OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: DEBOARD,ERIK (HP-Corvallis,ex1) (erik_deboardhp.com)
Date: Thu Oct 04 2001 - 13:32:35 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    For those of us running IIS web server clusters, having a local caching
    server for those updates (do not allow port 80 requests out), coupled with
    the logic to test all the web servers for their patch level is becoming more
    and more of an issue... (a patch a week on anything over 50 servers becomes
    tedious quickly.) LAN speed is just a plus.

    -----Original Message-----
    From: Paul L Schmehl [mailto:paulsutdallas.edu]
    Sent: Wednesday, October 03, 2001 3:30 PM
    To: Byron Kennedy; focus-mssecurityfocus.com
    Subject: RE: Microsoft Announces Strategic Technology Protection Program

    This issue was raised with MS Security folks at the NTBUGTRAQ conference
    last year. Although they didn't make any promises, they did say they'd
    look in to it. The sticking point was creating a customizable ActiveX
    control to do the web-based Windowsupdate part. Some of the initiatives
    that came out of that discussion were the corporate update site and the
    patches database.

    But you're absolutely right. Updates at LAN speeds would sure be more
    convenient, especially in a "crisis" situation. The Internet isn't always
    "up". Our LAN is.

    --On Wednesday, October 03, 2001 1:30 PM -0700 Byron Kennedy
    <byronmarkettools.com> wrote:

    > yeah, that's alot of data in one concise pack. Looks like the method they
    > are using is CD (free mail order) and technet channels to distribute.
    >
    > What would be really cool is if MS offered a "localized" Windowsupdate
    > Security Server :) which automated the process by reaching out and
    > grabbing the marginal security updates from MS (if configured to do so)
    > and then use hfnetchk and qchain or whatever utilities to install the
    > needed fixes. Oww yeah, and it could provide a web front-end like
    > windowsupdate. :) I'm sure someone besides me has thought of this. The
    > Windowsupdate site is a great interface to point users to, but we need a
    > local Server w/ LAN speed access.

    Paul L. Schmehl, paulsutdallas.edu
    http://www.utdallas.edu/~pauls/
    Supervisor, Support Services
    The University of Texas at Dallas
    AVIEN Founding Member