RE: network based spyware scanner

["Greg Jones" <GJones () cmcmortgage com>]

Those are good points, but spyware software is still something that
should not be considered.  We do all the below and it still creeps in.
User education is the toughest of all. 


Sincerely,

Greg Jones
913-236-1010

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of Justin Lintz
Sent: Wednesday, November 15, 2006 6:56 PM
To: Utz, Ralph
Cc: security-basics () lists securityfocus com
Subject: Re: network based spyware scanner

Why not a better solution of implementing policies on the machines to
prevent spyware from even being installed in the first place?  A couple
things off the top of my head...

-Disable Activex
-Make sure users do not have administrator rights on their machines
    -Administrators should be the only ones installing approved software
on employees machines -Ensure windows updates are set to automatically
update and install or if you have a windows update server, that you push
the updates out in a timely fashion.
-Make sure email clients have latest security patches to avoid anything
being executed inside preview panes of email messages.
-Antivirus on the email server itself.
-And most important, user education on spyware and the dangers that lurk
on the internet



On 11/14/06, Utz, Ralph <rutz () realtime-it com> wrote:
> Hey folks,
>
> I'm looking for a network scanner for spyware or maybe a management 
> console for something like spybot.  The goal is centralized management
> of spyware ala antivirus.   Any suggestions?  How are you guys
handling
> spyware?
>
>
> The information in this email and in any attachments is confidential
and may be privileged.
> If you are not the intended recipient, please destroy this message, 
> delete any copies held on your systems and notify the sender 
> immediately. You should not retain, copy, or use this email for any 
> purpose, and any review or other use of this information by persons or

> entities other than the intended recipient or any retransmission
without the written consent of the sender is expressly prohibited.
> ----------------------------------------------------------------------
> ----- This list is sponsored by: Norwich University
>
> EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE The NSA has

> designated Norwich University a center of Academic Excellence in 
> Information Security. Our program offers unparalleled Infosec 
> management education and the case study affords you unmatched
consulting experience.
> Using interactive e-Learning technology, you can earn this esteemed 
> degree, without disrupting your career or home life.
>
> http://www.msia.norwich.edu/secfocus
> ----------------------------------------------------------------------
> -----


--
- Justin Lintz

------------------------------------------------------------------------
---
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE The NSA has
designated Norwich University a center of Academic Excellence in
Information Security. Our program offers unparalleled Infosec management
education and the case study affords you unmatched consulting
experience. 
Using interactive e-Learning technology, you can earn this esteemed
degree, without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
------------------------------------------------------------------------
---


This e-mail and any documents transmitted with it are the property of SOUTHBank F.S.B. ® and/or its subsidiary or 
affiliate companies, is confidential, and intended solely for the use of the individual or entity the e-mail is 
addressed to.  If you have reason
to believe that you have received this message in error, please notify the sender and delete this message immediately 
from your computer.  Any other use, retention, dissemination, forwarding, printing, or copying of this e-mail or 
attachments is strictly prohibited.

SOUTHBank, F.S.B. and/or its subsidiary or affiliate companies do not endorse the use of unsolicited e-mail.  If you 
believe this e-mail was sent to you in error or you do not wish to receive these types of e-mail, please notify us by 
forwarding this message to remove () southbank com.


---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence
in Information Security. Our program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Using interactive e-Learning technology, you can earn this esteemed degree,
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------