Re: Patch management

[Maria Peluso <mpb () UMN EDU>]

Hi,

We ran CSI in house for a while and realized the benefit.  We are now
going with the 4.0 CSI (cloud) version and just planning the roll out
via AD\WSUS. This time around, we'd like to have it more tightly
controlled tho such that we get more consistent reporting from it.
We're very interested in the reporting/monitoring capabilities of CSI
which seems to compliment config manager and AD well.  Check back in a
few months for an assessment.  And yes, this is going to be
interesting!

Maria

______________________________________

Maria Peluso
University of Minnesota
Office of Information Technology, Security & Assurance


On Fri, Feb 25, 2011 at 9:46 PM, SCHALIP, MICHAEL <mschalip () cnm edu> wrote:
> Interesting - our requirements were very similar, and we came away with Symantec/Altiris.  We've had it in-house for 
> ~1 year, and we're still learning about some of the tools and capabilities.  But - it's going to pay for itself very 
> quickly.....we've got a major Win7/Office10 rollout coming, and we've really close to having the "blind imaging" 
> working with a Win7 image.  The "challenge" that we've got is that we're working through a major AD redesign as 
> well.....it's going to be an interesting year.....
>
> M
>
> ________________________________________
> From: The EDUCAUSE Security Constituent Group Listserv [SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Roderick Cook 
> [rcook () PACIFIC EDU]
> Sent: Friday, February 25, 2011 2:21 PM
> To: SECURITY () LISTSERV EDUCAUSE EDU
> Subject: Re: [SECURITY] Patch management
>
> Early last year we evaluated three patch management products: LanDesk,
> Symantec's Altiris, and Configuresoft's ECM (purchased by EMC during eval
> and was changed to Server Configuration Manager or SCM).
>
> Our requirements for evaluation included:
> 1. Application Flexibility - Must support multiple OS types (Win/Mac)
> 2. Minimal User Impact - Silent installs, low system footprint, and flexible
> reboot schedule
> 3. Active Directory Integration
> 4. Inventory & Reporting Capabilities
> 5. Distributed Administration
>
> Over the course of several months and meetings, the technical support staff
> from our various distributed IT offices chose the EMC SCM product as it met
> all of our requirements.  The other two products did not (at that time).
>
> Unfortunately the project did not receive funding last year so we did not
> move forward with the purchase.  It looks like we are to get funding soon
> and will begin the evaluation process once again this next fiscal.
>
> Hope that helps,
>
> Roderick Cook
> IT Security Officer
> University of the Pacific
>
>
> On 2/25/11 12:43 PM, "David Auclair" <d.auclair () UTORONTO CA> wrote:
>
> > Hi Everybody,
> >
> > We've been looking at some patch management solutions recently, and we were
> > wondering if anybody has any input on this subject.  Any products you would
> > specifically recommend (or avoid)?
> >
> > Specifically, does anybody have any good/bad experience with Secunia CSI?
> >
> > Thanks for your input!
> >
> >
> > David Auclair
> > Information Security Group
> > Information and Technology Services
> > University of Toronto
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.



-- 
______________________________________

Maria Peluso
University of Minnesota
Office of Information Technology, Security & Assurance
______________________________________
612-626-9310                        mpb () umn edu