IT Briefing Agenda 1/20/05

31
Information Technology at Emory Information Technology Division Technical Services IT Briefing Agenda 1/20/05 iCommand & Remedy Update SESA Overview & Demo Win ’98 Support OID Update & Demo Security Scan Demo NetCom (Wireless) Update Karen Jenkins Craig Myers Stu Lipkin Mark Parten Andy Efting Paul Petersen

description

iCommand & Remedy Update SESA Overview & Demo Win ’98 Support OID Update & Demo Security Scan Demo NetCom (Wireless) Update. IT Briefing Agenda 1/20/05. Karen Jenkins Craig Myers Stu Lipkin Mark Parten Andy Efting Paul Petersen. S ymantec E nterprise S ecurity A rchitecture. - PowerPoint PPT Presentation

Transcript of IT Briefing Agenda 1/20/05

Page 1: IT Briefing Agenda 1/20/05

Information Technology at Emory

Information Technology DivisionTechnical Services

IT Briefing Agenda 12005

bull iCommand amp Remedy Update

bull SESA Overview amp Demobull Win rsquo98 Supportbull OID Update amp Demo bull Security Scan Demobull NetCom (Wireless)

Update

bull Karen Jenkins

bull Craig Myersbull Stu Lipkin bull Mark Partenbull Andy Eftingbull Paul Petersen

Information Technology at Emory

Symantec Enterprise Security Architecture

Craig MyersITD Client Services Development

Information Technology at Emory

Information Technology DivisionTechnical Services

Symantec Enterprise Security Architecture

Presentation Outlinebull Desktop Antivirusbull Managed Antivirusbull SESA bull Event Manager for AVbull SESA and Event Managerbull Diagrams and Demobull Real-world Experiences by Derek

Spransy

Information Technology at Emory

Information Technology DivisionTechnical Services

AntiVirusSpring 2005Symantec Antivirus Corporate Editionversion 9021000

Norton Antivirus for Macintosh (with ldquononagrdquo)version 903 (6)

Information Technology at Emory

Information Technology DivisionTechnical Services

Managed AV

`` `

`

bullSupport thousands of PCsbullPCs get Virus Definitions from Server andor via LiveUpdatebullEvents are logged by the Parent ServerbullQuick display of current versions which definitions are in use last scan performed and virus alertsbullCan schedule scans without user being logged inbullCan configure client settings per machine or by groupbullWith Alert Management Service (AMS) can get email when a machine gets a virusbullLacks reporting hellip

Information Technology at Emory

Information Technology DivisionTechnical Services

Managed AVbull Managed AV

ndash Campus parent server available to departmental servers for updates

ndash Virus definitions updated hourly via Intelligent Updates

ndash Investigating installing a managed facultystaff server andor student server to provide management to campus entities without a local managed AV server hellip thoughts

Information Technology at Emory

Information Technology DivisionTechnical Services

SESAbull Scalable solution that integrates

multiple Symantec Security and third party products

bull Provides granular alerting of eventsbull Query filter and sort data for

charting and reportingbull Relatively new still growing

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA Architecture

Information Technology at Emory

Information Technology DivisionTechnical Services

Event Manager for Antivirusbull SESA integration productbull Enables centralized cross-tier

logging alerting and reporting between the SESA event management system and Symantec Antivirus

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA with Event Manager

SESA Datastor

e

AV Server AV ServerConsole

SESA Manager

Oracle

bullCollector on each parent AV server passes logged data to the SESA Manager via an Agent

bullThe Manager stores the event data into the Data store

bullThe Manager uses a directory to manage the devices users and permissions

bullAccess to the Manager is through a SESA console which is java based

bullAll SESA components are Java based except the Data store and Directory (Oracle and DB2)

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA DEMO

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA Requirementsbull Prerequisites

ndash Department must be running Symantec AV Server version 9 or better

ndash Must allow Java SDK 131_09 to be installed ndash Departmental server must be win32-based (ie

Win2K XP 2003) ndash Must have a designated contact

bull ITD Responsibilities ndash Create an OU and an access account ndash Provide on-site installation assistance ndash Provide on-site training at the time of installation

Install and training take about 1 hour and does not require a server reboot

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA Procedurebull ESR Form Method

ndash Go to the Electronic Support Request (ESR) form httphelpemoryedu

ndash Login using your campus id and password ndash Select the General Emory Helpdesk ndash Select the Request Type of General Other ndash Use Please add my managed AV server to

