Re: [fw-wiz] OT: Av and Gartner...

From: R. DuFresne (dufresne_at_sysinfo.com)
Date: 07/31/03

  • Next message: Paul A. Henry: "Re: [fw-wiz] OT: Av and Gartner..."
    To: Jim McAtee <jmcatee@mediaodyssey.com>
    Date: Wed, 30 Jul 2003 21:14:45 -0400 (EDT)
    
    

            [SNIP]

    >
    > Never understood running AV on servers. How would they get infected? Very
    > little, if any, browser use is permitted on our servers and no email clients
    > are ever run on them. Now, if we're talking about servers in a DMZ, such as
    > web servers, compromises are always a possibility, but very few of those would
    > be caught by an AV.
    >
    >

    Think mounts and shares, and network served apps.

    The server does not have to become sick and infected to be the source or
    part of the problem, if it's serving up infected versions of files to
    others that run or open them and trust their macros.

    Thanks,

    Ron DuFresne

    -- 
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
            admin & senior security consultant:  sysinfo.com
                            http://sysinfo.com
    "Cutting the space budget really restores my faith in humanity.  It
    eliminates dreams, goals, and ideals and lets us get straight to the
    business of hate, debauchery, and self-annihilation."
                    -- Johnny Hart
    testing, only testing, and damn good at it too!
    _______________________________________________
    firewall-wizards mailing list
    firewall-wizards@honor.icsalabs.com
    http://honor.icsalabs.com/mailman/listinfo/firewall-wizards
    

  • Next message: Paul A. Henry: "Re: [fw-wiz] OT: Av and Gartner..."

    Relevant Pages

    • Re: XP Pro SP2 hides from network
      ... > I have tried disabling the firewall, but that doesn't have any affect (in ... > There are 5 servers in domain MSHOME on transport ... All of the systems list the same Master Browser and the same 2 ...
      (microsoft.public.windowsxp.network_web)
    • Workgroup is not accessible
      ... The computers are named Mars and Venus. ... Master browser name is held by: ... Calling NetServerEnum to enumerate WFW servers. ... Error browsing network: ...
      (microsoft.public.windowsxp.network_web)
    • RE: Cant see W2K computers when browsing
      ... but I believe these events didn't relate with the browser ... If there's any anti-virus software on the servers, ... Browstat is included in the Support Tools for Windows Server 2003. ... PLEASE NOTE the newsgroup SECURE CODE and PASSWORD were ...
      (microsoft.public.windows.server.sbs)
    • Netlogon Errors
      ... On several servers this morning I was unable to login and received the following message: ... Make sure that this computer is connected to the network. ... If this computer is a domain controller for the specified domain, it sets up the secure session to the primary domain controller emulator in the specified domain. ... Event Source: BROWSER ...
      (microsoft.public.windows.server.active_directory)
    • RE: Removing a Domain
      ... Master browser name is: SERVER1 ... There are 125 servers in domain DOMAINA on transport ...
      (microsoft.public.win2000.new_user)