SEARCH RESULTS
 
Showing 1-10 of 11 records
 
Expand article

Agents - Can't live with them, can't live with them

2008-03-13 08:44:40 by HASH0x8b520ec in StillSecure, After All These Years
 
...agentless NAC as a panacea. That it is not. In some cases agentless NAC works great, in others it severely limits what you can test for when and how fast. Personal firewalls and other such technologies can wreak havoc on agentless NAC. You may still need credentials to get any useful information. Over the years here at StillSecure, we have...
 
 
 
 
 
Expand article

Agents - Can't live with them, can't live with them

2008-03-13 09:44:40 by ashimmy in StillSecure, After All These Years
 
...agentless NAC as a panacea. That it is not. In some cases agentless NAC works great, in others it severely limits what you can test for when and how fast. Personal firewalls and other such technologies can wreak havoc on agentless NAC. You may still need credentials to get any useful information. Over the years here at StillSecure, we have...
 
 
 
 
 
Expand article

More on Hating Agents

2008-02-13 14:54:00 by Dr Anton Chuvakin in Anton Chuvakin Blog -
 
...Agentless / remote collection pros and cons such agentless, centralized log collection usually incurs less impact on the logging systems contrary to popular belief, one can collect logs securely without agents (e.g. via SCP, FTPS or SFTP just as with agents, one can schedule log collection for off-hours one can choose to pull or push data...
 
 
 
 
 
Expand article

NAC for grown-ups

The Article has images
2008-03-13 23:06:10 by HASH0x89079f8 in StillSecure, After All These Years
...agentless NAC is the only way to test devices. Especially if like Gord's product, all you are using to do so is nMap and an old version of Nessus (btw, Gord do you include the source code with your use of those open source products?). I think to truly test the full spectrum of devices accessing the network you need a combination of agentless,...
 
 
 
 
 
Expand article

NAC for grown-ups

The Article has images
2008-03-13 23:58:00 by ashimmy in StillSecure, After All These Years
...agentless NAC is the only way to test devices. Especially if like Gord's product, all you are using to do so is nMap and an old version of Nessus (btw, Gord do you include the source code with your use of those open source products?). I think to truly test the full spectrum of devices accessing the network you need a combination of agentless,...
 
 
 
 
 
Expand article

Some Burning Logging Questions - Answered!

2008-04-23 16:20:00 by Dr Anton Chuvakin in Anton Chuvakin Blog -
 
...agentless log collection barely affects system performance (unless you have one of the few esoteric cases log transfer and network performance: look for compressed (logs compress really well), TCP-based transfers; syslogging over UDP uncompressed has a chance of doing a pipe saturation DoS on your network. Yes, people say "use a dedicated...
 
 
 
 
 
Expand article

Stay Current? - I don't think so

2008-06-23 19:57:12 by HASH0x8c193d4 in StillSecure, After All These Years
 
...agentless, yada, yada, yada. At the end of the article was a list of "market leaders" including Vernier Networks and a few other smaller NAC vendors. Now as we all know Vernier ain't Vernier no more and is not really in the NAC business. I would not hold it against John Edwards or ITSecurity.com except at the head of the article it said,...
 
 
 
 
 
Expand article

Stay Current? - I don't think so

2008-06-23 20:57:12 by ashimmy in StillSecure, After All These Years
 
...agentless, yada, yada, yada. At the end of the article was a list of "market leaders" including Vernier Networks and a few other smaller NAC vendors. Now as we all know Vernier ain't Vernier no more and is not really in the NAC business. I would not hold it against John Edwards or ITSecurity.com except at the head of the article it said,...
 
 
 
 
 
Expand article

Symantec takes a fling it on the wall approach to NAC

2008-07-29 06:49:15 by HASH0x8cbd290 in StillSecure, After All These Years
 
...agentless was called out. So within just a few days comes this announcement addressing the issue. Very timely indeed. This comes on the heels of Symantec's peer-to-peer approach to NAC, which came on the heels of their Endpoint Security product version 11 which had NAC included (and which I understand has already been patched/upgraded several...