RE: pushing updates to windows clients

From: Depp, Dennis M. (deppdm_at_ornl.gov)
Date: 05/07/04

  • Next message: Amin Tora: "RE: process identification" 
    Date: Thu, 06 May 2004 20:46:24 -0400
To: Raoul Armfield <armfield@amnh.org>, security-basics@securityfocus.com

    If you are really looking for a push technology, SUS is not it. SUS
    utilizes a pull technology where the client requests the updates from
    the SUS server. The end result is the client gets patch with the
    appearance of the patches being pushed.

    Denny

    -----Original Message-----
    From: Raoul Armfield [mailto:armfield@amnh.org]
    Sent: Wednesday, May 05, 2004 11:57 AM
    To: security-basics@securityfocus.com
    Subject: pushing updates to windows clients

    We are in the process of testing various ways to keep our windows
    clients up to date with patches. We have a SUS server setup in a test
    environment. We also have Netopia's Netoctopus in our environment. We
    are under the impression that this too can push OS updates.

    I wanted to know if anyone has any experience with this. Is netopia a
    good product to reach this goal?

    Raoul

    ------------------------------------------------------------------------ 

    ---
Ethical Hacking at the InfoSec Institute. Mention this ad and get $545
off any course! All of our class sizes are guaranteed to be 10 students
or less to facilitate one-on-one interaction with one of our expert
instructors. 
Attend a course taught by an expert instructor with years of
in-the-field pen testing experience in our state of the art hacking lab.
Master the skills of an Ethical Hacker to better assess the security of
your organization. 
Visit us at: 
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
------------------------------------------------------------------------
----
---------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off 
any course! All of our class sizes are guaranteed to be 10 students or less 
to facilitate one-on-one interaction with one of our expert instructors. 
Attend a course taught by an expert instructor with years of in-the-field 
pen testing experience in our state of the art hacking lab. Master the skills 
of an Ethical Hacker to better assess the security of your organization. 
Visit us at: 
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
----------------------------------------------------------------------------
  • Next message: Amin Tora: "RE: process identification"

    Relevant Pages

    • Re: MS SUS on SBS Using Group Policy
      ... Have you added the adm template for SUS? ... >updates to the client pcs on the network. ... As I thought it would be best on Client Computer GP ...
      (microsoft.public.windows.server.sbs)
    • Re: Logeinträge bei SUS-Server
      ... Laut Approval Log sind alle Updates freigegeben. ... Ich habe die GP nur an einem Rechner lokal ... wird das LogFile am SUS um genau diesen Eintrag erweitert. ... >für welche Zeit hast Du Deinen Client konfiguriert? ...
      (microsoft.public.de.security.netzwerk.sicherheit)
    • Re: client unable to update from sus server
      ... My first recommendation is to check out this white paper on SUS. ... have to manually set up every clients that will pull updates from SUS. ... > 2) on client machines in control panel automatic update ... > but there is no option to give sus server name .So how ...
      (microsoft.public.win2000.security)
    • Re: SUS server, questions
      ... > We have about a 70 user network and would like to find an easier way to ... The client PC's run the Automatic Update service (also known as Windows ... This client downloads updates from the SUS server whenever ...
      (microsoft.public.win2000.security)
    • Re: FYI for eTrust AV 7.x Users
      ... When I just had my little incident with the redistribution settings on the SBS, my clients were logging successful checks for updates, and the logs indicated that no updates were found. ... That turned out to be because I had not gone back and checked the redistribution server box for 8.x after reinstalling the redistribution server. ... installed the new remote install utility which works the same as v7 did - just edited the .ICF file the way I wanted it and ran the client upgrades from the server. ... I can't remember if it's a separate install, or if you have to click a box when you do the Agent install, but redistribution server is not installed by default. ...
      (microsoft.public.windows.server.sbs)