SESA in the Additional Details box

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA Procedure (cont)bull Magic Method

ndash Create a new incident using your name ndash Set Subject to Software ndash Enter Please add my managed AV server

to SESA in the incident description ndash Assign the call to

EU_ITD_CLIENT_SERVICES_TIER_2 queue bull Someone from CSD will respond to your

request within three business days bull We will verify the prerequisites and

setup an installation time

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA

QuestionsQuestions

Information Technology at Emory

Client Services Update

Stu Lipkin

Information Technology at Emory

Information Technology DivisionTechnical Services

Discontinuing Support For Windows 98 and Mac OS 9

bull Mainstream support from MS ceased for these products June 30 2002 and December 31 2003 Fee-for-service extended support is available but no future development is planned for these products Microsoft will only provide critical security updates for above products posted on the Windows Update web site Hotfixes for non-critical updates will be available on request only

bull No further development and support for Mac OS 9x is indicated from Apple Mac OS 102 is the recommended platform for Apple computers

Information Technology at Emory

Information Technology DivisionTechnical Services

Windows 98 Support from Microsoft

OPERATING SYSTEM

bull Windows 98bull Windows 98 SEbull Windows ME

END OF SUPPORT

bull June 30 2002bull June 30 2002bull December 31

2003Only paid incident support is available until December 31 2006httpsupportmicrosoftcomdefaultaspxscid=fh[ln]LifeWinhttpsupportmicrosoftcomgplifean1

Information Technology at Emory

Information Technology DivisionTechnical Services

Proposed End of Supportbull We propose to end support for

Mac OS 9x Windows 98 98 SE and Windows ME on May 31st 2005

Information Technology at Emory

Information Technology DivisionTechnical Services

Impact of discontinuation of stated OS support

bull No phone or desktop support from ITD would be provided for customers running Win 98 Win 98 2nd ed ME Mac OS 9x

bull No support provided for ITD applications running on stated OS

bull Development of installers would not be written for above OS

bull Enterprise applications and continuing development would not need to consider the above OSes as included in the technical specifications

Information Technology at Emory

Information Technology DivisionTechnical Services

Impactbull There should be no immediate effect on

users There is no immediate plan to change services so that they are incompatible with these Windows and Macintosh Operating Systems

bull Users should expect that newer applications introduced in the preceding months may not operate on older systems and may require Windows 2000 or Mac OS 102 or higher

Information Technology at Emory

Information Technology DivisionTechnical Services

Proposed Communication Plan

bull present at IT Briefing January 2005bull present at Desknet in January 2005bull prepare announcement to end users mid-Februarybull post announcement in ERWheel FebruaryMarchbull email to Local-l All-emory various Learnlink

conferences (LL Demigods SCC Technology and Emory Announcements) last business day of Jan Feb Mar Apr

bull post on defined page on itemoryeduDesktop Computing

Information Technology at Emory

Oracle Names to Oracle Internet DirectoryMark Parten

Information Technology at Emory

Self-Service Vulnerability Scanning

A new service from your ITD Security Team

Information Technology at Emory

Information Technology DivisionTechnical Services

Introductionbull Utilizes the Nessus Vulnerability Scanning

Toolbull Specifically for use by System Administrators

and Local Support Personnelbull Can scan both desktop and server machinesbull Reports vulnerabilities and gives possible

solutions fixes

Information Technology at Emory

Information Technology DivisionTechnical Services

Getting Startedbull For more information on requesting the

ability to do a Self-Service Scan go to the following URL

httpitemoryedushowdoccfmdocid=4248

bull The ITD Security Team will work with System Administrators and Local Support Personnel to get them set up and scanning once a request has been received

Information Technology at Emory

Information Technology DivisionTechnical Services

OverviewNetwork Vulnerability Scanning Self-Service

Overview FAQ

ITD Security offers Network Vulnerability Scanning Self-Service using Nessus from a centralized scanning server in the DMZ To request the ability to scan your network please send the following information to the security team at SecurityTeam-Llistservemoryedu 1 Name and organization you support2 The IP address range on your network that you would like to scan3 Phone number and e-mail address4 Your network ID

We will confirm this information send a link for the latest Nessus scanning client and provide a password to use when you connect to the system

Information Technology at Emory

Information Technology DivisionTechnical Services

How tobull Use GUI to connect to the Scanning

Serverbull Use network ID and Nessus

password to authenticatebull Create scan session (which nodes

options etc)bull Run scan view results create report

Information Technology at Emory

Information Technology DivisionTechnical Services

Documentation

Can be found at

httpwwwnessusorgdocumentation

Information Technology at Emory

Information Technology DivisionTechnical Services

Self-Service Scanning

QuestionsQuestions

Information Technology at Emory

Information Technology DivisionTechnical Services

NetCom

QuestionsQuestions

  • IT Briefing Agenda 12005
  • Symantec Enterprise Security Architecture
  • Symantec Enterprise Security Architecture Presentation Outline
  • AntiVirus Spring 2005
  • Managed AV
  • Slide 6
  • SESA
  • SESA Architecture
  • Event Manager for Antivirus
  • SESA with Event Manager
  • SESA DEMO
  • SESA Requirements
  • SESA Procedure
  • SESA Procedure (cont)
  • Slide 15
  • Client Services Update
  • Discontinuing Support For Windows 98 and Mac OS 9
  • Windows 98 Support from Microsoft
  • Proposed End of Support
  • Impact of discontinuation of stated OS support
  • Impact
  • Proposed Communication Plan
  • Oracle Names to Oracle Internet Directory
  • Self-Service Vulnerability Scanning
  • Introduction
  • Getting Started
  • Overview
  • How to
  • Documentation
  • Self-Service Scanning
  • NetCom
Page 2: IT Briefing Agenda 1/20/05

