Bob Bowes enscribed thusly:
> > All:
> > I'm not sure my last message went out (I never received it), but I'm looking
> > for a security checking program similar to SATAN. I saw one mentioned here a
> > few weeks back that was similar to SATAN, but would actually recommend ways
> > to fix the security hole(s). If anyone knows what the name of this app is,
> > or any other program that's worth its beans, please respond via private
> > email if so inclined.
> SATAN does recommend how to fix the security holes. What are you trying to
> check for? COPS will check for configuration problems (it needs to be
> updated), TRIPWIRE will check for modified files, ISS will also check your
> network for vulnerabilities (more than SATAN). This is assuming that you want
> to check a *nix server.
No. That is assuming that you want to check FROM a *NIX server. ISS
is particularly noted for checking a variety of holes and vulnerabilities in
Windows, Windows 95, and Windows NT when running TCP/IP. You just have to run
it from a *NIX server. And, yes, ISS also makes recommendations as to fixes.
http://www.iss.net
> Good luck,
Ditto!
> Bob
Mike
--
Michael H. Warfield | (770) 985-6132 | mhw @
WittsEnd .
com
(The Mad Wizard) | (770) 925-8248 | http://www.wittsend.com/mhw/
NIC whois: MHW9 | An optimist believes we live in the best of all
PGP Key: 0xDF1DD471 | possible worlds. A pessimist is sure of it!
References:
|
|
