RE: Proxy/cache server for Patches

["Chris" <chris () implexantsystems com>]

As far as Windows machines go... we generally use HFNetChkPro4 to push
patches to clients and servers. It's worked well so far. If you have
another box you could setup your own SUS server. Downside is that it
only works for 2000 and XP machines. More info on the SUS server here:
http://www.microsoft.com/windows2000/windowsupdate/sus/ Your best bet at
keeping the servers patched at this point is to put patches in a central
location, and then make sure the LAN managers patch their boxes. There
is no excuse for an unpatched server, bump them back to help desk if
it's that bad ;-)

Chris
ImplexantSystems.com
chris () implexantsystems com 

-----Original Message-----
From: William Little [mailto:wm_little () yahoo com] 
Sent: Friday, April 04, 2003 8:24 AM
To: security-basics () securityfocus com
Subject: Proxy/cache server for Patches

Hello,
I work for a University with many schools and many IT
departments within those schools so I have no control
over patch levels of servers and must rely on
departmental LAN managers to keep their servers up to
date(they are very lax). In an attempt to make my life
easier, I recently brought up a FTP box (with a mirror
program) for our UNIX servers that are cut off from
the Internet to access patches. It seems like a very
antiquated solution and started think that a proxy
server just for patches might be better.
Off the top of my head: we could proxy the web sites
and cache the ftp sites; use DNS to point the servers
to our proxy server (that way I don't have to have the
LAN managers change anything on their boxes); maybe
use it for Windows update too.
I don't know Proxy servers that well but theoretically
it should work. Anyone used this or have any thoughts
about this?
Thanks in advance,
Bill Little

__________________________________________________
Do you Yahoo!?
Yahoo! Tax Center - File online, calculators, forms, and more
http://tax.yahoo.com

-------------------------------------------------------------------
SurfControl E-mail Filter puts the brakes on spam,
viruses and malicious code. Safeguard your business
critical communications. Download a free 30-day trial:
http://www.securityfocus.com/SurfControl-security-basics



-------------------------------------------------------------------
SurfControl E-mail Filter puts the brakes on spam,
viruses and malicious code. Safeguard your business
critical communications. Download a free 30-day trial:
http://www.securityfocus.com/SurfControl-security-basics