Re: new workstation build quarantine

[H Carvey <keydet89 () yahoo com>]

In-Reply-To: <20050321140712.9171.qmail () www securityfocus com>

> A few months back someone provided a link to information and/or software that would quarantine a new build on a 
> workstation(unpatched and/or no service packs) until the new machine received all of the necessary security patches 
> and service packs.  I believe it was a university.
>
> I would appreciate it if it could be re-posted as I am going to be replacing 200 workstations in the upcoming months.

Windows 2003 has a quarantine function, and I also believe that Cisco has something along these lines. From Google:

http://tcpmag.com/news/article.asp?EditorialsID=731

http://www.cisco.com/en/US/netsol/ns466/networking_solutions_white_paper0900aecd80234ef4.shtml

http://infosecuritymag.techtarget.com/ss/0,295796,sid6_iss306_art557,00.html

HTH,

H. Carvey
"Windows Forensics and Incident Recovery"
http://www.windows-ir.com
http://windowsir.blogspot.com