Information Technology at Emory

Symantec Enterprise Security Architecture

Craig MyersITD Client Services Development

Information Technology at Emory

Information Technology DivisionTechnical Services

Symantec Enterprise Security Architecture

Presentation Outlinebull Desktop Antivirusbull Managed Antivirusbull SESA bull Event Manager for AVbull SESA and Event Managerbull Diagrams and Demobull Real-world Experiences by Derek

Spransy

Information Technology at Emory

Information Technology DivisionTechnical Services

AntiVirusSpring 2005Symantec Antivirus Corporate Editionversion 9021000

Norton Antivirus for Macintosh (with ldquononagrdquo)version 903 (6)

Information Technology at Emory

Information Technology DivisionTechnical Services

Managed AV

`` `

`

bullSupport thousands of PCsbullPCs get Virus Definitions from Server andor via LiveUpdatebullEvents are logged by the Parent ServerbullQuick display of current versions which definitions are in use last scan performed and virus alertsbullCan schedule scans without user being logged inbullCan configure client settings per machine or by groupbullWith Alert Management Service (AMS) can get email when a machine gets a virusbullLacks reporting hellip

Information Technology at Emory

Information Technology DivisionTechnical Services

Managed AVbull Managed AV

ndash Campus parent server available to departmental servers for updates

ndash Virus definitions updated hourly via Intelligent Updates

ndash Investigating installing a managed facultystaff server andor student server to provide management to campus entities without a local managed AV server hellip thoughts

Information Technology at Emory

Information Technology DivisionTechnical Services

SESAbull Scalable solution that integrates

multiple Symantec Security and third party products

bull Provides granular alerting of eventsbull Query filter and sort data for

charting and reportingbull Relatively new still growing

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA Architecture

Information Technology at Emory

Information Technology DivisionTechnical Services

Event Manager for Antivirusbull SESA integration productbull Enables centralized cross-tier

logging alerting and reporting between the SESA event management system and Symantec Antivirus

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA with Event Manager

SESA Datastor

e

AV Server AV ServerConsole

SESA Manager

Oracle

bullCollector on each parent AV server passes logged data to the SESA Manager via an Agent

bullThe Manager stores the event data into the Data store

bullThe Manager uses a directory to manage the devices users and permissions

bullAccess to the Manager is through a SESA console which is java based

bullAll SESA components are Java based except the Data store and Directory (Oracle and DB2)

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA DEMO

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA Requirementsbull Prerequisites

ndash Department must be running Symantec AV Server version 9 or better

ndash Must allow Java SDK 131_09 to be installed ndash Departmental server must be win32-based (ie

Win2K XP 2003) ndash Must have a designated contact

bull ITD Responsibilities ndash Create an OU and an access account ndash Provide on-site installation assistance ndash Provide on-site training at the time of installation

Install and training take about 1 hour and does not require a server reboot

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA Procedurebull ESR Form Method

ndash Go to the Electronic Support Request (ESR) form httphelpemoryedu

ndash Login using your campus id and password ndash Select the General Emory Helpdesk ndash Select the Request Type of General Other ndash Use Please add my managed AV server to

SESA in the Additional Details box

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA Procedure (cont)bull Magic Method

ndash Create a new incident using your name ndash Set Subject to Software ndash Enter Please add my managed AV server

to SESA in the incident description ndash Assign the call to

EU_ITD_CLIENT_SERVICES_TIER_2 queue bull Someone from CSD will respond to your

request within three business days bull We will verify the prerequisites and

setup an installation time

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA

QuestionsQuestions

Information Technology at Emory

Client Services Update

Stu Lipkin

Information Technology at Emory

Information Technology DivisionTechnical Services

Discontinuing Support For Windows 98 and Mac OS 9

bull Mainstream support from MS ceased for these products June 30 2002 and December 31 2003 Fee-for-service extended support is available but no future development is planned for these products Microsoft will only provide critical security updates for above products posted on the Windows Update web site Hotfixes for non-critical updates will be available on request only

bull No further development and support for Mac OS 9x is indicated from Apple Mac OS 102 is the recommended platform for Apple computers

Information Technology at Emory

Information Technology DivisionTechnical Services

Windows 98 Support from Microsoft

OPERATING SYSTEM

bull Windows 98bull Windows 98 SEbull Windows ME

END OF SUPPORT

bull June 30 2002bull June 30 2002bull December 31

2003Only paid incident support is available until December 31 2006httpsupportmicrosoftcomdefaultaspxscid=fh[ln]LifeWinhttpsupportmicrosoftcomgplifean1

