OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Solutions Marketing (SolutionsMarketing_at_iss.net)
Date: Thu Nov 07 2002 - 16:25:26 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    > RealSecureŽ Network Sensor XPU 20.7 and XPU 5.6 are now available from the ISS Download Center: <http://www.iss.net/download/>.
    >
    > PROTECTION BENEFITS
    >
    > Included in this release are nine new events including protocol anomaly detections and signatures.
    >
    > * Application Protection. This release contains events to address issues in Microsoft SQL Server, Lotus Domino, IBM WebSphere, WS_FTP Server, and Polycom ViaVideo.
    >
    > * Hybrid Threats. XPU 20.7 includes detection of Bugbear backdoor activity.
    >
    > * Platform Protection. Protection for issues in Solaris and Windows is included.
    >
    >
    > NEW EVENTS
    >
    > SecChkID ProductCheckName Event Type Risk Level
    > ------- ---------------- --------- --------------
    > 9734 SQL_OpenRowSet_Overflow Suspicious Activity High
    > 9794 FTP_Site_Cpwd* Suspicious Activity High
    > 10265 HTTP_Bugbear_Backdoor* Suspicious Activity High
    > 10429 HTTP_Domino_Web_Access Suspicious Activity Low
    > 10375 XFS_Invalid_Opcode Unauthorized Access Attempt High
    > 10140 HTTP_WebSphere_Host* Unauthorized Access Attempt Low
    > 10332 DNS_Bind_OPT_DoS Denial of Service Low
    > 10359 HTTP_ViaVideo_Overflow* Denial of Service Low
    > 10486 Netbios_Name_Scan Pre-attack Probe Low
    >
    > *These events are contained in the 7.0 Network Sensor only.
    >
    > VERSIONS/PLATFORMS
    >
    > XPU 20.7 supports Network Sensor 7.0 on Windows 2000 and RH Linux 7.3. XPU 5.6 supports Network Sensor 6.5 on Solaris, Windows NT, Windows 2000 and the Nokia appliance platforms. Supported management consoles include Workgroup Managers 6.6, 6.5, and SiteProtector 1.2.
    >
    >
    > For more information on this release, please contact the following:
    >
    > * For additional product information:
    > - X-Press Updates, <http://www.iss.net/db_data/xpu/RS.php>
    > - Network Sensor, <http://www.iss.net/products_services/enterprise_protection/rsnetwork/sensor.php>
    >
    > * For sales and professional services information:
    > - salesiss.net <mailto:salesiss.net>
    > - 888-776-2362 (U.S. and Canada); +1-404-236-2600 (International)
    >
    > * For support information, including ISS> '> Technical Support Knowledgebase:
    > - Customer Support - <http://www.iss.net/support/enterprise/index.php>
    > - Technical Support Knowledgebase - <http://www.iss.net/support/knowledgebase/>
    >
    _______________________________________________
    ISSForum mailing list
    ISSForumiss.net