ADMIN-ELECTRIK_CAT
Administrator
 Din: CAT LAND
Inregistrat: acum 18 ani
Postari: 8870
|
|
Three pillars of network vulnerability management
GFi LANguard Network Security Scanner (N.S.S.) is an award-winning solution that allows you to scan, detect, assess and rectify any security vulnerabilities on your network. As an administrator, you often have to deal separately with problems related to vulnerability issues, patch management and network auditing, at times using multiple products. However, with GFi LANguard N.S.S., these three pillars of vulnerability management are addressed in one package. Using a single console with extensive reporting functionality, GFi LANguard N.S.S.’s integrated solution helps you address these issues faster and more effectively.
Detect security vulnerabilities on your network
GFi LANguard N.S.S. makes use of state of the art vulnerability check databases based on OVAL and SANS Top 20, providing over 15,000 vulnerability assessments when your network is scanned. GFi LANguard N.S.S. gives you the information and tools you need to perform multi-platform scans across all environments, to analyze your network’s security health and effectively install and manage patches on all machines across different operating systems and in different languages. This results in a consistently configured environment that is secure against all vulnerabilities.
Award winning security scanner and patch management
Voted the best commercial network security scanner by users of Nmap for two years running, named the winner in the Patch Management category in TechTarget’s 2006 'Products of the Year' awards, and voted the winner in the security category of the Best of TechEd Awards 2007, GFi LANguard N.S.S. is the most complete vulnerability management solution in one convenient integrated package. GFi LANguard N.S.S. is an essential, cost-effective solution for businesses to safeguard their systems and networks from hacker attacks and security breaches.
Integrated vulnerability management solution
GFi LANguard Network Security Scanner (N.S.S.) is an award-winning solution that addresses the three pillars of vulnerability management: security scanning, patch management and network auditing through a single, integrated console. By scanning the entire network, it identifies all possible security issues and using its extensive reporting functionality provides you with the tools you need to detect, assess, report and rectify any threats.
* Vulnerability scanning
* Patch management
* Network and software auditing.
# Vulnerability scanning
During security audits, over 15,000 vulnerability assessments are made and networks are scanned IP by IP. GFi LANguard gives you the capability to perform multi-platform scans (Windows, Mac OS, Linux) across all environments and to analyze your network’s security health from a single source of data. This ensures that you are able to identify and rectify any threats before hackers manage to do so.
IMPROVED! – Identify security vulnerabilities and take remedial action
GFi LANguard N.S.S. scans computers, identifies and categorizes security vulnerabilities, recommends a course of action and provides tools that enable you to solve these issues. GFi LANguard N.S.S. also makes use of a graphical threat level indicator that provides an intuitive, weighted assessment of the vulnerability status of a scanned computer or group of computers. Wherever possible a web link or more information on a particular security issue is provided, such as a BugTraq ID or a Microsoft Knowledge Base article ID.
IMPROVED! – Extensive, industrial-strength vulnerabilities database
GFi LANguard N.S.S. ships with a complete and thorough vulnerability assessment database, which includes standards such as OVAL (2,000+ checks) and SANS Top 20. This database is regularly updated with information from BugTraq, SANS Corporation, OVAL, CVE and others. Through its auto-update system,GFi LANguard N.S.S. is always kept updated with information about newly released Microsoft security updates as well as new vulnerability checks issued by GFI and other community-based information repositories such as the OVAL database.
Ensures that third party security applications such as anti-virus and anti-spyware offer optimum protection
GFi LANguard N.S.S. also checks that supported security applications such as anti-virus and anti-spyware software are updated with the latest definition files and are functioning correctly. For example, you can ensure that supported security applications have all key features (such as real-time scanning) enabled.
Easily creates different types of scans and vulnerability tests
You can easily configure scans for different types of information; such as open shares on workstations, security audit/password policies and machines missing a particular patch or service pack. You can scan for different types of vulnerabilities to identify potential security issues. These include:
* Open ports: GFi LANguard N.S.S. scans for unnecessary open ports and checks that no port hijacking is in force.
* Unused local users and groups: Remove or disable User accounts no longer in use.
* Blacklisted applications: Identify unauthorized or dangerous software and add to blacklists of applications you want to associate with a high security vulnerability alert.
* Dangerous USB devices, wireless nodes and links: Scans all devices connected to USB or wireless links and alerts you of any suspicious activity.
* And much more! Very Happy
Setup your own custom vulnerability checks
GFi LANguard N.S.S. allows you to easily create custom vulnerability checks through wizard-assisted custom-vulnerability condition setup screens. You can also write complex vulnerability checks using the GFi LANguard N.S.S. VBScript-compatible script engine. GFi LANguard N.S.S. includes a script editor and debugger to help with script development.