Information Technology at Emory

Information Technology DivisionTechnical Services

Proposed End of Supportbull We propose to end support for

Mac OS 9x Windows 98 98 SE and Windows ME on May 31st 2005

Information Technology at Emory

Information Technology DivisionTechnical Services

Impact of discontinuation of stated OS support

bull No phone or desktop support from ITD would be provided for customers running Win 98 Win 98 2nd ed ME Mac OS 9x

bull No support provided for ITD applications running on stated OS

bull Development of installers would not be written for above OS

bull Enterprise applications and continuing development would not need to consider the above OSes as included in the technical specifications

Information Technology at Emory

Information Technology DivisionTechnical Services

Impactbull There should be no immediate effect on

users There is no immediate plan to change services so that they are incompatible with these Windows and Macintosh Operating Systems

bull Users should expect that newer applications introduced in the preceding months may not operate on older systems and may require Windows 2000 or Mac OS 102 or higher

Information Technology at Emory

Information Technology DivisionTechnical Services

Proposed Communication Plan

bull present at IT Briefing January 2005bull present at Desknet in January 2005bull prepare announcement to end users mid-Februarybull post announcement in ERWheel FebruaryMarchbull email to Local-l All-emory various Learnlink

conferences (LL Demigods SCC Technology and Emory Announcements) last business day of Jan Feb Mar Apr

bull post on defined page on itemoryeduDesktop Computing

Information Technology at Emory

Oracle Names to Oracle Internet DirectoryMark Parten

Information Technology at Emory

Self-Service Vulnerability Scanning

A new service from your ITD Security Team

Information Technology at Emory

Information Technology DivisionTechnical Services

Introductionbull Utilizes the Nessus Vulnerability Scanning

Toolbull Specifically for use by System Administrators

and Local Support Personnelbull Can scan both desktop and server machinesbull Reports vulnerabilities and gives possible

solutions fixes

Information Technology at Emory

Information Technology DivisionTechnical Services

Getting Startedbull For more information on requesting the

ability to do a Self-Service Scan go to the following URL

httpitemoryedushowdoccfmdocid=4248

bull The ITD Security Team will work with System Administrators and Local Support Personnel to get them set up and scanning once a request has been received

Information Technology at Emory

Information Technology DivisionTechnical Services

OverviewNetwork Vulnerability Scanning Self-Service

Overview FAQ

ITD Security offers Network Vulnerability Scanning Self-Service using Nessus from a centralized scanning server in the DMZ To request the ability to scan your network please send the following information to the security team at SecurityTeam-Llistservemoryedu 1 Name and organization you support2 The IP address range on your network that you would like to scan3 Phone number and e-mail address4 Your network ID

We will confirm this information send a link for the latest Nessus scanning client and provide a password to use when you connect to the system

Information Technology at Emory

Information Technology DivisionTechnical Services

How tobull Use GUI to connect to the Scanning

Serverbull Use network ID and Nessus

password to authenticatebull Create scan session (which nodes

options etc)bull Run scan view results create report

Information Technology at Emory

Information Technology DivisionTechnical Services

Documentation

Can be found at

httpwwwnessusorgdocumentation

Information Technology at Emory

Information Technology DivisionTechnical Services

Self-Service Scanning

QuestionsQuestions

Information Technology at Emory

Information Technology DivisionTechnical Services

NetCom

QuestionsQuestions

  • IT Briefing Agenda 12005
  • Symantec Enterprise Security Architecture
  • Symantec Enterprise Security Architecture Presentation Outline
  • AntiVirus Spring 2005
  • Managed AV
  • Slide 6
  • SESA
  • SESA Architecture
  • Event Manager for Antivirus
  • SESA with Event Manager
  • SESA DEMO
  • SESA Requirements
  • SESA Procedure
  • SESA Procedure (cont)
  • Slide 15
  • Client Services Update
  • Discontinuing Support For Windows 98 and Mac OS 9
  • Windows 98 Support from Microsoft
  • Proposed End of Support
  • Impact of discontinuation of stated OS support
  • Impact
  • Proposed Communication Plan
  • Oracle Names to Oracle Internet Directory
  • Self-Service Vulnerability Scanning
  • Introduction
  • Getting Started
  • Overview
  • How to
  • Documentation
  • Self-Service Scanning
  • NetCom
Page 3: IT Briefing Agenda 1/20/05

Information Technology at Emory

Information Technology DivisionTechnical Services

Symantec Enterprise Security Architecture

Presentation Outlinebull Desktop Antivirusbull Managed Antivirusbull SESA bull Event Manager for AVbull SESA and Event Managerbull Diagrams and Demobull Real-world Experiences by Derek

Spransy

Information Technology at Emory

Information Technology DivisionTechnical Services

AntiVirusSpring 2005Symantec Antivirus Corporate Editionversion 9021000

Norton Antivirus for Macintosh (with ldquononagrdquo)version 903 (6)

