Symantec Management service from SNS

From: Allison Henry <akhenry_at_berkeley.edu>
Date: Mon, 16 Jul 2007 11:01:20 -0700

In an effort to gather more information on network threats directly from
endpoint clients, and to help safeguard Symantec Client Security
installations on the campus, System and Network Security is offering a
new Symantec management service. For more information on this service
please see: https://kb.berkeley.edu/kb1525

The new version on the Symantec Client Security software that reports to
the SNS management console is now available in the "early adopers"
section of
http://software-central.berkeley.edu/all/symantec+client+security.
Clients installing this version of Symantec will send their
anti-virus/firewall/IPS logs, as well as information on Symantec
software and signature versions, to the SNS management server. This
version is not affected by the recently announced Symantec
vulnerabilities, so older vulnerable clients can be updated with this
installation. With the managed client, SNS will be able to directly
report to security contacts if a client is running out of date Symantec
software, which should greatly assist the upgrade process in the future.

We would like to receive feedback from the campus community during this
pilot period. If you are interested please install the managed client on
campus hosts and let us know if you encounter any problems. The software
will also work on home machines and laptops that roam on and off the
campus network so try it on those machines as well. At the conclusion of
the pilot, the default "current version" of Symantec Client Security
(both on Software Central and the C_at_B CD) will report to the SNS manager.

For campus departments using their own Symantec management servers, SNS
is operating a Symantec Reporting Server that can receive logs from
local managers. Departments wishing to use this service will be able to
run reports from the SNS Reporting Server for clients from their
managers. Please contact us if you are interested in using this service.

-- 
Allison Henry
System and Network Security
University of California, Berkeley
http://security.berkeley.edu
------------------------------------------------------------------------
The following was automatically added to this message by the list server:
To learn more about Micronet, including how to subscribe to
or unsubscribe from its mailing list and how to find out
about upcoming meetings, please visit the Micronet Web site:
http://micronet.berkeley.edu/
Messages you send to this mailing list are public and world-viewable,
and the list's archives can be browsed and searched on the Internet.
This means these messages can be viewed by (among others) your bosses,
prospective employers, and people who have known you in the past.
Received on Mon Jul 16 2007 - 11:15:13 PDT

This archive was generated by hypermail 2.2.0 : Mon Jul 16 2007 - 11:15:13 PDT