Re: Firewall Patching - Best Paractices

["gig" <gigabit () satx rr com>]

lol.

This nonsensical diatribe is misplaced and ironic.

You rail against a lack of skill when your ability to communicate is 
woefully inadequate.

If you perceive that things aren't going your way, I'll suggest you look in 
the mirror to find the root source of the problem.

----- Original Message ----- 
From: "Joseph Laico" <LAICO () 0IS US>
To: "'Phil Hanna'" <subscription () geeksvictoria com au>; 
<security-basics () securityfocus com>
Sent: Friday, August 10, 2012 7:51 AM
Subject: RE: Firewall Patching - Best Paractices


> Those are all good ideas, sadly I say SADLY in the real world IT
> professionals would starve, years ago, clients understood the importance,
> today different story. No one wants to spend money for INTANGIBLE service 
> as
> of the past few years. Sure, they all will say OH yes security is very
> important, however when it comes to performing that service the clients 
> are
> MIA. As I said that's the real world today whereby everyone is an expert 
> and
> no one has any real skill set to make a decision that merits. With the 
> cloud
> BS on the rise, you will see a further decline, only the very elite and 
> very
> gifted will serve the data farms/clouds.  Five years from now, the trend
> will be why put all your eggs in one basket let alone with everyone else
> empirical data. IT "aint" what it used to be sadly, too many decision 
> makers
> that lack competence to make good decisions, where once IT person had 
> clout,
> in summation today everyone is an expert and no one knows a dam thing. 
> Lets
> hope it changes, great ideas, but focus on what put food on the table to
> stay in this crazy industry where you have incompetent IT technical 
> writers
> writing BS articles and making more than the engineer.
>
>
>
> -----Original Message-----
> From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] 
> On
> Behalf Of Phil Hanna
> Sent: Friday, August 10, 2012 8:29 AM
> To: security-basics () securityfocus com
> Subject: Firewall Patching - Best Paractices
>
> Hi All,
>
> I'm looking for opinion for what are the industry's best paractice for
> managing the upgrdae/patches to the firewalls. I'm devloping a process to
> have the firewall updated/checked for patches regulary but looking for
> opinion how other folks are doing it. My ideas are following:
>
> - A mailing list for the company with all InfoSec community part of it and
> then subscripte that list for updates from Cisco, Checkpoint.
> * for Cisco, I've found the lists but for Checkpoint I couldn't figure out
> where to subscribe.
>
> - Infosec reffers the update/patch to the network teams and they consider
> the risk factor and asses if the patch needs to be immediately applied for
> at some regular cycle.
>
> thanks,
> P
>
> ------------------------------------------------------------------------
> Securing Apache Web Server with thawte Digital Certificate In this guide 
> we
> examine the importance of Apache-SSL and who needs an SSL certificate.  We
> look at how SSL works, how it benefits your company and how your customers
> can tell if a site is secure. You will find out how to test, purchase,
> install and use a thawte Digital Certificate on your Apache web server.
> Throughout, best practices for set-up are highlighted to help you ensure
> efficient ongoing management of your encryption keys and digital
> certificates.
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727
> d1
> ------------------------------------------------------------------------
>
>
>
> ------------------------------------------------------------------------
> Securing Apache Web Server with thawte Digital Certificate
> In this guide we examine the importance of Apache-SSL and who needs an SSL 
> certificate.  We look at how SSL works, how it benefits your company and 
> how your customers can tell if a site is secure. You will find out how to 
> test, purchase, install and use a thawte Digital Certificate on your 
> Apache web server. Throughout, best practices for set-up are highlighted 
> to help you ensure efficient ongoing management of your encryption keys 
> and digital certificates.
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
> ------------------------------------------------------------------------


------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------