Discussion Locked

Microsft Patches

0 helpful
5 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

On most microsoft patch documentation I read ..." Best practices recommend blocking all TCP/IP ports that are not actually being used, and most firewalls including the Windows Internet Connection Firewall (ICF) block those ports by default." from Microsoft security bulletin MS03-026.

1.Does this mean this patch is not important if you have properly configured firewall?
2.Do you need it if you have a laptop and log on to coffee shop wireless internet connection?
3.Do you be ok if an attaker accesse your network/machine weather you have this patch or not?

I just could not understand what micosoft is trying to say. Please help.

5 replies

by dryflies

1. No the patch is important regardless
2. more than ever
3. It is never OK if an attacker accesses your machine.

Microsoft is trying to say that you need to keep ports blocked AND keep your PC up to date AND use a firewall. It is called "defense in depth"

We have desktop firewall, border firewall, antivirus, anti spyware monitor and more on every PC.

by curacao_dejavu

security pathes are always important and should be applied.
In case someone will manage to bypass your firewall, they can not exploit the vulnerabillity of the os if you did patch it.
basically they say:
dont run a service if you do not need it.
do not have a port open if you do not need it.
have a firewall and keep that updated too.
keep uodate with pathes.
set up auditing for every device , firewall , os etc.
and do review the log files.

Leopold

This discussion is closed to new replies.