Information Technology at Emory

Information Technology DivisionTechnical Services

Managed AV

`` `

`

bullSupport thousands of PCsbullPCs get Virus Definitions from Server andor via LiveUpdatebullEvents are logged by the Parent ServerbullQuick display of current versions which definitions are in use last scan performed and virus alertsbullCan schedule scans without user being logged inbullCan configure client settings per machine or by groupbullWith Alert Management Service (AMS) can get email when a machine gets a virusbullLacks reporting hellip

Information Technology at Emory

Information Technology DivisionTechnical Services

Managed AVbull Managed AV

ndash Campus parent server available to departmental servers for updates

ndash Virus definitions updated hourly via Intelligent Updates

ndash Investigating installing a managed facultystaff server andor student server to provide management to campus entities without a local managed AV server hellip thoughts

Information Technology at Emory

Information Technology DivisionTechnical Services

SESAbull Scalable solution that integrates

multiple Symantec Security and third party products

bull Provides granular alerting of eventsbull Query filter and sort data for

charting and reportingbull Relatively new still growing

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA Architecture

Information Technology at Emory

Information Technology DivisionTechnical Services

Event Manager for Antivirusbull SESA integration productbull Enables centralized cross-tier

logging alerting and reporting between the SESA event management system and Symantec Antivirus

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA with Event Manager

SESA Datastor

e

AV Server AV ServerConsole

SESA Manager

Oracle

bullCollector on each parent AV server passes logged data to the SESA Manager via an Agent

bullThe Manager stores the event data into the Data store

bullThe Manager uses a directory to manage the devices users and permissions

bullAccess to the Manager is through a SESA console which is java based

bullAll SESA components are Java based except the Data store and Directory (Oracle and DB2)

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA DEMO

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA Requirementsbull Prerequisites

ndash Department must be running Symantec AV Server version 9 or better

ndash Must allow Java SDK 131_09 to be installed ndash Departmental server must be win32-based (ie

Win2K XP 2003) ndash Must have a designated contact

bull ITD Responsibilities ndash Create an OU and an access account ndash Provide on-site installation assistance ndash Provide on-site training at the time of installation

Install and training take about 1 hour and does not require a server reboot

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA Procedurebull ESR Form Method

ndash Go to the Electronic Support Request (ESR) form httphelpemoryedu

ndash Login using your campus id and password ndash Select the General Emory Helpdesk ndash Select the Request Type of General Other ndash Use Please add my managed AV server to

SESA in the Additional Details box

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA Procedure (cont)bull Magic Method

ndash Create a new incident using your name ndash Set Subject to Software ndash Enter Please add my managed AV server

to SESA in the incident description ndash Assign the call to

EU_ITD_CLIENT_SERVICES_TIER_2 queue bull Someone from CSD will respond to your

request within three business days bull We will verify the prerequisites and

setup an installation time

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA

QuestionsQuestions

Information Technology at Emory

Client Services Update

Stu Lipkin

Information Technology at Emory

Information Technology DivisionTechnical Services

Discontinuing Support For Windows 98 and Mac OS 9

bull Mainstream support from MS ceased for these products June 30 2002 and December 31 2003 Fee-for-service extended support is available but no future development is planned for these products Microsoft will only provide critical security updates for above products posted on the Windows Update web site Hotfixes for non-critical updates will be available on request only

bull No further development and support for Mac OS 9x is indicated from Apple Mac OS 102 is the recommended platform for Apple computers

Information Technology at Emory

Information Technology DivisionTechnical Services

Windows 98 Support from Microsoft

OPERATING SYSTEM

bull Windows 98bull Windows 98 SEbull Windows ME

END OF SUPPORT

bull June 30 2002bull June 30 2002bull December 31

2003Only paid incident support is available until December 31 2006httpsupportmicrosoftcomdefaultaspxscid=fh[ln]LifeWinhttpsupportmicrosoftcomgplifean1

Information Technology at Emory

Information Technology DivisionTechnical Services

Proposed End of Supportbull We propose to end support for

Mac OS 9x Windows 98 98 SE and Windows ME on May 31st 2005

Information Technology at Emory

Information Technology DivisionTechnical Services

Impact of discontinuation of stated OS support

bull No phone or desktop support from ITD would be provided for customers running Win 98 Win 98 2nd ed ME Mac OS 9x

bull No support provided for ITD applications running on stated OS

bull Development of installers would not be written for above OS

bull Enterprise applications and continuing development would not need to consider the above OSes as included in the technical specifications

Information Technology at Emory

Information Technology DivisionTechnical Services

Impactbull There should be no immediate effect on

users There is no immediate plan to change services so that they are incompatible with these Windows and Macintosh Operating Systems

bull Users should expect that newer applications introduced in the preceding months may not operate on older systems and may require Windows 2000 or Mac OS 102 or higher

