Hello,
Since 4/95 we have been using Satan 1.1.1 to scan our Digital UNIX
systems, for known security holes, in addition to HP-UX, IRIX, Solaris,
MVS, etc. I have successfully run Satan from a Digital UNIX system
using mosaic 2.5 -- Netscape 3.01 had problems. Since the product is
dated and has not been updated at
ftp://ftp.win.tue.nl:/pub/security since
then I am looking for a replacement.
We would like the following; a tool to monitor our network (i.e., sniffer)
for attacks in progress (e.g., smurf, teardrop), and a tool to scan
our systems for security holes.
ISS has RealSecure (cost $$$) to sniff the network and I also
discovered MCI's dostrack (free),
http://www.security.mci.net/dostracker. ISS has Internet Scanner to
scan our systems for security holes as does Satan. Unfortunately,
Internet Scanner is very expensive given we are a University (read
money does not grow on trees). I have seen RealSecure and Internet
Scanner demonstrated and they appear to be good products. I have not
tried dostrack.
Does anyone have recommendations, comparisons, experiences they want to share?
--
Regards,
Richard Jackson
Computer Center Lead Engineer
Mgr, Central Systems & Dept. UNIX Consulting
University Computing & Information Systems (UCIS)
George Mason University, Fairfax, Virginia
Received on Thu May 07 1998 - 15:57:32 NZST