Corporate Office
505 Sunset Court
Mt. Zion, IL  62549
ph (217) 864-2326
f (217) 864-2281
Contact us now

Home | CAD/CAM Solutions | CRM Solutions | Data Management | Design Automation | Hardware Solutions | e-Store | Upcoming Events | Newsletter | Search | Support | Training

Up
Windows 7:  Not just a Codename!
False Pop-Up Warning Messages
New Web Browser Coming
Advanced Web Protection: World Class Web filtering available now.
Cellphone Spam: How to Block It
IT Security: What to do in case of a Cyber Attack
Adware: Number one threat for first quarter 2008
64-Bit PC’s Take Off:  Have the applications caught up after two years?
Windows Server 2008: New Release Candidate Shows Promise.
Windows XP SP3: Now available as RC, but should I install it?
Spam: Is the problem getting better or worse?
Upgrading to Ethernet Switches
Direct3D vs. OpenGL: Moving away from the longtime CAD Standard
PC Security Guidelines
New Windows Coming: Codenamed ‘Windows 7’ is coming!
Windows Vista:  Autodesk Support for the current Windows platform arrives!
Native 64 Bit
Truth in Operating Systems
Public Wi-Fi Connections
Windows Vista / Autodesk 2008 Products
Windows Vista
Fake Spyware Removers
Disaster Recovery
Biometrics
SPAM
Windows Vista
Business IM
The case for a spam firewall
Malware
New Technology: Leading Edge or Bleeding Edge?
Security Certificates and the Web
Portability vs Performance
64-Bit PCs and operating systems
Firewalls
Optimizing Software Configurations
Backup Data on CD/DVD:
Software on DVD
PCI-Express Video
Spam Filtering Software
PCI-Express Video
A Brand New PC
Software Interaction
The Future of Wi-Fi and Broadband
Optimizing Network Performance
Deploying a Wireless LAN
Is Your Software Legal
Autodesk Clarifies Licensing
Securing Wireless LAN’s
When Malware turns...
Balancing Security and Technology
More Than Just Installing Patches
Windows XP SP2:  Just Say No
WI-FI Connectivity
Windows XP SP2: Extra
New Product Releases

More Than Just Installing Patches

Security:
Establishing a Baseline is More Than Just Installing Patches

The past two months' articles about Windows XP Service Pack 2 have generated a lot of email to my address, both positive, thanking me for letting people know there are problems with Windows XP SP2 and those chiding me for telling people to hold off. I thank you all for your emails and comments. Installing patches is important, but equally important is establishing a security baseline for your enterprise, small business network or home network, and establishing that baseline is much, much more than installing patches. Let me explain.

Installing the Right Way
Something as simple as installing your software the right way can contribute to the security of your system(s). Whether you are dealing with a standalone, a home network, WI-FI network or an enterprise network, it is very important to install software, both applications and operating systems the right way. This means that when you do an install, install the components you need. Doing a default install of any software from any company is by default the most insecure of all installations. It is however the easiest install. Another method that many people fall prey to is creating images (mirrors, ghosts, you name the term) of their systems. While this method does keep settings the same amongst machines, unless the first machine was secure, none of the subsequent systems will be. In addition, many vendors (Autodesk included) either do not recommend or support software that was installed using the ghosting method.

Where Does Security Start?
Ok, so you have not done the default install. You have passwords set and do not have blank passwords anywhere on the system. What next? The next thing you need to do is make sure that from your starting point you have a policy in place to keep this system secure. This can include making certain no one installs software that is not licensed for your personal or business use. This includes software that you download from a peer-to-peer sharing service. Not only is much of the software available at these locations illegally copied, but much of it is infected with virus, worm or Trojan infections. You should have software that watches for viruses, worms and Trojans through emails, downloads and network copies. It is also a good idea to have a program to seek out Malware (ad-ware) and remove it from your system.

