Weiss, Mark (M.A.) wrote: > All, > > I'm looking for some feedback regarding any testing of ISS products > (notably Server Sensor, Network System, Internet Scanner & Proventia > Desktop) that is done by companies once they receive them prior to > implementation into their production environments. > > We are mainly looking for test matrices, types of functionality tested, > tools used and anything else that could help us create a test > enviornment that would allow us to fully test these products before we > release them into production. > > Thanks in advance, > Mark Weiss > Ford Motor Company
We have an environment of distributed control with a centralized SiteProtector console. Each department has established a "testing" group into which they place their testing machines whenever new patches for Proventia Desktop ship. For our purposes, we focus exclusively on the host-based firewall and IPS features of the package. If the department technical leads wish to test other features (and many are working with the Buffer Overflow Protection and finding interesting issues), that is up to them. We (central OIT - Information Security) only request feedback on the firewall and ease of installation and administration. For the SiteProtector patches, I generally wait a week and let some other canary die in the coal mine before I apply those updates. ISS has a tendency (real or perceived, what's the difference) to release their patches without proper quality assurance testing, and the early adopters tend to break things. For Internet Scanner, I have a group of machines to run this software, and I apply the latest updates (Windows & ISS Updates) to ONE machine at a time and run a few test scans before applying to the rest of them. I don't have any real matrices or list of deliverables. I guess that'd be a wise thing to create... Jonathan _______________________________________________ ISSForum mailing list [email protected] TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum To contact the ISSForum Moderator, send email to [EMAIL PROTECTED] The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.
