RE: [Full-Disclosure] Automating patch deployment

["Richard Stevens" <richard@tccnet.co.uk>]

I am having major problems with GFI patching.. just keeps crashing out half way through sending patches, dieing midway through scans etc. Having theis at every site I've tried.. anyone having more success with it?




-----Original Message-----
From: George Peek [mailto:GKPeek@AllstateTicketing.com]
Sent: 17 August 2003 22:55
To: 'Jerry Heidtke'; George Peek; full-disclosure@lists.netsys.com;
security-basics@securityfocus.com
Subject: RE: [Full-Disclosure] Automating patch deployment


Biggest problem with GFI is you have to download your patches prior to
software deploying them, granted they give you the links but dear lord I
hate dloading stuff from MS.

-----Original Message-----
From: Jerry Heidtke [mailto:jheidtke@fmlh.edu]
Sent: Tuesday, August 05, 2003 2:28 PM
To: George Peek; full-disclosure@lists.netsys.com;
security-basics@securityfocus.com
Subject: RE: [Full-Disclosure] Automating patch deployment



If your network is not too large, consider Languard NSS from GFI. At
$799 for an unlimited license, it can deploy OS and security patches to
all the products you mentioned. It might not have all the bells and
whistles and fancy reporting of SMS or HFNetChkPro or PatchLink or
Update Expert, but it seems to do the job.

Oh, and it does network enumeration, port scanning, service discovery,
banner grabbing, Windows password cracking, and a bunch of other stuff.
It's definitely not the best tool available at anything it does, but for
most uses it's good enough.

They have a 30 day fully functional free trial, after which the patch
deployment and some of the reporting functions turn off unless you buy a
license. You can continue to use the rest of the product for free.

http://www.gfi.com/

Jerry

-----Original Message-----
From: George Peek [mailto:GKPeek@AllstateTicketing.com] 
Sent: Tuesday, August 05, 2003 3:37 PM
To: 'full-disclosure@lists.netsys.com';
'security-basics@securityfocus.com'
Cc: George Peek
Subject: [Full-Disclosure] Automating patch deployment


We have two networks, one AD and one NT4.0. We can not use AD to deploy
MSI
patch packages to workstations that are not part of the AD (Active
Directory), but are part of the NT domain. Not really interested in
purchasing SMS as it seems too costly (why should we?). Considering
HFNetChkPro 4 to automate the deployment of patches to our workstations
and
servers, as doing it manually is far too costly and time consuming for
the
company. Are there any other utilities or software that anyone (possibly
free?) recommends that could be used to simplify patch deployment and
management to every workstation and server. We use Windows NT, 2000 and
XP
workstation products, and NT4.0/2000/2000 Adv server products.

Thank You,

George K. Peek
Network Specialist
Allstate Ticketing
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

Confidentiality Notice: This e-mail message, including any attachments,
is for the sole use of the intended recipient(s) and may contain
confidential and privileged information.  Any unauthorized review, use,
disclosure or distribution is prohibited.  If you are not the intended
recipient, please contact the sender by reply e-mail and destroy all
copies of the original message.
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html