RE: Pentasafe Equivalent for AIX

["Rosado, Rafael (Rafael)" <rarosado () lucent com>]

Depending on your immediate needs, you may want to hold off until there is a
scoring tool from The Center of Internet Security (CIS) for AIX -
http://www.cisecurity.org/bench_aix.html due in Sept. 2005.  

Other alternatives are: 

* Symantec's Enterprise Security Manager (ESM) -
http://enterprisesecurity.symantec.com/products/products.cfm?ProductID=45&PI
D=11409114&EID=0, 

* ISS System Scanner -
http://www.iss.net/products_services/enterprise_protection/vulnerability_ass
essment/scanner_system.php and 

* Bindview's Bv-Control for Unix -
http://www.bindview.com/Products/bvControl/Unix.cfm .

There may be other commercial products that address host vulnerabilities.  I
believe all these products require an agent to be installed on every AIX box
you are going to evaluate/scan.

Good Luck! 


Rafael Rosado, CISSP, CISA
Security Consultant
Lucent Worldwide Services
Business Consulting
Reliability and Security Services
Voice: 954-885-2176 
Email: rarosado () lucent com 
http://www.lucent.com/security/
http://www.lucent.com/solutions/sec_sol_sp.html

This e-mail message and any attachment(s) to it are intended only for the
use of the addressee(s).  The information in this e-mail message is
confidential and proprietary and may be subject to legal privilege.  The
reading or dissemination of this email by anyone other than the intended
recipient is strictly prohibited.  If you believe you have received this
e-mail in error, please notify the sender immediately and permanently delete
this e-mail, any attachments and all copies thereof from any drives or
storage media and destroy any printouts. 
-----Original Message-----
From: mmarrero () lloydstsb-usa com [mailto:mmarrero () lloydstsb-usa com] 
Sent: Wednesday, August 24, 2005 11:31 AM
To: security-basics () securityfocus com
Subject: Pentasafe Equivalent for AIX

Hello list, 

Is anyone familiar with some type of package, like Pentasafe now part of
NetIQ, that will run on AIX. I currently use the product for the OS/400 but
am installing a new UNIX server and would like to see if I can get the same
reports that I get now for the OS/400 on the AIX box. If anyone knows of
anything please let me know. 

Much appreaciated...