Complete Patch Management



Similar documents
Complete Patch Management

Complete Patch Management

Vulnerability Intelligence & 3 rd party patch management

EXTENSIVE FEATURE DESCRIPTION SECUNIA CORPORATE SOFTWARE INSPECTOR. Non-intrusive, authenticated scanning for OT & IT environments. secunia.

Managing non-microsoft updates

Secunia Corporate Software Inspector (Secunia CSI) ver.5.0

A patch management discussion

Secunia Corporate Software Inspector (CSI)

Secunia Corporate Software Inspector

Secunia Vulnerability Intelligence Manager

Information and Communication Technology. Patch Management Policy

Viewfinity Privilege Management Integration with Microsoft System Center Configuration Manager. By Dwain Kinghorn

Symantec Server Management Suite 7.6 powered by Altiris technology

Secunia Vulnerability Intelligence Manager (VIM) 4.0

Symantec Client Management Suite 8.0

Altiris Server Management Suite 7.1 from Symantec

Why Free Patch Management Tools Could Cost You More

Identity and Access Management Integration with PowerBroker. Providing Complete Visibility and Auditing of Identities

Are all of your employees applying all security updates to all of their devices?

How To Deploy Software Updates Using SCCM 2012 R2

Reducing the cost and complexity of endpoint management

Product comparison. GFI LanGuard 2014 vs. Microsoft Windows Server Update Services 3.0 SP2

UMHLABUYALINGANA MUNICIPALITY PATCH MANAGEMENT POLICY/PROCEDURE

The Fundamental Failures of End-Point Security. Stefan Frei Research Analyst Director

eguide: Designing a Continuous Response Architecture Executive s Guide to Windows Server 2003 End of Life

PATCH MANAGEMENT. February The Government of the Hong Kong Special Administrative Region

IT Security & Compliance. On Time. On Budget. On Demand.

CONTINUOUS DIAGNOSTICS BEGINS WITH REDSEAL

Vulnerability Management

NYS LOCAL GOVERNMENT VULNERABILITY SCANNING PROJECT September 22, 2011

Lumension Endpoint Management and Security Suite

PATCH MANAGEMENT POLICY IT-P-016

How PatchLink Meets the Top 10 Requirements for Enterprise Patch and Vulnerability Management. White Paper Sept. 2006

PCI Compliance for Cloud Applications

External Supplier Control Requirements

Patch Management Integration

Device Lifecycle Management

Patch Management SoftwareTechnical Specs

Symantec Client Management Suite 7.6 powered by Altiris technology

Continuous Network Monitoring

Integrated Threat & Security Management.

Getting Started with the iscan Online Data Breach Risk Intelligence Platform

Patch Management Procedure. Andrew Marriott PATCH MANAGEMENT PROCEDURE.DOCX Version: 1.1

Altiris Client Management Suite

Tivoli Endpoint Manager. Increasing the Business Value of IT, One Endpoint at a Time

Introduction. Special thanks to the following individuals who were instrumental in the development of the toolkits:

Privilege Gone Wild: The State of Privileged Account Management in 2015

Tackling Third-Party Patches

Best Practices. Understanding BeyondTrust Patch Management

BeyondInsight Version 5.6 New and Updated Features

Symantec Mobile Management 7.2

How To Buy Nitro Security

Cisco AnyConnect Secure Mobility Client integration with ISE & SCCM client for patch remediation on windows

AVOIDING PATCH DOOMSDAY Best Practices for Performing Patch Management

Symantec Control Compliance Suite Standards Manager

The Casper Suite An ROI overview

Service Catalog. it s Managed Plan Service Catalog

Staying Secure After Microsoft Windows Server 2003 Reaches End of Life. Trevor Richmond, Sales Engineer Trend Micro

DOBUS And SBL Cloud Services Brochure

eguide: Designing a Continuous Response Architecture 5 Steps For Windows Server 2003 End of Life Success

Honeywell Industrial Cyber Security Overview and Managed Industrial Cyber Security Services Honeywell Process Solutions (HPS) June 4, 2014

Sample Vulnerability Management Policy

Functional and technical specifications. Background

Caretower s SIEM Managed Security Services

Privilege Gone Wild: The State of Privileged Account Management in 2015

Executive Summary Program Highlights for FY2009/2010 Mission Statement Authority State Law: University Policy:

Securing the Microsoft Environment Using Desktop Patch Management

THE TOP 4 CONTROLS.

