More security stuff...Updates, scanners, and other security apps are
part of the formula for secure computing. But in the business environment, there are also a number of additional things you should be doing to further shore up security. Unfortunately, if you don't have an IT department (or a fairly decent personal background in IT security) it's hard to stay on top things. Sad truth is: IT security is a full-time job. At least it is for the Bad Guys! But it's hard to do it yourself when you also have the rest of your business to run. Fortunately, there are proven steps you can take to get as secure as possible with the least amount of time, expense, and effort.
The very first step in any security programme is to discover exactly where you are vulnerable. And one of the most efficient ways to do that is with a vulnerability audit and management utility.
GFI LANGuard is a product designed to provide you with a thorough and easy to implement vulnerability assessment.
LANGuard is well respected in the IT world. And it's been around for years. If you're involved with enterprise-level tech support in my neck of the woods, you'll see LANGuard running on about 25% of the networks out there.
Product Details
Manually auditing a network for vulnerability and then correcting any problems found is virtually impossible without a vulnerability management tool like GFI LANguardTM. We help administrators to scan, assess, identify and correct problems on the network and then take action accordingly using the product’s extensive automated functionality. You can also patch machines and carry out comparisons between scans to identify hardware or software changes.
Sounds like a neat thing to have doesn't it? Unfortunately, licenses for a product like LANGuard will set you back $32 per IP address for the first 10-24, with a minimum order of 10 licenses (i.e $320).
So nice as something like LANGuard might be, it's a tad pricey for most small and SOHO businesses. Especially when you consider that many small businesses have less than ten machines to begin with.
Well, it looks like some companies are beginning to realize that this is an issue.
GFI LANguard 9 now available in FREEWARE
GFI LANguard, an award-winning vulnerability management solution, is now available in a 5-IP freeware version.
lThe economic downturn is forcing more and more businesses to cut budgets and reduce spending, and security is often the first area to suffer. With cybercrime on the increase and threats becoming more dangerous and frequent, businesses can ill-afford to ignore security – on the contrary, they need to beef up their defenses!
This is why GFI Software is giving away a 5-IP freeware version of its award-winning product GFI LANguard™: to assist organizations shore up their defenses and secure their networks – and at no cost. Because we care!
Winner of the Best of TechEd award in 2007, highly recommended by the judges at the SC Magazine Europe awards in 2008 and a finalist at this year’s SC Magazine Europe awards, GFI LANguard allows administrators to scan, detect, assess and rectify vulnerabilities on their network and to secure it with minimal administrative effort.
Over 15,000 vulnerability assessments are carried out when the network, including any virtual environment, is scanned by GFI LANguard. When the scan is complete, GFI LANguard’s Patch Management functionality allows administrators to deploy and manage patches and security updates on all machines across the network. Hardware information can be retrieved and baseline comparisons used to check for unauthorized changes.
Download your freeware version of GFI LANguard, click here.
http://www.gfi.com/downloads/downloads.aspx?pid=lanss&lid=EN
This is not some stripped-down "entry version." This is the full enterprise level product, with the only restriction being the number of IP addresses it will support. The 5-license product can easily be upgraded to allow additional machines through the purchase of additional licenses. And since it is exactly the same product as the paid version, you won't need to uninstall and reinstall a new copy if your network starts to grow. When you consider that the free five machine maximum will be sufficient for many small businesses, this offer is an exceptionally good deal.
Check out the separately downloadable 157-page manual to see all the goodness it can bring to your network. Then download the binary - and use it!
Disclaimer: since I'm waxing poetic, now might be a good time to mention that 40hz has absolutely no affiliation with the makers of GFI LANGuard.***
If you don't want, or feel you need, all the power and features of GFI LANGuard, consider downloading and familiarizing yourself with the
Microsoft Baseline Security Analyzer:
Brief Description
The Microsoft Baseline Security Analyzer provides a streamlined method of identifying common security misconfigurations. MBSA 2.1 adds Windows Vista and Windows Server 2008 compatibility.
Overview
In response to direct customer need for a streamlined method to identify common security misconfigurations, Microsoft offers the free Microsoft Baseline Security Analyzer (MBSA) scan tool. It includes a graphical and command line interface that can perform local or remote scans of Microsoft Windows systems.
MBSA 2.1 builds on previous versions by adding support for Windows Vista and Windows Server 2008. MBSA 2.1 also provides full 64-bit installation, scan tool and vulnerability assessment (VA) checks, improved SQL Server 2005 checks, and support for the latest Windows Update Agent (WUA) and Microsoft Update technologies. More information on the capabilities of MBSA 2.1 is available on the MBSA Web site.
MBSA 2.1 runs on Windows Server 2008, Windows Vista, Windows Server 2003, Windows XP and Windows 2000 systems and will scan for common security misconfigurations on all Windows platforms and components including Internet Information Server (IIS) 5.0, and 6.0, SQL Server 7.0, 2000 and 2005, Internet Explorer (IE) 5.01 and later, and Office 2000, 2002 and 2003.
MBSA also scans for missing security updates, update rollups and service packs available from Microsoft Update.
Not as extensive or complete as GFI's offering, but still a valuable addition to your security toolkit. What it does do, it does very well. Many IT pros prefer MBSA over other products. Now on version 2,1 and available for free download directly from 'the mothership' itself at this link:
http://www.microsoft.com/downloads/details.aspx?FamilyID=F32921AF-9DBE-4DCE-889E-ECF997EB18E9&displaylang=en
Cool stuff.

Better security is just a download away.
