Full Disclosure mailing list archives
RE: Automating patch deployment
From: David Vincent <david.vincent () mightyoaks com>
Date: Wed, 6 Aug 2003 09:12:07 -0700
The good thing about SUS is that you can set it up to not push out the packages until you approve them. The SUS box downloads all the critical updates and then they sit in queue until you tell them it's ok to push them out. I think that's the best way to handle the situation. Sure it creates a little admin work, but I think the advantage is clear.The bad thing about SUS is that it uses Windows Update technology which means it can be incorrect when determining if a box needs a patch. This means you can *look* like you're patched when you're not. To me, that is unacceptable behavior.
c'mon folks. if you rely on only one tool to make sure you're patched you deserve what you get. security is like an onion - layers upon layers! -d _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- Re: Automating patch deployment, (continued)
- Re: Automating patch deployment jeff tutton (Aug 07)
- Re: Automating patch deployment morning_wood (Aug 05)
- RE: Automating patch deployment Erick Grau (Aug 06)
- Re: Automating patch deployment Rooster (Aug 08)
- RE: Automating patch deployment Jerry Heidtke (Aug 05)
- RE: Automating patch deployment Johnson, Mark (Aug 05)
- Re: Automating patch deployment gregh (Aug 06)
- RE: Automating patch deployment LaRose, Dallas (Aug 05)
- RE: Automating patch deployment Bassett, Mark (Aug 06)
- RE: Automating patch deployment Schmehl, Paul L (Aug 06)
- RE: Automating patch deployment David Vincent (Aug 06)
- RE: Automating patch deployment Altheide, Cory B. (Aug 06)
- RE: Automating patch deployment Krogh, Jefferson (Aug 12)
- RE: Automating patch deployment George Peek (Aug 17)
- RE: Automating patch deployment Jørgen Hoffmeister (Aug 21)
- RE: Automating patch deployment George Peek (Aug 17)
- RE: Automating patch deployment Richard Stevens (Aug 18)
- RE: Automating patch deployment Bassett, Mark (Aug 18)