RE: Microsoft CAL license needed to install Security Software

[Ivan Carlos <icarlos () icarlos net>]

Its something wrong there. You dont need cals to each user that access a website running over IIS.

Microsoft Support or anybody can answer for sure about your own licensing program... Its terrible.

Ivan Carlos
Chief Information & Security Officer
E-mail / GTalk / Skype / WLM: icarlos () icarlos net
Cell.: +55 (11) 8112-0666

-----Original Message-----
From: Florian Rommel <frommel () gmail com>
Sent: terça-feira, 28 de setembro de 2010 15:23
To: security-basics () securityfocus com <security-basics () securityfocus com>; Ansgar Wiechers <bugtraq () 
planetcobalt net>
Subject: RE: Microsoft CAL license needed to install Security Software


True, though you could argue that you purchase a license to run and use the operating system, not for other machines to 
use it.
Boy i like my xserve :)
//f
http://go-dslr.com ...bringing digital photography to the masses
-----Original Message-----
From: Ansgar Wiechers
Sent:  28/09/2010, 18:00
To: security-basics () securityfocus com
Subject: Re: Microsoft CAL license needed to install Security Software



On 2010-09-27 Florian Rommel wrote:
> This is correct. Cals are needed if you access any kind of service
> hosted within a windows server platform. Consider it like a bubble
> within a bubble. The outer bubble is windows server and the innwr the
> 3rd party software. While they have nothing linking them, you still
> need to go through the outer shell.
> I do think that you chould purchase a corecal for all clients. This
> covers any windows server and windows based services.

Pretty nice business model, ain't it? First you pay for a server, and
then you pay *again* so you can actually use the server that you already
paid for.

It never ceases to amaze me how customers put up with that.

Regards
Ansgar Wiechers
--
"All vulnerabilities deserve a public fear period prior to patches
becoming available."
--Jason Coombs on Bugtraq

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------



------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------