Cloud Infrastructure Security Management

SharePoint Governance & Security: Where to Start

Symantec Client Management Suite 7.5 powered by Altiris

INFORMATION PROTECTED

Scanless Vulnerability Assessment. A Next-Generation Approach to Vulnerability Management

ADDING NETWORK INTELLIGENCE TO VULNERABILITY MANAGEMENT

The Value of Vulnerability Management*

Leveraging a Maturity Model to Achieve Proactive Compliance

with Managing RSA the Lifecycle of Key Manager RSA Streamlining Security Operations Data Loss Prevention Solutions RSA Solution Brief

Five ways to simplify the vulnerability management lifecycle. Scott Sidel, CISSP, CEH, ETC May 2005

WHITE PAPER AUTOMATED, REAL-TIME RISK ANALYSIS AND REMEDIATION

Resolving the Top Three Patch Management Challenges

Simplify Your Windows Server Migration

Introduction Jim Rowland, Senior System Architect and Project Manager Daly

Practical Patch Compliance

Enterprise Security. Moving from Chaos to Control with Integrated Security Management. Yanet Manzano. Florida State University.

How to Secure Your SharePoint Deployment

Assuria can help protectively monitor firewalls for PCI compliance. Assuria can also check the configurations of personal firewalls on host devices

Developing Secure Software in the Age of Advanced Persistent Threats

Vulnerability Scanning and Patch Management

Incident Response. Six Best Practices for Managing Cyber Breaches. Nick Pollard, Senior Director Professional Services EMEA / APAC, Guidance Software

DATASHEET CONTROL COMPLIANCE SUITE VENDOR RISK MANAGER 11.1

Altiris IT Management Suite 7.1 from Symantec

How To Manage A Vulnerability Management Program

Lumension Endpoint Management and Security Suite (LEMSS): Patch and Remediation

BEST PRACTICES. Systems Management.

How To Achieve Pca Compliance With Redhat Enterprise Linux

ForeScout CounterACT CONTINUOUS DIAGNOSTICS & MITIGATION (CDM)

Best Practices in ICS Security for System Operators. A Wurldtech White Paper

SANS Top 20 Critical Controls for Effective Cyber Defense

Secunia PSI for Application Patch Management

How To Secure Your System From Cyber Attacks

Transcription:

Complete Patch Management Targeted, Reliable and Cost-efficient Brief Secunia CSI Corporate Software Inspector

Empower your organisation to take control of the vulnerability threat & optimize your ITsecurity investments Secunia Corporate Software Inspector (CSI) 6.0 Combines Vulnerability Intelligence, Vulnerability Scanning, and Patch Creation with Patch Deployment Tool Integration to Enable Targeted, Reliable, and Cost-efficient Patch Management Automatic identification of vulnerabilities in your infrastructure (across endpoints and servers) grouped according to security status (insecure, End of Life) and criticality rating Prioritised patching efforts according to risk exposure, mitigation, and compliance standards Complete overview of all programs, both Microsoft and non-microsoft, installed Patching of non-microsoft programs through existing patch deployment tools (for example WSUS, SCCM, Altiris) Optimized workflow and remediation process through integration with patch deployment tools and automatic patch repackaging CSI 6.0 HIGHLIGHTS Scanning of Red Hat Enterprise Linux Custom scan rules Secunia Smart Groups and Smart Group notifications Integration with third-party patch deployment solutions Integration with Microsoft SCCM for agent-less scanning Active Directory integration

