Re: [Security] Re: SNS will be resuming scanning with the McAfee Foundstone Scanner

From: Aron Roberts <aron_at_socrates.berkeley.edu>
Date: Mon Sep 19 2005 - 16:50:57 PDT

   A follow-up to the correspondence from Craig Lant and Jake Harwood
regarding feature request for SNS scanning:

   Jake called a short time ago to discuss this topic. To briefly
summarize and share a bit of our discussion (with all summation
errors mine):

   - Right now, SNS is within the 30-day acceptance period for the
     purchase of the new scanners, so they will need to initiate new
     scans very soon utilizing a relatively 'vanilla' configuration.

     The next round of scanning will be generally similar to the scans
     performed earlier this year.

     Identifying vulnerabilities on hosts known to house restricted
     data and more broadly, on Windows hosts across the campus, continue
     to be top priorities.

   - Once this period has concluded, SNS will be highly receptive to
     feature suggestions.

     To cite one such opportunity: Jake, John Ives, and/or others
     are contemplating giving a presentation on the scanners and
     soliciting feedback at a near future meeting of the campus
     Security SIG <http://securitysig.berkeley.edu>, possibly within
     the next two to three months.

   - The new scanners offer a large array of capabilities for scanning
     and reporting, and there's a great deal yet to be learned about
     their configuration.

     By combining the scanners with campus information resources and
     custom programming, it may be possible to implement some of the
     feature requests that SNS has received from the campus, as well
     as to provide other useful data - such as asset inventories - to
     security contacts and other support providers. Both Craig and Jake
     have discussed some of these possibilities in their messages today.

Aron

------------------------------------------------------------------------
The following was automatically added to this message by the list server:

For information about Micronet, including subscribing to
or unsubscribing from its mailing list and finding out
about upcoming meetings, please visit the Micronet Web site:
<http://micronet.berkeley.edu/>.
Received on Mon Sep 19 16:56:32 2005

This archive was generated by hypermail 2.1.8 : Mon Sep 19 2005 - 16:56:32 PDT