Information Technology at Emory

Information Technology DivisionTechnical Services

Proposed Communication Plan

bull present at IT Briefing January 2005bull present at Desknet in January 2005bull prepare announcement to end users mid-Februarybull post announcement in ERWheel FebruaryMarchbull email to Local-l All-emory various Learnlink

conferences (LL Demigods SCC Technology and Emory Announcements) last business day of Jan Feb Mar Apr

bull post on defined page on itemoryeduDesktop Computing

Information Technology at Emory

Oracle Names to Oracle Internet DirectoryMark Parten

Information Technology at Emory

Self-Service Vulnerability Scanning

A new service from your ITD Security Team

Information Technology at Emory

Information Technology DivisionTechnical Services

Introductionbull Utilizes the Nessus Vulnerability Scanning

Toolbull Specifically for use by System Administrators

and Local Support Personnelbull Can scan both desktop and server machinesbull Reports vulnerabilities and gives possible

solutions fixes

Information Technology at Emory

Information Technology DivisionTechnical Services

Getting Startedbull For more information on requesting the

ability to do a Self-Service Scan go to the following URL

httpitemoryedushowdoccfmdocid=4248

bull The ITD Security Team will work with System Administrators and Local Support Personnel to get them set up and scanning once a request has been received

Information Technology at Emory

Information Technology DivisionTechnical Services

OverviewNetwork Vulnerability Scanning Self-Service

Overview FAQ

ITD Security offers Network Vulnerability Scanning Self-Service using Nessus from a centralized scanning server in the DMZ To request the ability to scan your network please send the following information to the security team at SecurityTeam-Llistservemoryedu 1 Name and organization you support2 The IP address range on your network that you would like to scan3 Phone number and e-mail address4 Your network ID

We will confirm this information send a link for the latest Nessus scanning client and provide a password to use when you connect to the system

Information Technology at Emory

Information Technology DivisionTechnical Services

How tobull Use GUI to connect to the Scanning

Serverbull Use network ID and Nessus

password to authenticatebull Create scan session (which nodes

options etc)bull Run scan view results create report

Information Technology at Emory

Information Technology DivisionTechnical Services

Documentation

Can be found at

httpwwwnessusorgdocumentation

Information Technology at Emory

Information Technology DivisionTechnical Services

Self-Service Scanning

QuestionsQuestions

Information Technology at Emory

Information Technology DivisionTechnical Services

NetCom

QuestionsQuestions

  • IT Briefing Agenda 12005
  • Symantec Enterprise Security Architecture
  • Symantec Enterprise Security Architecture Presentation Outline
  • AntiVirus Spring 2005
  • Managed AV
  • Slide 6
  • SESA
  • SESA Architecture
  • Event Manager for Antivirus
  • SESA with Event Manager
  • SESA DEMO
  • SESA Requirements
  • SESA Procedure
  • SESA Procedure (cont)
  • Slide 15
  • Client Services Update
  • Discontinuing Support For Windows 98 and Mac OS 9
  • Windows 98 Support from Microsoft
  • Proposed End of Support
  • Impact of discontinuation of stated OS support
  • Impact
  • Proposed Communication Plan
  • Oracle Names to Oracle Internet Directory
  • Self-Service Vulnerability Scanning
  • Introduction
  • Getting Started
  • Overview
  • How to
  • Documentation
  • Self-Service Scanning
  • NetCom
Page 4: IT Briefing Agenda 1/20/05

Information Technology at Emory

Information Technology DivisionTechnical Services

AntiVirusSpring 2005Symantec Antivirus Corporate Editionversion 9021000

Norton Antivirus for Macintosh (with ldquononagrdquo)version 903 (6)

Information Technology at Emory

Information Technology DivisionTechnical Services

Managed AV

`` `

`

bullSupport thousands of PCsbullPCs get Virus Definitions from Server andor via LiveUpdatebullEvents are logged by the Parent ServerbullQuick display of current versions which definitions are in use last scan performed and virus alertsbullCan schedule scans without user being logged inbullCan configure client settings per machine or by groupbullWith Alert Management Service (AMS) can get email when a machine gets a virusbullLacks reporting hellip

Information Technology at Emory

Information Technology DivisionTechnical Services

Managed AVbull Managed AV

ndash Campus parent server available to departmental servers for updates

ndash Virus definitions updated hourly via Intelligent Updates

ndash Investigating installing a managed facultystaff server andor student server to provide management to campus entities without a local managed AV server hellip thoughts

Information Technology at Emory

Information Technology DivisionTechnical Services

SESAbull Scalable solution that integrates

multiple Symantec Security and third party products

bull Provides granular alerting of eventsbull Query filter and sort data for

charting and reportingbull Relatively new still growing

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA Architecture

Information Technology at Emory

Information Technology DivisionTechnical Services

Event Manager for Antivirusbull SESA integration productbull Enables centralized cross-tier

logging alerting and reporting between the SESA event management system and Symantec Antivirus