Vulnerability and Patch Management are critical components of any security infrastructure because it enables proactive detection and remediation of vulnerabilities. A process to identify vulnerable programs, including programs not authorised in a corporate environment, paired with targeted patch management is an absolute must to reduce the window of exposure and eliminate the root cause of a potential compromise. However, patching of vulnerable programs, in particular third-party programs which is not supported by Microsoft WSUS, has been a cumbersome and resource intensive process causing many enterprises to either neglect patching or only patch very few non- Microsoft programs. This has left companies exposed as it only takes one vulnerability to compromise the security. This can lead to loss of end-user productivity, unplanned downtime, loss or exposure of sensitive data or damage to brand/reputation 1. The Secunia CSI 6.0 is a Vulnerability and Patch Management Solution that completes the Patch Management process. It provides organisations with a complete overview of their vulnerability threat landscape, identifies exactly where program vulnerabilities exist and guides on how best to prioritize and implement remediation efforts, all whilst leveraging and maximizing existing security investments in current Client Management (CM), Security Information & Event Management (SIEM), and Governance Risk & Compliance (GRC) tools. The Secunia CSI provides the reliable, comprehensive, and up-to-date vulnerability intelligence and highly accurate scan results needed by IT-operations and security teams to effectively manage the threat posed by unpatched vulnerabilities. VI Vulnerability Intelligence VS + + + = Vulnerability Scanning PC Patch Creation PD Patch Deployment PM Complete Patch Management 1: Aberdeen Group Research Brief: Managing Vulnerabilities and Threats (No, Anti-Virus is not enough 2010

What s in it for you? Management Comply with regulatory standards (for example PCI-DSS or NERC-CIP) on patching of programs Utilise existing infrastructure to enforce security levels, i.e. SCCM integration for third-party patching Enable policy enforcement and document your compliance efforts in case of a breach Validated intelligence provided by independent 3rd party vendor (Secunia) Operations Overview of installed programs security state across endpoints and servers Scan and patch non-microsoft programs cross-platform Automatic package creation by Secunia Research Prioritise patching efforts according to criticality of vulnerability based on Secunia VI Access to out-of-the-box patches Security Secure off-site assets Cross-platform scanning Pinpointing the exact vulnerabilities affecting the network Providing in-depth details about vulnerabilities Audit, enforce, and document patching levels Verify security levels across MS, non-ms, and own (custom) program Feature Highlights Coverage Scan and assess the security state of practically all legitimate programs running on Microsoft Windows platforms Support for scanning of Windows, Apple Mac OSX, and Red Hat Enterprise Linux (RHEL) platforms Scan custom programs (non-public) Sources the Secunia Vulnerability Intelligence Database that covers all off-the shelf programs Overview Apply SmartGroups to prioritize remediation efforts, as well as filter and segment data to enforce compliance Exact mapping of infrastructure and users to ensure the environment is in sync Integration Manage and publish packages using third party patch deployment solutions such as Microsoft WSUS/ SCCM or Altiris Active Directory (AD) changes can be automatically updated in the Secunia CSI Source SCCM for inventory and avoid installing agents and configuring the Secunia CSI Integration with the Secunia Vulnerability Intelligence Manager (VIM) to automatically create and update asset lists based on the Secunia CSI scan result PSI 3.0 Integration for management of decentralized endpoints

About Secunia Secunia is the leading provider of IT security solutions that help businesses and private individuals globally manage and control vulnerability threats and risks across their networks and endpoints. Secunia plays an important role in the IT security ecosystem, and is the preferred supplier for enterprises and government agencies worldwide, counting Fortune 500 and Global 2000 businesses among our customer base. Contact For further information about Secunia s competencies, please contact sales@ Stay Secure. Try Secunia CSI today! Sign up for a FREE trial by scanning this QR-code. facebook.com/secunia gplus.to/secunia twitter.com/secunia linkedin.com/company/secunia Visit us at