:

  1. Using Symantec’s Backup Exec.Cloud To Protect Your Small Business
  2. How small businesses can use Symantec Backup Exec 2012 to recover lost files and systems
  3. Symantec Endpoint Protection.cloud – Hassle Free Security For Small Businesses

How small businesses can use Symantec Backup Exec 2012 to recover lost files and systems

This is my third video of Symantec Backup Exec, an enduring product that has withstood the test of time and multiple vendors over more than a decade. I took a look at the latest 2012 version of the product which has a very different interface and has simplified the process  of backup and recovery.

The links to the various video versions can be found:

HP Input/Output: 6 Ways to (Discreetly) Share Your Photos Online

To be sure, we live in an over-sharing world. On Facebook, millions of questionable party photos are shared daily, documenting things that many of us later regret. But what if you want some discretion, such as when you have just returned from a corporate retreat or some other event? You want to take the output from your group of several amateur photographers and just share this among the group. The challenge is that you want to keep them private to the participants and not plaster them all over the Internets. What to do?

Consider that your requirements are to satisfy the ultra-paranoid in the group and also something that is dirt simple to use. You don’t want everyone to join a new social network: most of us have too many logins already. This means most of the microblogging sites are out. And you don’t want to have to worry that someone will click on the wrong button and share the entire photo collection with the universe inadvertently.

Facebook is probably the first site that comes to mind for sharing photos. But trying to stay on top of its ever-shifting privacy controls is vexing, and besides, it is almost too easy for one of your group members to inadvertently share a photo that you would rather not have in general circulation. So that’s out.

What about LinkedIn? It is the go-to social network for business purposes. But alas, you can’t really upload any content that isn’t already out on the Internet somewhere. Too bad, because it has some very solid privacy controls in place. The other downside of LinkedIn is that getting one of its groups setup is an exercise in patience. I call it “triple opt-in.” For one of my groups of about 60 people, it has taken the better part of six months to get everyone to become a member.

And some of the same goes for other social networking sites, including Google+. While you can set up specific groups of users called “circles” in Google+ that will limit who gets to view the pictures, one mistake and your work is on display for the whole world or inside Google’s indexing maw. You want something that can set up discrete privacy controls for your group and not have to worry about it if you don’t check all the right boxes. The photo sharing part comes from Picasa, which once was a great photo sharing site, but now has been tricked out with all sorts of Google+ tagging baggage.

You could start a private mailing list group and upload your photos there. For example, Yahoo Groups is a free service and has the ability to support uploaded photos. But starting up a mailing list can be cumbersome, and might be overkill for your purposes.

Then there are dozens of file sharing sites such as Box.net and Evernote that make it easy to share general files in the cloud. These will keep your information private, to be sure. But you really want something that is designed around uploading and sharing images.

Fortunately, there are many photo sharing services out there designed for this purpose. We looked at six of them:

  • Shutterfly.com
  • Photobucket.com
  • Flickr.com (now part of Yahoo)
  • Zangzing.com
  • SmugMug.com
  • Posterous Spaces (now part of Twitter)

None of these services is perfect. They fall into two broad categories: those that have better privacy controls or those that are easier to use. Let’s look at our requirements in more detail. First, you want a service that can create a private space that doesn’t appear on search engines or that any random user can find. Photobucket and Shutterfly both do this, by setting up a special URL (Photobucket.com/groupname or Groupname.shutterfly.com) for your group. For Photobucket, for example, you have three choices for each album’s privacy controls: everyone can see them, no one else can see them, or you can password protect them by invitation only. The latter is what we want to use and you can set up an album password so that only those folks who know the password can see and download the photos. (See the screenshot below.) Shutterfly has similar options with its share sites option.

The problem for both Photobucket and Shutterfly is that you need to become a member to upload any photos: that is fine if you just have a few shutterbugs in your group, but if you have lots of sources of images, it can become cumbersome.

SmugMug has lots of granular security controls for its service. You can set up your photos on a special site username.smugmug.com for example. But there is a lot more: You can prevent Google from finding your photos with one mouse click, and add watermarks with another. You can add password-protection to your albums, and even provide another password for guests to upload photos to a particular album, so they don’t have to join the service to share their work. Here is a screenshot of its many security controls:

Flickr has URLs for groups, such as http://www.flickr.com/groups/groupname. But Yahoo really wants you to sign up to its service, and you will need to do so if you want to post any photos. Flickr has a guest pass option but it is somewhat clunky. Also, if you are using Flickr, make sure you have turned off its autoposting/notification features if you want to keep your photos from showing up in your Facebook timeline or other social places.

Zangzing.com is better at ease of use but it comes at a cost. You can set up individual albums that have their own URLs, such as http://www.zangzing.com/username/albumname. There is no password required so anyone who knows the URL can access the entire album. And if you want to upload pictures, you will need to join. You can also email pictures to albumname@zangzing.com and they will be automatically posted to the album, which is a nice feature.

Finally, Posterous is more of a blogging site than a photo collection, but it can be used for sharing photos, as well. Indeed, if you want to mix your photos with other business content, Posterous could be a good choice and could serve as the base for a simple low-end Web presence. Groups of photos can have their own URLs, but you do need to become a member to post content. You can also email your photos and have them posted to your site, like what Zangzing does.

There are lots of other photo sharing services, including Instagram.com, Klip.com, Twitpic.com and Pixable.com. Most of them aren’t focused on privacy but in making it easier to share photos across the universe.