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA with Event Manager

SESA Datastor

e

AV Server AV ServerConsole

SESA Manager

Oracle

bullCollector on each parent AV server passes logged data to the SESA Manager via an Agent

bullThe Manager stores the event data into the Data store

bullThe Manager uses a directory to manage the devices users and permissions

bullAccess to the Manager is through a SESA console which is java based

bullAll SESA components are Java based except the Data store and Directory (Oracle and DB2)

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA DEMO

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA Requirementsbull Prerequisites

ndash Department must be running Symantec AV Server version 9 or better

ndash Must allow Java SDK 131_09 to be installed ndash Departmental server must be win32-based (ie

Win2K XP 2003) ndash Must have a designated contact

bull ITD Responsibilities ndash Create an OU and an access account ndash Provide on-site installation assistance ndash Provide on-site training at the time of installation

Install and training take about 1 hour and does not require a server reboot

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA Procedurebull ESR Form Method

ndash Go to the Electronic Support Request (ESR) form httphelpemoryedu

ndash Login using your campus id and password ndash Select the General Emory Helpdesk ndash Select the Request Type of General Other ndash Use Please add my managed AV server to

SESA in the Additional Details box

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA Procedure (cont)bull Magic Method

ndash Create a new incident using your name ndash Set Subject to Software ndash Enter Please add my managed AV server

to SESA in the incident description ndash Assign the call to

EU_ITD_CLIENT_SERVICES_TIER_2 queue bull Someone from CSD will respond to your

request within three business days bull We will verify the prerequisites and

setup an installation time

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA

QuestionsQuestions

Information Technology at Emory

Client Services Update

Stu Lipkin

Information Technology at Emory

Information Technology DivisionTechnical Services

Discontinuing Support For Windows 98 and Mac OS 9

bull Mainstream support from MS ceased for these products June 30 2002 and December 31 2003 Fee-for-service extended support is available but no future development is planned for these products Microsoft will only provide critical security updates for above products posted on the Windows Update web site Hotfixes for non-critical updates will be available on request only

bull No further development and support for Mac OS 9x is indicated from Apple Mac OS 102 is the recommended platform for Apple computers

Information Technology at Emory

Information Technology DivisionTechnical Services

Windows 98 Support from Microsoft

OPERATING SYSTEM

bull Windows 98bull Windows 98 SEbull Windows ME

END OF SUPPORT

bull June 30 2002bull June 30 2002bull December 31

2003Only paid incident support is available until December 31 2006httpsupportmicrosoftcomdefaultaspxscid=fh[ln]LifeWinhttpsupportmicrosoftcomgplifean1

Information Technology at Emory

Information Technology DivisionTechnical Services

Proposed End of Supportbull We propose to end support for

Mac OS 9x Windows 98 98 SE and Windows ME on May 31st 2005

Information Technology at Emory

Information Technology DivisionTechnical Services

Impact of discontinuation of stated OS support

bull No phone or desktop support from ITD would be provided for customers running Win 98 Win 98 2nd ed ME Mac OS 9x

bull No support provided for ITD applications running on stated OS

bull Development of installers would not be written for above OS

bull Enterprise applications and continuing development would not need to consider the above OSes as included in the technical specifications

Information Technology at Emory

Information Technology DivisionTechnical Services

Impactbull There should be no immediate effect on

users There is no immediate plan to change services so that they are incompatible with these Windows and Macintosh Operating Systems

bull Users should expect that newer applications introduced in the preceding months may not operate on older systems and may require Windows 2000 or Mac OS 102 or higher

Information Technology at Emory

Information Technology DivisionTechnical Services

Proposed Communication Plan

bull present at IT Briefing January 2005bull present at Desknet in January 2005bull prepare announcement to end users mid-Februarybull post announcement in ERWheel FebruaryMarchbull email to Local-l All-emory various Learnlink

conferences (LL Demigods SCC Technology and Emory Announcements) last business day of Jan Feb Mar Apr

bull post on defined page on itemoryeduDesktop Computing

Information Technology at Emory

Oracle Names to Oracle Internet DirectoryMark Parten

Information Technology at Emory

Self-Service Vulnerability Scanning

A new service from your ITD Security Team

Information Technology at Emory

Information Technology DivisionTechnical Services

Introductionbull Utilizes the Nessus Vulnerability Scanning

Toolbull Specifically for use by System Administrators

and Local Support Personnelbull Can scan both desktop and server machinesbull Reports vulnerabilities and gives possible

solutions fixes

Information Technology at Emory

Information Technology DivisionTechnical Services

Getting Startedbull For more information on requesting the

ability to do a Self-Service Scan go to the following URL

httpitemoryedushowdoccfmdocid=4248

bull The ITD Security Team will work with System Administrators and Local Support Personnel to get them set up and scanning once a request has been received

