Re: new workstation build quarantine

From: H Carvey <keydet89_at_yahoo.com>
Date: 22 Mar 2005 13:15:34 -0000

('binary' encoding is not supported, stored as-is) In-Reply-To: <20050321140712.9171.qmail_at_www.securityfocus.com>

>A few months back someone provided a link to information and/or software that would quarantine a new build on a workstation(unpatched and/or no service packs) until the new machine received all of the necessary security patches and service packs. I believe it was a university.
>
>I would appreciate it if it could be re-posted as I am going to be replacing 200 workstations in the upcoming months.
>

Windows 2003 has a quarantine function, and I also believe that Cisco has something along these lines. From Google:

http://tcpmag.com/news/article.asp?EditorialsID=731

http://www.cisco.com/en/US/netsol/ns466/networking_solutions_white_paper0900aecd80234ef4.shtml

http://infosecuritymag.techtarget.com/ss/0,295796,sid6_iss306_art557,00.html

HTH,

H. Carvey
"Windows Forensics and Incident Recovery"
http://www.windows-ir.com
http://windowsir.blogspot.com
Received on Mar 22 2005