Recommendations: Start with SmugMug

We recommend you start with SmugMug, especially if you require the simplicity of a shareable URL and don’t want to mess with having each person sign up for the service. If you need the additional security that a membership site offers, then look at Photobucket. It has more granularity for the security options than Shutterfly. If all the bells and controls of SmugMug are daunting, then take a closer look at ZangZing. Steer clear of Flickr: Its interface is somewhat long in the tooth, and it is too easy to click on the wrong button and end up sharing your entire photo collection to Facebook or Twitter. If you have more confidence in your users’ abilities, you can set up private groups in Facebook or Google+. Finally, if you have yet to join the blogosphere and want something simple to set up that will include a lot of photos and other illustrations, then Posterous is where you should start.

Three ways to use the TPM chip

I bet you didn’t know that your laptop has a built-in encryption device that can be used for all sorts of goodness, including creating an encrypted hard disk partition using Bitlocker and for managing the overall security of the laptop itself. But you can watch my latest screencast video here that I did for Wave Systems (who makes software that leverages this wonder chip) and in three minutes learn three different ways that this Trusted Platform Module chip can work to keep your mobile computers safe.

QuorumLabs’ onQ: a new way to recover Windows servers (video review)

More businesses are depending that their computer systems are staying up and continuously running. To protect them, they have piles of tape backups made. However, these tapes are never ever touched or tested. Another choice for disaster recovery is to build a replicated remote data center. But this can get pricey.

Enter QuorumLabs and their onQ Recovery appliance. I spent some time last week working with them and produced this video screencast that explains its features. For about $20 large, you can set up a pair of these appliances and fully protect all of your Windows servers. It uses some cool virtualization technology to make copies of your running servers, so when one goes south you don’t have to run around trying to recover it quickly.

Three years of video screencast reviews: some lessons learned

It was three years ago this week when I began an experiment in producing a new form of IT product reviews, using video screencasting technology, combined with my years of testing thousands of products. Since then, I have done more than 65 reviews, which works out to about two a month. After putting a product through its paces, I write and record the script and then publish the video far and wide.

Certainly, online video has come a long way in the past three years: streaming sites have come and gone, YouTube has gotten more powerful, and social networking now plays a key part of how anybody’s videos find an audience. And the consumer side seems to be leading the way: Now we are talking about “cutting the cord” of cable TV and how more people are going online to get their content. Netflix and Hulu have a robust streaming business. And Centris has found that approximately 56% of households are using a combination of traditional pay TV and PC or mobile-based Internet consumption approaches to view video.

The reviews are paid for by the vendors themselves and have been a big hit, if I do say so myself. I have repeat business from some of the major computer vendors, including McAfee, Symantec, Blue Coat and Dell as well as smaller niche players such as Hytrust and TuneUp. They really help explain the product and provide a potential IT purchaser the basic context of how the product works, or won’t work, in their particular environment. Several VARs have called my vendor clients wanting to bring their customers to the table because of something they saw on one of my videos. And they continue to collect views months after they have been posted, including on sites such as Tom’s ITPro.com, InfoSecIsland.com and ITExpertVoice.com. My YouTube channel (davidstrom2007) has done very nicely, with several videos getting more than 5,000 views (Symantec’s videos are the most popular there).

So here are some lessons learned from the experience.

1. YouTube isn’t the only game in town. There are other sites, particularly for how-to and business audiences, where videos are watched. 5Min.com, which is now part of AOL, is one of the best. VideoJug.com and Metacafe.com are also up there in terms of my stats. But that is just me, and who knows why these sites connect and others don’t – your mileage may vary. But what is clear is that one site’s popular post is another site’s dog. For example, a video I did for McAfee’s Trusted Source has more than 40,000 views on 5Min, but is going nowhere on YouTube with less than 200 views. So if you are going to post, post everywhere you can to garner an audience.

2. Length matters. And the shorter the better. I use a hosting service called Wistia.com that can track how many people tune out over the length of time for the video, and about half tune out before the ending slide pops up. When I started I aimed at five minutes or less. Now I try for three minutes. We are all ADD. Wistia did a survey a few years ago across their hosting site and agreed with me. The key is having dialog supporting action: just don’t spew platitudes but back up the action you have on the screen with something important to say. For most of the videos, I talk quickly because I want my viewers to really listen. I can see places where they have stopped and rewound the stream and think that is a Good Thing because they are more engaged with my content.

3. Formats are still painful and plentiful. Every streaming site has a different collection of which video codecs and formats it will accept. Flash (FLV) files used to be best, now I produce MP4s, which seem to be accepted in most places. Make the biggest size video that can fit your site, but realize that a lot of the streaming sites will downcode it to 640×480 or something less than optimal. But this presents a problem to show many computer products that like to sprawl across a 2000-pixel wide display.

4. Get the best quality mic and record your soundtrack first. I don’t use any special music or effects; it is just me narrating the video. But I get this track nailed down first; always keeping in mind the action that is going on the screen. This is the reverse of traditional movie making, but you don’t see me on screen – it is just the computer app that I am reviewing. It is a lot easier to synchronize the video to a fixed audio track than the other way around. Some screencasters record the audio while they are clicking around for the video capture at the same time: I don’t think that works as well.

5. Put a call to action at the end. Do you want a viewer to download a free trial or get a white paper or register for something on your site? Include a URL in the video where they can go do these tasks. If you are using the video for lead gen, do you have a trackable URL reserved for this purpose?

Thanks to all my video clients for helping make this series so spectacular. And if you would like me to produce a video for you, or teach you how I have done it, you know where to find me. The videos by the way are all posted on Webinformant.tv.