RE: SecureIIS

From: Patrick S. Harper (patrick@internetsecurityguru.com)
Date: 09/27/01 

From: "Patrick S. Harper" <patrick@internetsecurityguru.com>
To: <mstark@dceg.com>, "'Marc Maiffret'" <marc@eeye.com>, "'Mark Fagan'" <Mark.Fagan@esat.com>, "'Focus-Ms (E-mail)'" <focus-ms@securityfocus.com>
Subject: RE: SecureIIS
Date: Thu, 27 Sep 2001 10:25:46 -0500
Message-ID: <!~!UENERkVCMDkAAQACAAAAAAAAAAAAAAAAABgAAAAAAAAAKo5hLJgV8kCGKdQJU7J+GMKAAAAQAAAAySI7g1vGUUOh1+Zo3i6yogEAAAAA@internetsecurityguru.com>

It is much more secure then VNC, PC Anywhere, or other programs of the
sort.

Also I have only seen one brute force attack program and if you have a
logon security message it thwarts that.

Peace, commerce, and honest friendship with all nations -- entangling
alliances with none.
--Thomas Jefferson (1743-1826)

From every mountainside let freedom ring.
--Samuel Francis Smith, from the anthem "America", 1831

-----Original Message-----
From: Mike Stark [mailto:mstark@dceg.com]
Sent: Wednesday, September 26, 2001 5:19 PM
To: Marc Maiffret; Mark Fagan; Focus-Ms (E-mail)
Subject: RE: SecureIIS

off topic, sorry..on a security note, HOW secure is terminal services
for windows 2000, is it more secure then pcanywhere and vnc ???...is
there any info on this..

Thanks

-----Original Message-----
From: Marc Maiffret [mailto:marc@eeye.com]
Sent: September 26, 2001 11:49 AM
To: Mark Fagan; Focus-Ms (E-mail)
Subject: RE: SecureIIS

its stopped the last 5 or something remote IIS vulnerabilities before
patches where even released from microsoft.

note: i work for the company that makes secureiis and am one of its
developers bla bla bla heh

Signed,
Marc Maiffret
Chief Hacking Officer
eEye Digital Security
T.949.349.9062
F.949.349.9538
http://eEye.com/Retina - Network Security Scanner http://eEye.com/Iris -
Network Traffic Analyzer http://eEye.com/SecureIIS - Stop known and
unknown IIS vulnerabilities

|-----Original Message-----
|From: Mark Fagan [mailto:Mark.Fagan@esat.com]
|Sent: Wednesday, September 26, 2001 4:47 AM
|To: Focus-Ms (E-mail)
|Subject: SecureIIS
|
|
|Anybody advise on ability of SecureIIS ?
|
|
|**********************************************************************
|This email and any files transmitted with it are confidential and
|intended solely for the use of the individual or entity to whom they
|are addressed. If you have received this email in error please notify
|the system manager.
|
|http://www.esatbusiness.com
|
|**********************************************************************
|