Easily analyze and filter scan results
GFi LANguard N.S.S. enables you to easily analyze and filter scan results by clicking on one of the default filter nodes. This enables you to identify, for example, machines with high security vulnerabilities or machines that are missing a particular service pack. Custom filters can also very easily be created from scratch or customized. You can also export scan results data to XML.
# Patch management
When a scan is complete, GFi LANguard N.S.S. gives you all the functionality and tools you need to effectively install and manage patches on all machines across different Microsoft operating systems and products in 38 languages. Click here to view a full list. GFi LANguard also allows auto-downloads of missing patches as well as patch roll-back. Custom software can also be deployed. This results in a consistently configured environment that is secure against all vulnerabilities.
IMPROVED! – Automatically deploy network-wide patch and service pack management
With GFi LANguard N.S.S. you can easily deploy missing service packs and patches network-wide. GFi LANguard N.S.S. is the ideal tool to monitor that Microsoft WSUS is doing its job properly and it performs tasks WSUS does not such as deploying Microsoft Office and custom software patches. GFi LANguard N.S.S. also provides you with new features such as patch auto-download and patch rollback. It is also Unicode compliant and able to support patch management in all the 38 languages currently supported by Microsoft.
Deploys custom/third party software and patches network-wide
Besides deploying patches and service packs, GFi LANguard N.S.S. enables you to easily deploy third party software or patches network-wide. You can use this feature to deploy client software, update custom or non-Microsoft software, virus updates and more. The custom software deployment feature means you can do without Microsoft SMS, which is too complex and expensive for small to medium sized networks.
Network and software auditing
GFi LANguard N.S.S. ’s auditing function tells you all you need know about your network – what USB devices are connected, what software is installed, any open shares, open ports and weak passwords in use. The solution’s in-depth reports gives you an important and real-time snapshot of your network’s status. Scan results can be easily analyzed using filters and reports, enabling you to proactively secure the network by closing ports, deleting users or groups no longer in use or disabling wireless access points.
Automatically receive alerts of new security holes
GFi LANguard N.S.S. can perform scheduled scans (for instance daily or weekly) and can automatically compare results to previous scans. Any new security holes or security setup changes discovered on your network are emailed to you for analysis. This enables you to quickly identify newly-created shares, installed services, installed applications, added users, newly-opened ports and more.
Check if security auditing is enabled network-wide
GFi LANguard N.S.S. checks if each NT/2000/XP/VISTA machine has security auditing enabled. If not, GFi LANguard N.S.S. alerts you and allows you to enable auditing remotely. Security event auditing is highly recommended because it detects intruders in real-time.
Scan and retrieve OS data from Linux systems
It is possible to remotely extract OS data from Linux-based systems and scan results are presented in the same way as for Windows-based computers. This means that both Linux and Windows-based computers can be analyzed in a single scanning session! GFi LANguard N.S.S. includes numerous Linux security checks including rootkit detection. GFi LANguard N.S.S. can use SSH Private Key files instead of the conventional password string credentials to authenticate to Linux-based target computers.
Other features
Multiply the value of GFI LANguard N.S.S. with powerful reporting
Reports are designed to satisfy the requirements of both management and technical staff. These deliver a graphical snapshot of the security health status of your network. From trend reports for management (ROI) to daily drill-down reports for technical staff; the GFi LANguard N.S.S. ReportPack provides you with the easy-to-view information you need, to fully keep abreast of changes to your network’s security environment. Full automation and custom scheduling provide you with true install-and-forget functionality!
Helps to comply with PCI DSS and other regulations
As from September 2007 all businesses handling cardholder data – irrespective of size – have to be fully compliant with strict security standards drawn up by the world’s major credit card companies. GFi LANguard N.S.S. provides complete vulnerability management coupled with an extensive ReportPack add-on that make GFi LANguard N.S.S. the essential, cost-effective solution that your organization needs to safeguard your network and gauge the effectiveness of your PCI compliance program.
Silent installation support
You can perform an unattended default installation of GFi LANguard N.S.S. on multiple computers in the background without any user interaction or intervention. Customization of the deployment parameters is also possible through the creation of Microsoft Transform (MST) files.
Predefine authentication details
GFi LANguard N.S.S. allows you to store separate authentication details for every target computer on your network, avoiding the need to specify authentication credentials prior to every scan. In a single scanning session, it is possible to audit all the targets in your network, even if they require different authentication details/methods.
23.3KB
_______________________________________
 PM-URI  №1
  TUTORIAL 3XFORUM
 | REPORT BROKEN LINKS | 
|
|
