Re: Security Related Questions

[Daniel Bennett <dbennett () PCT EDU>]

I used nessus here for a little while.  However, with the most in-depth scans it was causing servers to go down 
randomly.  The servers would see the attacks and shutdown NIC, services, etc.  So we purchased GFILan Guard Network 
security Scanner and that product has almost the same size database of vulnerabilities as nessus and has a lot better 
reporting features.

Daniel R. Bennett
CompTIA Security+
Information Technology Security Analyst
Pennsylvania College of Technology
One College Ave
Williamsport, PA 17701
(P) 570.329.4989

-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Ken 
Connelly
Sent: Sunday, March 30, 2008 9:34 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Security Related Questions

I can't speak to SCW, but *lots* of people use nessus.

- ken

Sabo, Eric wrote:
> We started to use nessus to scan our current infrastructure for vulnerabilities.   If anyone use this product in 
> their environment, I have a couple of questions.
>
> We are looking into using the Security Configuration Wizard (SCW) in Windows 2003 to secure our servers.  If anyone 
> did this what was pros and cons to using this tool.   In academic environment we have to be careful on how tight we 
> configure certain things but at the same time we are being asked to secure the environment.
>
> Thanks in advance,
> Eric Sabo
> Senior Windows Systems Engineer
> Department of Computing Systems
> California University of Pennsylvania

--
- Ken
=================================================================
Ken Connelly             Associate Director, Security and Systems
ITS Network Services                  University of Northern Iowa
email: Ken.Connelly () uni edu   p: (319) 273-5850 f: (319) 273-7373