RE: Microsoft CAL license needed to install Security Software

["Florian Rommel" <frommel () gmail com>]

This is correct. Cals are needed if you access any kind of service hosted within a windows server platform. Consider it 
like a bubble within a bubble. The outer bubble is windows server and the innwr the 3rd party software. While they have 
nothing linking them, you still need to go through the outer shell.
I do think that you chould purchase a corecal for all clients. This covers any windows server and windows based 
services.
//f
-----Original Message-----
From: Michael Sturtz
Sent:  27/09/2010, 21:05 
To: malwares () yahoo com; security-basics () securityfocus com
Subject: RE: Microsoft CAL license needed to install Security Software


While this is technically correct Microsoft offers an internet connector to cover  external users.  Microsoft also 
allows people to "evaluate" their software in most cases with no fee whatsoever.  And no I don't work for Microsoft nor 
do I speak for them or my employer.  

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On Behalf Of malwares () yahoo com
Sent: Sunday, September 26, 2010 7:53 PM
To: security-basics () securityfocus com
Subject: Microsoft CAL license needed to install Security Software

We are exploring the options of purchasing Windows 2008 to run a commercial enterprise security software. Software 
agent running on user workstations will connect to the enterprise security software to retrieve policies and update. 
The third party software is not using windows authentication or services. 



We contacted Microsoft support about the CAL license that we need. According to them, we will need CAL regardless the 
client/user is connecting directly or indirectly to the server. If this the case, regardless if you developed your own 
network software running on Windows or purchase a commercial one, you will need CAL.



Personally I find this ironic as the CAL price can total up to 10-20 times that of commercial software and server if 
you have more than 1000 users. 



I think Microsoft is discouraging vendor and developer from running software on Windows OS. In future I think we have 
to include the CAL price in security product evaluation. 

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate In this guide we examine the importance of Apache-SSL and 
who needs an SSL certificate.  We look at how SSL works, how it benefits your company and how your customers can tell 
if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your 
Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing 
management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------


------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------



------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------