Re: Auto-update versus "going green"

["SCHALIP, MICHAEL" <mschalip () CNM EDU>]

....And, you can script the DeepFreeze thaw/freeze within the same job.....we are working on doing this exact thing 
with Altiris/DeepFreeze.  You'll have to work with your networking folks - they like to block WoL, so you can minimize 
their concerns by only allowing WoL from your patching servers.  That way - no other systems on the network can issue 
WoL calls....

M

-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Valdis 
Kletnieks
Sent: Friday, October 08, 2010 9:42 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Auto-update versus "going green"

On Fri, 08 Oct 2010 11:17:55 EDT, Jeff Kell said:

> We are running into issues with our NAC policy enforcement with 
> machines that are set for some power-save / power-off profiles and consequently not auto-updating themselves.
> When they are turned on for use, they are missing patches and 
> out-of-compliance, and can run into remediation/quarantine.

This sounds like a job for 'wake-on-LAN' if your BIOS and network card support it.  Poke each machine at 
oh-dark-thirty, have it wake up, look for updates, and go back to sleep.


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.