Re: USB ports Network

["Tornado" <itsec_guy () bluebottle com>]

Yes Andy. This is certainly good. I, in fact downloaded the copy of this 
software and tested it. It works fine only when the firewall is not turned 
on. Othewise it gives WMI error.

----- Original Message ----- 
From: "Andy Cuff" <lists () securitywizardry com>
To: "'Tornado'" <itsec_guy () bluebottle com>; 
<security-basics () securityfocus com>
Sent: Friday, May 04, 2007 2:53 AM
Subject: RE: USB ports Network


> Evening,
> I've been looking at GFI's FREE Online USB Scanner which using appropriate
> system credentials scans all hosts and reports on all known USB devices
> which have been installed on those hosts, regardless if the devices are
> still there. Initially I thought this was a bit gimmicky but I was 
> surprised
> at how much information it collected.  I even threw a banner up on my 
> site,
> much to GFI's glee.
>
> More info here
> http://www.securitywizardry.com/endpoint.htm#freegfi
> The blurb goes "....EndPointScan carries out granular checks across all
> types of ports - USB, Firewire, Bluetooth, Infrared, PCMIA and Wi-Fi - on
> all machines. This utility provides complete and thorough information 
> about
> all portable devices and can scan multiple computers simultaneously.
> EndPointScan is fully compatible with existing network management or
> administrative tools such as Active Directory and it will also work on 
> Vista
> systems..."
>
> This is a great way of winning the Hearts and Minds of Sys Admins during
> VA's
>
> Best Regards
> Andy Cuff
> Managing Director / CEO
> Computer Network Defence Ltd
> www.SecurityWizardry.com
>
>
>
>
> > -----Original Message-----
> > From: listbounce () securityfocus com
> > [mailto:listbounce () securityfocus com] On Behalf Of Tornado
> > Sent: 02 May 2007 18:31
> > To: security-basics () securityfocus com
> > Subject: USB ports Network
> >
> > Hi All,
> >
> > We got Windows 2003 AD domain with all the
> > workstations/servers as Windows 2000/XP/2003/Vista. As part
> > of our security policy we do not keep the USB ports enabled
> > and disable them from BIOS itself. But we want to make sure
> > that there are no machines which have USB port left enabled
> > by mistake.
> >  Is there any way/software whereby we can check/scan the
> > ports remotely on the domain?
> >
> > Thanks in advance.
> >
> > ----------------------------------------------------------------------
> > Get a free email address with REAL anti-spam protection.
> > http://www.bluebottle.com

----------------------------------------------------------------------
Finally - A spam blocker that actually works.
http://www.bluebottle.com