TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
[EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems!
----------------------------------------------------------------------------
As Brett mentioned, SAFEsuite Decisions does use MS-SQL on NT or Oracle on
Solaris. Not only does it correlate data from ISS products, but it also
takes in Firewall data and can be customized to correlate other security
data sources. It is meant to correlate historical data across the enterprise
(multiple instances of scanner or RealSecure in one report, for example) AND
to correlate across multiple security products (compare Firewall logs and
RealSecure attacks to tell you how/if attackers got through your firewall).
OK...sorry for the commercial, but I think it's a pretty cool product.
:)
-----Original Message-----
From: Osborne-1, Brett [mailto:[EMAIL PROTECTED]]
Sent: Thursday, January 13, 2000 9:45 AM
To: 'Athanasiou, Ken (FUSA)'; [EMAIL PROTECTED]; [EMAIL PROTECTED]; dave
druitt
Subject: RE: Internet Scanner - Large scans
Importance: High
TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
[EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any
problems!
----------------------------------------------------------------------------
ISS Also has a product, Safe Suite Decisions, which consolidates db from ISS
products. It uses SQL or Oracle I beleive.
Brett Osborne
CLCS IT Security/Networks
Checkout and Launch Control System
> ----------
> From: dave druitt[SMTP:[EMAIL PROTECTED]]
> Sent: Wednesday, January 12, 2000 5:27 PM
> To: 'Athanasiou, Ken (FUSA)'; [EMAIL PROTECTED]; [EMAIL PROTECTED]
> Subject: RE: Internet Scanner - Large scans
>
> TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message
> to
> [EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any
> problems!
> --------------------------------------------------------------------------
> --
>
> The answer that suggests itself immediately is with SQL in the Access DB
> which is used by Scanner..
> Warm Regards,
> DC Dave
>
> -----Original Message-----
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> Athanasiou, Ken (FUSA)
> Sent: Wednesday, January 12, 2000 1:42 PM
> To: '[EMAIL PROTECTED]'; '[EMAIL PROTECTED]'
> Subject: Internet Scanner - Large scans
>
>
> TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message
> to
> [EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any
> problems!
> --------------------------------------------------------------------------
> --
>
> ISS recommends that you split up large scans into smaller sessions. How
> then do you join the sessions to produce a single report? I can easily
> generate a report off a single session but haven't been able to figure out
> how to combine multiple sessions into a single report. As I'm doing a DB
> discovery across about 12000 IPs the Scanner, quite frankly, drops dead
> (actually it slows to a crawl, gets slower and slower, and appears to drop
> dead.)
>
> Anyone want to answer this "duh.." question of the week for me?
>
> Thanks,
> Ken
>
> ____________________________________
> Ken Athanasiou, AVP
> Information Security
> First USA Bank, N.A.
>
>
>
