Security Update Manager?

[mrgulic]

Is there an application out there or a way to query remote servers to determine what security and other patches have been applied and if the NAV definitions are up to date?

thanks

 

[mrgulic]

This would be for many different kinds of server, mostly Windows NT Servers (4.0, 2000, 2003) and XP Pro Workstations.

 

[Xemus]

Microsoft has a great tool that does this. Microsoft Baseline Security Analyzer will scan any machine (to which Administrator access has been granted) and give you detailed reports on patches needed and various other settings that need to be adjusted. Free tool from Microsoft here:

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/tools/mbsahome.asp

NAV updates can be verified as up to date, if you're using NAV corporate edition. This feature runs as a NAV server and will push updates to clients at the interval you set.

http://www.closedsocket.com

 

[mrgulic]

i dont see where you have a whole lot of options for mananging an enterprise with MS's tool. cant seem to get the export to excel to work and without being able to view and sort the results in a db or excel, it would seem a daunting task to do anything with 1000's of servers.

Any comments on NetIQ Security Analyzer?

Thanks

 

[Xemus]

True. I didn't know you were looking for a tool that would support a network that large.
GFI's Languard Scanner would be closed to your needs. Screenshots here:

http://www.gfi.com/lannetscan/lanscanscreenshots.htm

They have a free trial available. It's a great product and supports custom exporting of results, tho I'm not positive it can do Excel.
I haven't played with NetIQ's program, so I can't offer a valid opinion on it. Someone else here might be able to tho.

http://www.closedsocket.com

 

[glacierxx]

A product we use currently for our servers (1000+ also) is STATscanner. Check it out at

http://www.statonline.harris.com/

good luck

"evil prospers when good men do nothing”