<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>Code red- Returning?</TITLE>
<META content="MSHTML 6.00.2722.900" name=GENERATOR></HEAD>
<BODY>
<DIV><SPAN class=668153518-18032003><FONT face=Arial color=#0000ff
size=2>Marty,</FONT></SPAN></DIV>
<DIV><SPAN class=668153518-18032003><FONT face=Arial color=#0000ff size=2>this
would be great news, IF I wasn't the victim..</FONT></SPAN></DIV>
<DIV><SPAN class=668153518-18032003><FONT face=Arial color=#0000ff size=2>I did
read the article when I got my NW Fusion this month..</FONT></SPAN></DIV>
<DIV><SPAN class=668153518-18032003><FONT face=Arial color=#0000ff size=2>This
needs to go to the folks who are infected...</FONT></SPAN></DIV>
<DIV><SPAN class=668153518-18032003><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=668153518-18032003><FONT face=Arial color=#0000ff size=2>Is
this the correct place for an Advertisement?</FONT></SPAN></DIV>
<DIV><SPAN class=668153518-18032003><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=668153518-18032003><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=668153518-18032003><FONT face=Arial color=#0000ff
size=2>Jim</FONT></SPAN></DIV>
<DIV><SPAN class=668153518-18032003><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<BLOCKQUOTE dir=ltr
style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #0000ff 2px solid; MARGIN-RIGHT: 0px">
<DIV class=OutlookMessageHeader dir=ltr align=left><FONT face=Tahoma
size=2>-----Original Message-----<BR><B>From:</B> Marty Armstrong
[mailto:MartyA@patchlink.com]<BR><B>Sent:</B> Tuesday, March 18, 2003 12:57
PM<BR><B>To:</B> McBurnett, Jim<BR><B>Cc:</B>
nanog@merit.edu<BR><B>Subject:</B> RE: Code red-
Returning?<BR><BR></FONT></DIV>
<DIV>
<P><FONT size=2>Network World evaluated several Patch Management tools on
March 3rd. PatchLink Update won the Blue Ribbon Award. Also, none of our
customers were hit by Slammer. PatchLink Update's flexibility helped it best
three other products tested.</FONT></P>
<P><FONT size=2></FONT></P>
<P><FONT size=2>Please see the attached link to read about our Blue Ribbon
Award from Network World Fusion for Patch Management . <A
href="http://www.nwfusion.com/reviews/2003/0303patchrev.html">http://www.nwfusion.com/reviews/2003/0303patchrev.html</A><SPAN
class=718525417-18032003> </SPAN></FONT></P>
<P><FONT size=2></FONT></P>
<P><FONT size=2></FONT></P>
<P><FONT size=2>Review: </FONT></P>
<P><FONT size=2>Windows patch management tools</FONT></P>
<P><FONT size=2>PatchLink Update's flexibility helped it best three other
products tested.</FONT></P>
<P><FONT size=2>By Mandy Andress, Network World Global Test
Alliance</FONT></P>
<P><FONT size=2>Network World, 03/03/03</FONT></P>
<P><FONT size=2>With Microsoft releasing more than 230 security bulletins
since the beginning of 2000 - most of those requiring some sort of corrective
action to fix a hole in one of its Windows-based products - the numbers speak
for themselves: Windows patch management in an enterprise environment is a
nightmare. </FONT></P>
<P><FONT size=2>We tested four stand-alone Windows patch management products -
BigFix's Enterprise Suite, Gravity Storm Software's Service Pack Manager 2000,
PatchLink's Update and Shavlik Technologies' HfNetChk Pro to find out if they
improve patch deployment. (See "Not in the game" for declining vendors.)
</FONT></P>
<P><FONT size=2>Patch management tools should identify accurately which
patches are missing on each system, provide an easy means to deploy patches
and provide administrative reports tracking patch status across multiple
machines. </FONT></P>
<P><FONT size=2></FONT></P>
<P><FONT size=2>The products we tested (see How we did it) attack the problem
in two ways - with or without agent software. Agent-based products - such as
those from PatchLink and BigFix - can greatly reduce network traffic by
offloading processing and analysis to the target system, saving data until it
needs to report to the central server. But they also force an administrator to
manage software on all systems the product analyzes. </FONT></P>
<P><FONT size=2>With agentless products - such as those from Shavlik and
Gravity Storm - you don't have any distributed management issues, but whenever
a scan is requested all tests and communications travel over the network. If
scanning a domain with a large number of systems, the increase in network
traffic can be quite significant. </FONT></P>
<P><FONT size=2><STRONG>PatchLink's Update 4.0 earned the Network World Blue
Ribbon award for its ease of use, flexibility, automation and letting you
easily create deployment packages. </STRONG></FONT></P>
<P><FONT size=2>PatchLink has two components - PatchLink Update Server and the
agent. The Update Server is installed on a Windows 2000 Server with SP2 and
Internet Information Server (IIS). The installation process sets up a
Microsoft Data Engine (MSDE) database, which can be upgraded to a full SQL
Server after installation. This upgrade is recommended for large
organizations. </FONT></P>
<P><FONT size=2>You easily can push the agents to targeted machines using the
Agent Install Wizard, or agents can be installed during the logon process.
</FONT></P>
<P><FONT size=2>For management purposes, administrators connect to the
PatchLink server through a Web interface, which lets you view reports, deploy
packages, create packages and view system inventory. </FONT></P>
<P><FONT size=2>PatchLink, the company, monitors Microsoft and other vendors,
such as Citrix Systems and Adobe, for newly released patches. PatchLink
engineers test the patches, put them into PatchLink's proprietary package
format and deploy them to customers' local PatchLink servers through a
periodic subscription-checking process, which occurs over Secure Sockets Layer
at a time the administrator configures. </FONT></P>
<P><FONT size=2>Administrators receive e-mail informing them of a new patch on
the PatchLink server. If it is a critical patch, it also is downloaded to the
Update Server on the customer's network. Noncritical patches will be
downloaded at the administrator's request. </FONT></P>
<P><FONT size=2>PatchLink automatically caches critical patches on the Update
Server, a marked difference from BigFix and the agentless products. Caching
patches is useful and the recent Sapphire/Slammer SQL Server worm proves the
point. If a worm or other malicious act is taking place that slows down the
Internet, how will administrators download patches to their critical servers?
With cached patches, you already have the files at your location. </FONT></P>
<P><FONT size=2></FONT></P>
<P><FONT size=2>Best Regards,</FONT></P>
<P><FONT size=2></FONT></P>
<P><FONT size=2>Marty Armstrong</FONT></P>
<P><FONT size=2></FONT></P>
<P><FONT size=2>martya@patchlink.com</FONT></P>
<P><FONT size=2>PatchLink Corporation</FONT></P>
<P><FONT size=2>3370 N. Hayden Road</FONT></P>
<P><FONT size=2>Suite 123-175</FONT></P>
<P><FONT size=2>Scottsdale, AZ 85251</FONT></P>
<P><FONT size=2>(P) 480-970-1025 Ext. 136</FONT></P>
<P><FONT size=2>(F) 480-970-6323</FONT></P>
<P><FONT size=2><<http://www.patchlink.com/>></FONT></P>
<P><FONT size=2></FONT></P>
<P><FONT size=2>PatchLink Update Awarded Blue Ribbion from Network World
Fusion</FONT></P>
<P><FONT size=2>For the article go to:
http://www.nwfusion.com/reviews/2003/0303patchrev.html</FONT></P>
<P><FONT size=2>PatchLink Update Receives Network Computing Editor's Choice
Award for Patch Management</FONT></P>
<P><FONT size=2>For the article go to:
<<http://www.patchlink.com/media_room/nwc92002.pdf>>
</FONT></P></DIV>
<BLOCKQUOTE
style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #0000ff 2px solid">
<DIV class=OutlookMessageHeader dir=ltr align=left><FONT face=Tahoma
size=2>-----Original Message-----<BR><B>From:</B> McBurnett, Jim
[mailto:jmcburnett@msmgmt.com]<BR><B>Sent:</B> Tuesday, March 18, 2003 10:50
AM<BR><B>To:</B> nanog@merit.edu<BR><B>Subject:</B> Code red-
Returning?<BR><BR></FONT></DIV><!-- Converted from text/rtf format -->
<P><FONT face=Arial size=2>Has anyone out there noticed an increase in a
Code-Red patterned virus?</FONT> <BR><FONT face=Arial size=2>I know about
the Microsoft bug that came out yesterday/last night.</FONT> <BR><FONT
face=Arial size=2>But I am seeing the same symptoms as Code Red,</FONT>
<BR><FONT face=Arial size=2>800+ hits in the last 12 hours, from the same
Class A network I am on.</FONT> <BR><FONT face=Arial size=2>The amount is
increasing per hour..</FONT> <BR><FONT face=Arial size=2>It started with 50
the first hour and now it just about 150 an hour...</FONT> </P>
<P><FONT face=Arial size=2>Thoughts?</FONT> </P>
<P><FONT face=Arial size=2>thanks,</FONT> <BR><FONT face=Arial
size=2>Jim</FONT> </P><BR></BLOCKQUOTE></BLOCKQUOTE></BODY></HTML>