Re: Server AV Questions

[John Morrison <john.morrison101 () googlemail com>]

Mark,

Although I don't have experience of these particular products I can
tell that where I work the server operations team are responsible for
AV and patching. They have direct responsibility to the business for
the uptime of the several thousand servers (and tens of thousands of
desktops). Consequently they have strong change control and monitoring
in place. If you mess up that many devices it takes a long time to fix
them and the client/customer/user has direct access to you.

This makes them unwilling to allow teams that are used to only
changing the settings on two or three devices at a time perform this
function.

The server guys obviously rely on guidance from the security team
during design and troubleshooting as well as talking to the network
guys during the design stages.



2009/8/24 Eggleston, Mark <meggleston () healthpart com>:
> Hello Colleagues,
>
> A couple questions to pose to the group as I'm seeking to determine
> current practices:
>
> 1) Anyone currently using or evaluating LANDesk AntiVirus (Kaspersky
> engine?  If so care to comment on pros/cons in regard to stability and
> resource consumption?
>
> 2) Anyone currently using LANDesk Management Suite for SERVER patch
> management?  If so care to comment on pros/cons?
>
> 2) Those of you in environments where there is a dedicated security
> department AND a dedicated Network Department who manages the server AV
> nodes?  Do you see this as a core component of the Security Group or
> Network Group (and security to read only monitor)
>
> Many thanks in advance for your input.
>
> Regards,
>
> Mark Eggleston
> Manager, Security and Business Continuity
>
> This message, together with any attachments, is intended only for
> the use of the individual or entity to which it is addressed. It
> may contain information that is confidential and prohibited from
> disclosure. If you are not the intended recipient, you are hereby
> notified that any dissemination or copying of this message or any
> attachment is strictly prohibited. If you have received this
> message in error, please notify the original sender immediately by
> telephone or by return e-mail and delete this message along with
> any attachments, from your computer.
>
> ------------------------------------------------------------------------
> Securing Apache Web Server with thawte Digital Certificate
> In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, 
> how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, 
> purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for 
> set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital 
> certificates.
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
> ------------------------------------------------------------------------

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------