RE: Critical/Security Updates as well as other Patch Management

[David Ellis <dellis () unicam com>]

Hi We use Ecora Softwares patch manager. We didn't like patch link that much
from a usablity point of view. Try ecora and see what you think at
http://www.ecora.com. It also will be doing linux and solaris in the next
version and it is fairly inexpensive.

-----Original Message-----
From: Vic Ricker [mailto:vic () sheetz com] 
Sent: Wednesday, March 12, 2003 10:39 AM
To: EZatko () co lucas oh us; security-basics () securityfocus com
Subject: Re: Critical/Security Updates as well as other Patch Management


We're evaluating some software from Patchlink 
(http://www.patchlink.com/) to manage our Windows environment.  From 
what I've seen of it, it looks very nice.  They have preliminary support 
for Solaris and Redhat as well, but we haven't gone there yet.  I still 
use red-carpet (http://www.ximian.com/products/redcarpet/) under Linux.

We're also subscribed to Meta Security Group's Command Center.  They 
keep track of security alerts for a wide range of software packages and 
notify you when any of the alerts match your profile.   It also has some 
features for policy management.  I'm not sure that we're getting much 
value from it yet, since I get the same alerts from other free sources.

HTH.

Take care,
-Vic

Eric Zatko wrote:

> Good day everyone,
>
> I am very interested in hearing all opinions/resources/etc. regarding 
> the topic of Security updates, Critical updates, and general patch 
> management. Any and all platforms... not only, but including Microsoft.
>
> What are the strategies being used?
>
> What are the best web/free resources?
>
> What are your opinions?
>
> My sincere thanks in advance.
> Eric
>
>
>
>  
**************************************************************************************************
** eSafe-portsmouth scanned this email for viruses, vandals and malicious content **
**************************************************************************************************