RE: Critical/Security Updates as well as other Patch Management

["dave" <dave () netmedic net>]

There are after market alternatives which use a different approach such as
hfnetchk pro at http://www.shavlik.com/  and securit-e-updater at
http://www.s-doc.com/products/securitelok.asp




 
_____________________
Dave Kleiman
dave () netmedic net
www.netmedic.net

 


-----Original Message-----
From: Jason Coombs [mailto:jasonc () science org] 
Sent: Thursday, March 13, 2003 14:38
To: Jed Needle; security-basics () securityfocus com
Subject: RE: Critical/Security Updates as well as other Patch Management

SUS is nothing more than a filter for windowsupdate.com that tells managed
boxes not to allow windowsupdate.com to install anything other than the
subset of updates approved by the SUS administrator.

Each Windows box still uses Windows update directly, so all vulnerabilities
that impact Windows update and the client-side code that talks to
windowsupdate.com are still present when SUS is used.

Jason Coombs
jasonc () science org

-----Original Message-----
From: Jed Needle [mailto:jed () vitel com]
Sent: Tuesday, March 11, 2003 12:24 PM
To: security-basics () securityfocus com
Subject: RE: Critical/Security Updates as well as other Patch Management


On Microsoft platforms there is a patch management util called SUS
"software update service?? (I think)
Once configured, the server will automatically download relevant
patches, you then point the clients to the sus server and push updates
to clients that way.

Jed