TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
[EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems!
----------------------------------------------------------------------------
I hate to point out the obvious, but PCAnywhere is trully awful in
architecture ...
either 2K with "Administrative" terminal services - + security, or Metaframe
w/SecureICA would be your best bet ....
Windows with PCA is far too promiscuous to use for a security monitoring
station ...
Jon M Zellhoefer, CCI CCEA NCNI SCNE IEEE
Sr. Unix Systems Engineer, Infrastructure Development
CellularONE, West; DBO Western Wireless, Corp.
email: [EMAIL PROTECTED]
email: [EMAIL PROTECTED]
email: [EMAIL PROTECTED]
TXT MSG: [EMAIL PROTECTED]
----- Original Message -----
From: "Ballerini, Jean Paul (ISS Zurich)" <[EMAIL PROTECTED]>
To: "tai" <[EMAIL PROTECTED]>; "Samir, Nanis (ISS Cairo)"
<[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Tuesday, July 10, 2001 1:33 AM
Subject: RE: Quick question about system scanner
>
> TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message
to
> [EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any
problems!
> --------------------------------------------------------------------------
--
>
> > > So the console will only run on Windows. Actually, it also
> > logical to do so
> > > since in most environments, the admin will want to monitor
> > the System
> > > Scanner from his workstation rather than having to run
> > around to a Unix box
> > > every time he wants to run a session or generate a report.
> >
> > I disagree. From what was described to me the
> > "console" is acting
> > more like a server than anything else. The same machine holds the
> > database, and is responsible for pushing out policies and
> > such. This is a
> > server, and as such will sit in our server room. However,
> > for day to day
> > work, we will need to access it, and currently, the thought is
> > "pcanywhere". Bleargh. Lousy architecture.
> >
> > I was told that the "console" box has to be a dedicated
> > box. Any
> > "dedicated" box sits in a dedicated server room.
> >
>
> I guess it is important to piont out that with release 4.2 of System
Scanner
> we also have "Vista", which is a web interface to the console. Therefore
> there is no need for you to use "pcanywhere" at all.
> The reason why it makes sense to have a dedicated machine is that when you
> pull the data (without at the same time removing them from the agent,
btw),
> you fill the SS database with the vulnerabilities of your servers. I would
> not be too enthusiast at the idea that anybody can sit in front of the
> machine.
> I don't know when you got information about SS, but I have the feeling
> they're not completely up to date.
>
> Jean Paul
>
> ---------------------------------------------------------------------
> ISSX Internet Security Systems AG Tel: +41 (0)1 842 6600
> Jean Paul Ballerini Dir: +41 (0)1 842 6642
> System Engineer CH/A Fax: +41 (0)1 842 6699
> Pumpwerkstrasse 40 Mob: +41 (0)79 254 7364
> CH-8105 Regensdorf email: [EMAIL PROTECTED]
> Switzerland web: http://www.iss.net/
>
> *** Internet Security Systems - The Power to Protect ***
> ---------------------------------------------------------------------
>
>
