Network security scanner, port scanner and patch management
Security scanning and patch management
Patch management is an essential network administration task. It consists of scanning machines on the network for missing patches and deploying those patches as soon as they become available. Failure to do so makes a network doubly vulnerable, because not only is the vulnerability there, but it has now also been publicised, making it more likely to be exploited by malicious users, hackers and virus writers. However, time and again, countless administrators fail to apply the right patches - as proven by worms such as Slammer, the January 2003 worm that spread by exploiting known vulnerabilities in unpatched Microsoft SQL 2000 servers. Until recently, the main reason for this was because installing patches was a cumbersome and daunting job. Yet with the advent of sophisticated automatic patch management tools, this scenario can be eliminated.
Microsoft Software Update Service (SUS)
Microsoft SUS Server is perfect for operating system patch management. Although you can use a patch management product instead, using Microsoft SUS Server saves you time in the long run: Once set up, it is easy to keep your network up-to-date. Coupled with the fact that
Microsoft SUS Server is free, this makes for an easy decision. However, Microsoft SUS Server does not perform all patch management: It does not deploy patches to application software such as Office, Exchange or SQL Server. Furthermore, it has no scanning capability: you have
to review the logs to check whether patches have been deployed successfully or not. You must therefore use a patch management tool in addition to Microsoft SUS Server.
GFI LANguard Network Security Scanner
GFI LANguard N.S.S. in tandem with Microsoft SUS offers all the features found in more expensive patch management solutions at a minimal cost.
The combination of GFI LANguard N.S.S. and Microsoft SUS allows you to update operating systems using Microsoft SUS (Windows 2000, XP, .NET, IIS, IE, Windows Media) and service packs, Microsoft application patches, Windows NT patches and third party software using GFI
The combined solution of GFI LANguard N.S.S. and Microsoft SUS is not only more powerful and flexible, it is also much more cost-effective: Microsoft SUS is free and GFI LANguard N.S.S. licenses start from as little as £300 for 25 IPs.
Automatically detect security vulnerabilities on your network Provides in-depth information about all machines/devices
In addition to patch management GFI LANguard Network Security Scanner (N.S.S.) checks your network for all potential methods that a hacker might use to attack it. By analyzing the operating system and the applications running on your network, GFI LANguard N.S.S. identifies possible security holes. In other words, it plays the devil's advocate and alerts you to weaknesses before a hacker can find them, enabling you to deal with these issues before a hacker can exploit them.
GFI LANguard N.S.S. scans your entire network, IP by IP, and provides information such as service pack level of the machine, missing security patches, wireless access points, USB devices, open shares, open ports, services/applications active on the computer, key registry entries, weak passwords, users and groups, and more. Scan results can easily be analyzed using filters and reports, enabling you to proactively secure your network – for example, by shutting down unnecessary ports, closing shares, installing service packs and hotfixes, etc.
You can evaluate GFI LANguard Network Security Scanner by clicking on the link below. During the 30 day evaluation period we will provide you with technical support to make sure you get the most from this solution.