=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
SEARCHWIN2000.COM | Security Tip
March 5, 2002

Essential tools and advice for the security-focused administrator.  
More Tips: http://searchwin2000.techtarget.com/tips/
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

IN THIS ISSUE | Table of Contents

1. SECURITY TIPS 
   - SNMP on Windows servers
   - Top 10 security headaches
   - IIS 5.0 hotfix checking tool 

2. IMPORTANT ANNOUNCEMENTS AND LINKS
   - Product Review: Four stars for this Win2k, NT lockdown utility 
   - Online Event: Securely managing Windows 2000
   - User Attitude Survey: Tell us what you think!

____________________________________________________________________
********************* SPONSORED BY: VeriSign ***********************

Learn how to build a secure e-commerce site with VeriSign's FREE
White Paper, "Building an E-Commerce Trust Infrastructure." See how
you can authenticate your site to customers, use 128-Bit SSL
encryption to secure your Web servers and accept secure payments
online. Click here:
http://www.verisign.com/cgi-bin/go.cgi?a=n116974520045000
____________________________________________________________________

SNMP ON WINDOWS SERVERS | by Tom Lancaster

You may have heard the commotion recently about certain SNMP
vulnerabilities that were discovered in the products of over 100
different vendors. Many security researchers have described these
vulnerabilities as far more dangerous than even the Code Red worm,
and they're not exaggerating. If you have Windows servers, you should
turn SNMP off, if at all possible. If you are actually using SNMP for
something important, you should restrict SNMP access to your server
by allowing only packets from certain IP addresses.

>> CLICK for the full tip...
http://www.searchWin2000.com/tip/1,289483,sid1_gci805408,00.html

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
TOP 10 SECURITY HEADACHES | by searchWindowsManageability  

Find out in this tip what measures your peers are taking to de-bug
what's bugging them the most. 

>> CLICK for the full tip...
http://searchwindowsmanageability.techtarget.com/originalContent/0,289142,sid33_gci804507,00.html

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
IIS 5.0 HOTFIX CHECKING TOOL | by James Michael Stewart

Using HFNETCHK can simplify the task of maintaining your Web server
by helping you to keep up with all the IIS security fixes and
patches.

>> CLICK for the full tip...
http://searchwin2000.techtarget.com/tip/1,289483,sid1_gci802868,00.html

____________________________________________________________________
*********** MCSE Exam 70-219: 5 Courses for 1 LOW Price! ***********

Study up for the MCSE! This Active Directory Design training package
takes you from the Intro through to the Advanced level. 

Act now: limited time offer.
Price: $49.99 

http://nous.gofcs.com?s=53&i=484&m=ew2ad022802&p=c

__________________________________________________________________
IMPORTANT MESSAGES AND LINKS:

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
FOUR STARS FOR THIS WIN2K, NT LOCKDOWN UTILITY | by David Strom

One of the more terrifying aspects for corporations connecting their
servers to the Internet is not knowing if they have left open a
backdoor for hackers to take over these computers. There are patches,
service packs, and a raft of other software utilities to apply, and
you must keep current with these programs as new vulnerabilities are
discovered. There has to be a better way, and Foundstone Inc. has
come up with one. Called Vision, it is a small software utility that
you load on each of your servers. 

Strom-meter:
**** = Very cool, very useful

>> CLICK for the full review...
http://searchwin2000.techtarget.com/tip/1,289483,sid1_gci783719,00.html?FromTaxonomy=/pr/5e6
 
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
SECURELY MANAGING WINDOWS 2000 | Live Expert Q&A

Who:  Scott S. Blake, CISSP and VP of IS, BindView Corp.
When: Today, March 5 at 01:00 PM EST (18:00 GMT)

Today, Scott S. Blake will offer an overview of current best
practices and tools relating to managing Windows 2000 networks. He
will touch on the new Center for Internet Security Windows 2000
Benchmarks, the hfnetchk utility from Microsoft, mssecure.xml and
BindView's solutions, among other topics.  

>>CLICK to attend...
http://searchwindowsmanageability.techtarget.com/onlineEvents/0,289675,sid33,00.html

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
TELL US WHAT YOU THINK | searchWin2000 User Attitude Survey

The editors of searchWin2000 are seeking your opinion for an upcoming
editorial feature. We want to know what you think on a variety of
Windows-specific technology issues ranging from Active Directory to
.NET and Web services. Help us with this comprehensive report.  

>> CLICK to take the survey...
http://quicktakeit.com/qto/Default.asp?a=63101&e=241034057[0981736

___________________________________________________________________
********************* SEARCHWIN2000 CONTACTS **********************

 TIP MAILBOX, (mailto:[EMAIL PROTECTED])
   >> Send us feedback on tips and ideas for new tip content.
____________________________________________________________________
 
 MARILYN COHODAS, Site Editor (mailto:[EMAIL PROTECTED])
   >> Send us your original articles and best practices.
____________________________________________________________________

 CHRISTINE POLEWARCZYK, Assistant Editor
 (mailto:[EMAIL PROTECTED])
      >> Send Ask the Expert questions or post them in our
Discussion Forums for a quicker response.
____________________________________________________________________

 SARA CUSHMAN, Assistant Editor (mailto:[EMAIL PROTECTED])
   >> Send your tips, white papers and favorite Web sites.
____________________________________________________________________

 DAVID GABEL, Executive Tech Editor (mailto:[EMAIL PROTECTED])
   >> Send me your technical tips and tip ideas.
____________________________________________________________________

 MIKE KELLY (mailto:[EMAIL PROTECTED])
   >> Sponsor this or any other TechTarget newsletter.
____________________________________________________________________

____________________________________________________________________
********************* ABOUT THIS NEWSLETTER ************************

Created by TechTarget (http://www.techtarget.com)
TechTarget - The Most Targeted IT Media
Copyright 2002, All Rights Reserved.


If you no longer wish to receive this newsletter simply reply to this
message with "REMOVE" in the subject line.  Or, visit
http://searchWin2000.techtarget.com/register and adjust your
subscriptions accordingly.

If you choose to unsubscribe using our automated processing, you must
send the "REMOVE" request from the email account to which this
newsletter was delivered.  Please allow 24 hours for your "REMOVE"
request to be processed.

Reply via email to