Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email email@example.com
[ISSForum] updating sensors
From: BELITCHKI, Toma (HO) (Toma.BELITCHKIbdc.ca)
Date: Fri Sep 12 2003 - 10:17:00 CDT
I would like to ask for your experience in regards to the Server Sensors
Do you consider it more like an anti-virus update - wherever you have new
attack definitions, you apply them automatically, or you first test the
update on test machines, perform degradation testing, etc. and only if the
tests are conclusive - update the production machines.
We run our sensors on a mission critical machines and it's unacceptable to
brake the server's functionality because of the Server Sensor's update. That
implies thorough testing of the updates before going in production, from
other side, this is resource and time intensive job which delays the Sensor
I would like to hear about your experience, have you ever had a problem,
where applying the XPUs would break the server?
I personally used to look to the Server Sensors as non-intrusive components
of the system, until we had the problem with the rsiisfilter.dll ISAPI
filter, who was causing the inetinfo process of our web server to go 100%
CPU (it was fixed with SS 6.5 SR 3.4).
ISSForum mailing list
TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo