- BlackBerry Storm vs. the iPhone
- Digg's Kevin Rose: "We have to do better"
- Blogger warns: "Nortel doesn't make it out alive"
- Financial quagmire bringing out the scammers
- Verizon plays with the wrong e-mail addresses
Newsletters | Podcasts | Chats | Opinions | RSS Feeds | This Week In Print | IT Careers | Community | Reports | Downloads | Slideshows | New Data Center
Partner Sites:Application Performance Solutions | App Performance | Networking Solution | SafeGuard Enterprise Solution Center | SOA | Test your Web Filter | Value of WDS
While vulnerability assessment products are moving solidly in the direction of vulnerability management, Citadel Security Software takes that shift one step further with its focus on automatic remediation.
Citadel's Hercules is an automated vulnerability remediation tool that pulls results from vulnerability assessment scanners, applies its own detailed knowledge on remediation procedures across a variety of platforms, and then either recommends remediation steps or makes them happen.
The main focus of the product is to run remediation tasks, which could be changing file permissions, changing a password, setting an operating system configuration option or installing a patch. Administrators also can script their own fixes if they desire, and full rollback options are available.
Agents are installed on target systems that listen for information from a Citadel central server on how to handle remediation tasks. Remediation scripts also running on the target systems are responsible for fixing identified vulnerabilities.
You can use Hercules without agents, relying on Secure Shell, Windows Services or HTTP/Secure-HTTP for communications to the system from the central server.
Citadel also helps you use its remediation tool to further policy compliance. You can use Hercules to define policy groups. When scan results are imported, Hercules automatically pushes out fixes to machines that don't follow group policy if that is how the administrator has set up the script.
While auto-remediation sounds great, system administrators are wary. The remediation is based on the vulnerability assessment results, so you need to ensure those results are accurate for auto-remediation to be successful.
Back to review: "Network vulnerability assessment management"
Partner Content
Brilliantly simple security and control solutions for email, web and endpoint
www.sophos.com
Stopping data leakage
Learn how to exploit your current security investment to control the information that flows into, through and out of your network.
Download the white paper.
Why detection rates aren't enough
Evaluating endpoint security products is a time-consuming and daunting task. Learn the six critical questions you need to ask prospective vendors to get the right endpoint solution.
Download the white paper.
Applications: taking back control
Employees installing unauthorized applications is a growing threat to business security and productivity. Cost-effectively reduce this threat by integrating control into your malware protection.
Learn more today.
Comment