RE: [ISSForum] Securing RealSecure / SiteProtector Hosts

[Soda, Marcantonio]

Actually, I was told that Server Sensor on SiteProtector (App server and DB server) was unsupported.  After having numerous issues with SiteProtector, Tech Support told us to reinstall the entire thing, because of Server Sensor being on installed.  Since, we've had very little problems.   This is after we were told not to harden the boxes, again by Tech Support.  I have a major issue with this restraint, especially coming from a security company. -- Marc Soda, CISSP Information Security Engineer NCO Group 215.441.2127 [EMAIL PROTECTED] -----Original Message----- From: Banton, Charles (ISS Atlanta) [mailto:[EMAIL PROTECTED] Sent: Monday, January 26, 2004 1:55 PM To: Dan Widger; [EMAIL PROTECTED] Subject: RE: [ISSForum] Securing RealSecure / SiteProtector Hosts One note is that Support for Server Sensor installed on SiteProtector components such as             Application Server, Event Collector, Desktop Controller, Deployment Manager, Fusion, and Database is supported.  If there are questions please refer to Technical Support. Best Regards, Charles Banton                  Technical Product Manager www.iss.net     INTERNET | SECURITY | SYSTEMS Proventia(tm) Enterprise Protection -----Original Message----- From: [EMAIL PROTECTED] On Behalf Of Dan Widger Sent: Friday, January 23, 2004 2:36 PM To: [EMAIL PROTECTED] Subject: [ISSForum] Securing RealSecure / SiteProtector Hosts  I've been asking around for a while, and haven't found a viable answer for the following questions.  Maybe you have asked yourselves these questions, and already found the answers,   How can I secure the hosts that make up a Site Protector system?   Are there any scripts that can harden a windows (2K) host supporting the identified SiteProtector pieces (identified below).   What services are needed?    I can find notes that identify what ports and protocols are typically used, but I'm looking for all the relevant info in one doc.     What kind of application protection can I use to protect these hosts (Server Sensor, Desktop Protector, 3rd Party solutions like Entercept, or Cisco CSA)?    SiteProtector Pieces             Application Server               Event Collector               Internet Scanner               Desktop Controller   I've been told that I can't use ServerSensor, and I can't use Desktop Protector.  But - What Can I Use?   Danw Security engineer