Microsoft Baseline Security Analyzer
Once you have taken care of the above, you should (assuming you are running Windows) use the Microsoft Baseline Security. This tool will look at your system and determine what vulnerabilities you have and make suggestions for repairs. Microsoft just released a new version that is compatible with Windows XP Service Pack 2 (don’t install SP2 yet, but you can get the new tool that is compatible with it) at the following page web page for the language of your choice (http://www.microsoft.com/technet/security/tools/mbsahome.mspx ). The new version of the software (V1.2.1) and the older version (1.1.1) are compatible with and scan for security misconfigurations in Windows NT 4.0, Windows 2000, Windows XP, Windows Server 2003, Microsoft Internet Information Services (IIS) 4.0, 5.0, and 6.0, Microsoft Internet Explorer (IE) 5.01+, Microsoft SQL Server 7.0 and 2000, and Microsoft Office 2000, XP, and 2003.  The table below lists the products that MBSA V1.1.1 and MBSA V1.2.1 can scan against to identify missing security updates:

Product

MBSA V1.1.1

MBSA V1.2.1

The following can be scanned for missing security updates

 

 

Windows 2000

X

X

Windows XP

X

X

Windows NT 4.0 and higher (remote scan only)

X

X

Windows Server 2003

X

X

Internet Explorer 5.01 and later

X

X

Windows Media Player 6.4 and later

X

X

IIS 4.0, 5.0, 5.1, and 6.0

X

X

SQL Server 7.0 and 2000 (including Microsoft Data Engine)

X

X

Exchange 5.5 and 2000 (including Exchange Admin Tools)

X

X

Exchange Server 2003

 

X

Microsoft Office (local scan only; see list of products)

 

X

Microsoft Data Access Components (MDAC) 2.5, 2.6, 2.7, and 2.8

 

X

Microsoft Virtual Machine

 

X

MSXML 2.5, 2.6, 3.0, and 4.0

 

X

BizTalk® Server 2000, 2002, and 2004

 

X

Commerce Server 2000 and 2002

 

X

Content Management Server (CMS) 2001 and 2002

 

X

Host Integration Server (HIS) 2000, 2004, and SNA Server 4.0

 

X

Note: For products that are not installed on a scanned machine, MBSA V1.2.1 will not perform the security updates check for those products and will not list them in the Security Update Scan Results table in the report.

Have A Question Or Comment?
We always like to get your feedback. After all, helping you to understand the issue at hand or new technology will result in better decisions, better connectivity, increased productivity and ultimately better security for hardware and software environments! If you have questions or comments about this article, contact me (JohnBoline@hagerman.com).

 

All product names / logos, company names / logos are copyrights of their respective holders. John Boline is an MCSE, CNE, USE and a member of the Network Professional Association. The content herein is often based on late-breaking events. Much of the material is based on information from sources that are believed to be reliable. Hagerman & Company, Inc. disclaims all warranties as to the ultimate accuracy or completeness of the information. Hagerman & Company, Inc. and its employees shall have no liability for errors, omissions or inadequacies in the information contained within this article or for any interpretations thereof. The recommendations, positions and best practice policies outlined herein represent Hagerman & Company, Inc. initial analysis and therefore are subject to change as further information which may have bearing on these positions is made available. The reader assumes sole responsibility for the selection of these materials to achieve its intended results. The opinions expressed herein are subject to change without notice. Entire contents © 2004 Hagerman & Company, Inc. All rights reserved. Reproduction of this publication in any form without prior written permission is forbidden.

 

by John Boline
Service Manager, MCSE, CNE, USE



print version

 

 

Mt. Zion, IL | Schaumburg, IL | Chicago, IL |  Indianapolis, IN |  Mishawaka, IN | Placentia, CA |  San Jose, CA |  St. Louis, MO |  Nashville, TN  |  Memphis, TN  |  Knoxville, TN
Home | About Us | Contact Info | Press | Careers

Copyright © 2006 Hagerman & Company, Inc.