Re: File Integrity and Security Checker Evaluation

From: Damir Delija (damir.delija@PBZ.HR)
Date: Wed Sep 24 2003 - 08:59:02 EDT


I rember some good articles in Sysadmin magazine
where deployemet and integration of the tripwire was discussed.

It gives additional view on subject too :))

Damir

> -----Original Message-----
> From: Harvey, Bruce T. [mailto:BTHarvey@LMUS.LEGGMASON.COM]
> Sent: Wednesday, September 24, 2003 2:47 PM
> To: aix-l@Princeton.EDU
> Subject: Re: File Integrity and Security Checker Evaluation
>
>
> Good question. Actually, we're a moderately-sized Financial services
> company, with over 5000 employees and upwards of 50 UNIX --
> AIX and SUN --
> (and many more NT) servers, as well as a comprehensive and
> complex network.
> We're looking to get a tighter rein on both security and
> change management,
> looking for tools that can monitor, repair (and sometimes
> intercept) changes
> when and where they occur.
>
> We're definitely looking for an Enterprise-level solution,
> but this doesn't
> mean we won't look at the "public license" arena, if it is viable and
> manageable.
>
> Hope this adds to the depth of my question. Many thanks!
>
> Bruce T. Harvey
> Legg Mason Wood Walker, Inc.
> Corporate Technology - Tech. Svcs.
> Red Run 2nd Floor - Owings Mills, MD
> (410) 580-7383 - BTHarvey@LeggMason.com
> -------------------------------------------------------
>
>
>
> -----Original Message-----
> From: Damir Delija [mailto:damir.delija@PBZ.HR]
> Sent: Wednesday, September 24, 2003 8:30 AM
> To: aix-l@Princeton.EDU
> Subject: Re: File Integrity and Security Checker Evaluation
>
>
> Aide is quite good
>
> and a few times simple tool like fcheck (waht is really simple)
> saved me ...
>
> I suppose more essential question is what you want to do with
> this tool
> and how it will be deployed ...
>
> I hope this helps
>
> Damir Delija
>
> > -----Original Message-----
> > From: Harvey, Bruce T. [mailto:BTHarvey@LMUS.LEGGMASON.COM]
> > Sent: Wednesday, September 24, 2003 2:08 PM
> > To: aix-l@Princeton.EDU
> > Subject: File Integrity and Security Checker Evaluation
> >
> >
> > To all ...
> >
> > We're evaluating different solutions for products similar to
> > Tripwire (as
> > well as evaluating Tripwire itself). I haven't found any
> > products that come
> > close to what Tripwire can do with regard to the variety of
> > items it'll
> > monitor as well as the thoroughness of the data it will
> > provide and the
> > systems it will run on. "Intact" is the closest competitor
> > I've found --
> > does anyone else have any opinions or suggestions of products
> > to look at?
> > Although I like the horse, a one-horse race is decidedly unfair.
> >
> > Many thanks in advance, and as always, sorry for the long
> disclaimer.
>
> IMPORTANT: The security of electronic mail sent through the Internet
> is not guaranteed. Legg Mason therefore recommends that you do not
> send confidential information to us via electronic mail,
> including social
> security numbers, account numbers, and personal
> identification numbers.
>
> Delivery, and timely delivery, of electronic mail is also not
> guaranteed. Legg Mason therefore recommends that you do not
> send time-sensitive
> or action-oriented messages to us via electronic mail, including
> authorization to "buy" or "sell" a security or instructions
> to conduct any
> other financial transaction. Such requests, orders or
> instructions will
> not be processed until Legg Mason can confirm your instructions or
> obtain appropriate written documentation where necessary.
>



This archive was generated by hypermail 2.1.7 : Wed Apr 09 2008 - 22:17:14 EDT