Reducing Enterprise-wide Security Risks

Ten years ago, talk of information security would generally focus on the subjects of anti-virus and patch management. Now, information security extends well beyond that, with continuing concern for hackers trying to intrude, systems running unauthorized software and even employees plugging thumb drives into USB ports to download customer data for sale to the highest bidder.

Supporting Virtualization

Eric Schultze

I'm really excited to talk about one of our upcoming features — specifically, support for Virtualization.

Shavlik already supports patch and configuration management for virtual systems on your network. A running virtual system is just like a real system to Shavlik NetChk Protect and NetChk Compliance. You can scan and patch these virtual systems today to ensure that your running VMs are protected.

Now Shavlik is taking things to the next level. Upcoming releases of Shavlik NetChk Protect will enable you to scan and patch OFFLINE virtual images. Offline images are those that aren't currently powered on. You may have hundreds of offline virtual images in your VM repository — these VMs are powered on for hours or days and may be powered off again until the next month when they are needed. It's important to ensure that these systems are patched as soon as they are brought online, else you place your network at risk from these unpatched systems.

Shavlik Forums

PatchManagement.org

ISSA

SANS

Creating a Secure Base in a Virtual World

Virtualization is a booming trend because of substantial operational savings. With the right security infrastructure, an improved level of security can result.

Download this complimentary white paper

Shavlik Security Suite for PCI DSS Requirements

PCI compliance is not an option — it is a mandate. Whether you’re a company processing, storing or transmitting credit card/debit payments, a retail merchant or a financial institution, you are an organization required to meet PCI industry standards by securing your network. Learn more about these requirements, penalties and Shavlik Security Suite that ensures compliance.

Download this complimentary white paper

Federal Desktop Core Configuration Compliance

The only practical way to achieve and sustain FDCC compliance is an automated compliance management system — one that enforces a “gold standard” set of policies by constantly monitoring all network machines for compliance and automatically fixes problems. Learn more:

Shavlik NetChk Compliance Tips:

If you are scanning against SQL Servers, disable the password check so accounts are not locked out during a scan.

Two more Shavlik NetChk Compliance tips

Shavlik Security Intelligence Tips:

When creating pie charts, make sure to create them vertically and not horizontally. This will give you one pie chart instead of multiple charts.

Two more Shavlik Security Intelligence tips

Shavlik NetChk Protect Tips:

You can use Patch Groups to automate Scanning and Deployment to your machines. Creating a Patch Group and selecting only patches that are approved for deployment lets you schedule scans that recur on a regular basis. You’ll have confidence that only approved patches are deployed. As new patches are released, you can easily add them to your Patch Group when they have been tested and approved.

Complimentary Security Webinars

Shavlik provides on-going education in the enterprise network security industry. Our Webinar training provides a solid foundation concerning a variety of subjects and product solutions.

• Getting Started: Shavlik NetChk Protect — 45 minutes of learning how to maximize network security. Register

• Advanced Training: Shavlik NetChk Protect — 90 minute product demo Webinar to learn agent-based architecture, distribution servers and console configurations. Register

• Minimize the Impact of Patch Tuesday — Learn which patches are critical to your environment and how to test and deploy them quickly. Register

Patch Management Classroom Training Course

The Shavlik Forum provides product information, FAQs and technical support for Shavlik’s Security Suite of solutions. Top recent Forum posts of note include:

Shavlik and Virtualization
http://forum.shavlik.com/viewtopic.php?t=5730

NetChk Protect 6.0 Change Impacting Patch Groups and Patch Types
http://forum.shavlik.com/viewtopic.php?t=5755

Q&A from the NetChk Protect 6.0 Training Webinar
http://forum.shavlik.com/viewtopic.php?t=5668