From: BELITCHKI, Toma (HO) (Toma.BELITCHKIbdc.ca)
Date: Fri Sep 12 2003 - 10:17:00 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Hi Guys,
I would like to ask for your experience in regards to the Server Sensors
update process.
Do you consider it more like an anti-virus update - wherever you have new
attack definitions, you apply them automatically, or you first test the
update on test machines, perform degradation testing, etc. and only if the
tests are conclusive - update the production machines.
We run our sensors on a mission critical machines and it's unacceptable to
brake the server's functionality because of the Server Sensor's update. That
implies thorough testing of the updates before going in production, from
other side, this is resource and time intensive job which delays the Sensor
update process.

I would like to hear about your experience, have you ever had a problem,
where applying the XPUs would break the server?
I personally used to look to the Server Sensors as non-intrusive components
of the system, until we had the problem with the rsiisfilter.dll ISAPI
filter, who was causing the inetinfo process of our web server to go 100%
CPU (it was fixed with SS 6.5 SR 3.4).

Regards,

Toma
_______________________________________________
ISSForum mailing list
ISSForumiss.net

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]