MS Patches Management software: SUS vs 3rd party

From: Andres Martinez (artiman_at_cable.net.co)
Date: 10/27/03

  • Next message: Andy Cuff [Talisker]: "Internet Alert/Threat Levels" 
    Date: 27 Oct 2003 21:49:00 -0000
To: security-basics@securityfocus.com
    ('binary' encoding is not supported, stored as-is)

    I'm looking the best solution for one of our customers to deal with the administration and deployment of security patches, if somebody can make a recommendation based on real experience I'll appreciate.
    Customer server environment:
     
    125 servers: 80% Windows 2000 - 20 % Windows NT 4.0 (They are planning to get rid of NT servers soon)
    All servers on same physical location.
    There is no central administration of servers: Server managment provided for different people with different Technical skills. Hard to get control. Few IT resources.
    By default Windows installations = High risk of security problems.
    Lack of security policies for server management and security.
    Very reactive to solve problems.
    Lack of software or scripts to automatize processes like patches deployment.
    They already have had serious problems due to virus like welchia and blaster who exploit know security vulnerabilities.
    Corporate Symantec antivirus used for virus protection, but not installed on all servers, problems with antivirus updates on some servers.
    It is hard to obtain approval for reboot servers due to mission critical role and business nature (healthcare industry), so minimun downtime is required.
    What would you use ?

    MS Sofware Update Services (SUS) which is free

    or Third party software like Hfnetchk Pro or St Bernard Update expert (http://www.mcpmag.com/Features/print.asp?EditorialsID=354)

     

    Waiting for your comments

     

    Thanks

     

    Andres

     

    ---------------------------------------------------------------------------
    Forum Systems PRESIDIO: PGP / XML GATEWAY APPLIANCE
    The Presidio integrates PGP data encryption and XML Web Services security to
    simplify the management and deployment of PGP and reduce overall PGP costs
    by up to 80%.
    FREE WHITEPAPER & 30 Day Trial -
    http://www.securityfocus.com/sponsor/ForumSystems_security-basics_031027
    ----------------------------------------------------------------------------

  • Next message: Andy Cuff [Talisker]: "Internet Alert/Threat Levels"

    Relevant Pages

    • Re: Need urgent help regarding security
      ... There is plenty of security info out there ... email from even a dozen servers is small. ... an OS version upgrade should not be taken lightly. ... Given that your root password was apparently found on the servers, ...
      (freebsd-questions)
    • [Full-Disclosure] w32.frethem.k@mm and good reading
      ... Script kiddies deface websites. ... only obfuscating your own perception of security. ... >> vulnerabilities in a particular operating system or server software ... >> Imagine a custom operating system used by only a few servers, ...
      (Full-Disclosure)
    • [Full-Disclosure] w32.frethem.k@mm and good reading
      ... Script kiddies deface websites. ... only obfuscating your own perception of security. ... >> vulnerabilities in a particular operating system or server software ... >> Imagine a custom operating system used by only a few servers, ...
      (Full-Disclosure)
    • RE: IIS6 Security and other web servers
      ... IIS6 Security and other web servers ... I know of no Windows architecture that is exposed directly to ... I know of a number of LAMP-type servers that are ... exposed directly to the Internet with no intervening layers. ...
      (Security-Basics)
    • TSLSA-2005-0059 - multi
      ... Affected versions: Trustix Secure Linux 2.2 ... PHP is an HTML-embedded scripting language. ... use of Rest with FTP servers and Range with HTTP servers to retrieve files ... - New Upstream and Multiple Vendor Security Fixes ...
      (Bugtraq)