RE: Pentasafe Equivalent for AIX

From: Rosado, Rafael (Rafael) (rarosado_at_lucent.com)
Date: 08/25/05

  • Next message: Jens Knoell: "Re: Establish persistant outbound connection for covert application" 
    To: mmarrero@lloydstsb-usa.com
Date: Wed, 24 Aug 2005 16:26:11 -0600

    Depending on your immediate needs, you may want to hold off until there is a
    scoring tool from The Center of Internet Security (CIS) for AIX -
    http://www.cisecurity.org/bench_aix.html due in Sept. 2005.

    Other alternatives are:

    * Symantec's Enterprise Security Manager (ESM) -
    http://enterprisesecurity.symantec.com/products/products.cfm?ProductID=45&PI
    D=11409114&EID=0,

    * ISS System Scanner -
    http://www.iss.net/products_services/enterprise_protection/vulnerability_ass
    essment/scanner_system.php and

    * Bindview's Bv-Control for Unix -
    http://www.bindview.com/Products/bvControl/Unix.cfm .

    There may be other commercial products that address host vulnerabilities. I
    believe all these products require an agent to be installed on every AIX box
    you are going to evaluate/scan.

    Good Luck!

    Rafael Rosado, CISSP, CISA
    Security Consultant
    Lucent Worldwide Services
    Business Consulting
    Reliability and Security Services
    Voice: 954-885-2176
    Email: rarosado@lucent.com
    http://www.lucent.com/security/
    http://www.lucent.com/solutions/sec_sol_sp.html

    This e-mail message and any attachment(s) to it are intended only for the
    use of the addressee(s). The information in this e-mail message is
    confidential and proprietary and may be subject to legal privilege. The
    reading or dissemination of this email by anyone other than the intended
    recipient is strictly prohibited. If you believe you have received this
    e-mail in error, please notify the sender immediately and permanently delete
    this e-mail, any attachments and all copies thereof from any drives or
    storage media and destroy any printouts.
    -----Original Message-----
    From: mmarrero@lloydstsb-usa.com [mailto:mmarrero@lloydstsb-usa.com]
    Sent: Wednesday, August 24, 2005 11:31 AM
    To: security-basics@securityfocus.com
    Subject: Pentasafe Equivalent for AIX

    Hello list,

    Is anyone familiar with some type of package, like Pentasafe now part of
    NetIQ, that will run on AIX. I currently use the product for the OS/400 but
    am installing a new UNIX server and would like to see if I can get the same
    reports that I get now for the OS/400 on the AIX box. If anyone knows of
    anything please let me know.

    Much appreaciated...

  • Next message: Jens Knoell: "Re: Establish persistant outbound connection for covert application"

    Relevant Pages