Discussion Locked

suggestion security assesment tool

0 helpful
9 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
Does anyone know of a good security assesment tool for Windows2000/XP?

9 replies

by ann777

For wireless networks see:
http://www.research.ibm.com/gsal/wsa/
Unfortunately, it is only a research prototype at this time, and IBM has not yet decided whether to market this as a product or release it as open source.Some security consultants offer wireless assessments. Among them are Guardant and Foundstone.

Otherwise, Scanning Tools are helpful in finding the security holes. Use Portscanners as they can tell you what ports are open and use SATAN: The best tool to anylze and monitortraffic on the network. If you need a comprehensive step by step approach to penetration testing GOTO :
http://www.wittys.com/files/mab/fwpentesting.html

by erikdr

While labmice etc. offer good overviews, for real policy assessment tools the market leaders are:
* bv-control at www.bindview.com
* Enterprise Security Manager, formerly from Axent, at www.symantec.com

Note that these are strong in the Windowssettings, not in checking all installed fixpacks. For the latter one, on microsoft.com there is a free tool for download.

Hope this helps,

- The Netherlands

by sai p.s.

I would suggest the Microsoft Baseline Security Analyzer. You can download it from the MS site at http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/tools/Tools/MBSAhome.asp

First, its free and easy to use. Second, it canscan domains and individual computers and it provides a detailed vulnerability report with the specifics of what was scanned, what went wrong and how to fix it. It maintains a hotfix database that can check for which of the latest hotfixes need to be applied along with information on how critical they are. The report covers different aspects of security - Accounts, Passwords, SQL Servers, IIS, Internet Explorer issues, etc.

This discussion is closed to new replies.