Information Technology at Emory

Information Technology DivisionTechnical Services

OverviewNetwork Vulnerability Scanning Self-Service

Overview FAQ

ITD Security offers Network Vulnerability Scanning Self-Service using Nessus from a centralized scanning server in the DMZ To request the ability to scan your network please send the following information to the security team at SecurityTeam-Llistservemoryedu 1 Name and organization you support2 The IP address range on your network that you would like to scan3 Phone number and e-mail address4 Your network ID

We will confirm this information send a link for the latest Nessus scanning client and provide a password to use when you connect to the system

Information Technology at Emory

Information Technology DivisionTechnical Services

How tobull Use GUI to connect to the Scanning

Serverbull Use network ID and Nessus

password to authenticatebull Create scan session (which nodes

options etc)bull Run scan view results create report

Information Technology at Emory

Information Technology DivisionTechnical Services

Documentation

Can be found at

httpwwwnessusorgdocumentation

Information Technology at Emory

Information Technology DivisionTechnical Services

Self-Service Scanning

QuestionsQuestions

Information Technology at Emory

Information Technology DivisionTechnical Services

NetCom

QuestionsQuestions

  • IT Briefing Agenda 12005
  • Symantec Enterprise Security Architecture
  • Symantec Enterprise Security Architecture Presentation Outline
  • AntiVirus Spring 2005
  • Managed AV
  • Slide 6
  • SESA
  • SESA Architecture
  • Event Manager for Antivirus
  • SESA with Event Manager
  • SESA DEMO
  • SESA Requirements
  • SESA Procedure
  • SESA Procedure (cont)
  • Slide 15
  • Client Services Update
  • Discontinuing Support For Windows 98 and Mac OS 9
  • Windows 98 Support from Microsoft
  • Proposed End of Support
  • Impact of discontinuation of stated OS support
  • Impact
  • Proposed Communication Plan
  • Oracle Names to Oracle Internet Directory
  • Self-Service Vulnerability Scanning
  • Introduction
  • Getting Started
  • Overview
  • How to
  • Documentation
  • Self-Service Scanning
  • NetCom
Page 5: IT Briefing Agenda 1/20/05

Information Technology at Emory

Information Technology DivisionTechnical Services

Managed AV

`` `

`

bullSupport thousands of PCsbullPCs get Virus Definitions from Server andor via LiveUpdatebullEvents are logged by the Parent ServerbullQuick display of current versions which definitions are in use last scan performed and virus alertsbullCan schedule scans without user being logged inbullCan configure client settings per machine or by groupbullWith Alert Management Service (AMS) can get email when a machine gets a virusbullLacks reporting hellip

Information Technology at Emory

Information Technology DivisionTechnical Services

Managed AVbull Managed AV

ndash Campus parent server available to departmental servers for updates

ndash Virus definitions updated hourly via Intelligent Updates

ndash Investigating installing a managed facultystaff server andor student server to provide management to campus entities without a local managed AV server hellip thoughts

Information Technology at Emory

Information Technology DivisionTechnical Services

SESAbull Scalable solution that integrates

multiple Symantec Security and third party products

bull Provides granular alerting of eventsbull Query filter and sort data for

charting and reportingbull Relatively new still growing

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA Architecture

Information Technology at Emory

Information Technology DivisionTechnical Services

Event Manager for Antivirusbull SESA integration productbull Enables centralized cross-tier

logging alerting and reporting between the SESA event management system and Symantec Antivirus

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA with Event Manager

SESA Datastor

e

AV Server AV ServerConsole

SESA Manager

Oracle

bullCollector on each parent AV server passes logged data to the SESA Manager via an Agent

bullThe Manager stores the event data into the Data store

bullThe Manager uses a directory to manage the devices users and permissions

bullAccess to the Manager is through a SESA console which is java based

bullAll SESA components are Java based except the Data store and Directory (Oracle and DB2)

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA DEMO

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA Requirementsbull Prerequisites

ndash Department must be running Symantec AV Server version 9 or better

ndash Must allow Java SDK 131_09 to be installed ndash Departmental server must be win32-based (ie

Win2K XP 2003) ndash Must have a designated contact

bull ITD Responsibilities ndash Create an OU and an access account ndash Provide on-site installation assistance ndash Provide on-site training at the time of installation

Install and training take about 1 hour and does not require a server reboot

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA Procedurebull ESR Form Method

ndash Go to the Electronic Support Request (ESR) form httphelpemoryedu

ndash Login using your campus id and password ndash Select the General Emory Helpdesk ndash Select the Request Type of General Other ndash Use Please add my managed AV server to

SESA in the Additional Details box

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA Procedure (cont)bull Magic Method

ndash Create a new incident using your name ndash Set Subject to Software ndash Enter Please add my managed AV server

to SESA in the incident description ndash Assign the call to

EU_ITD_CLIENT_SERVICES_TIER_2 queue bull Someone from CSD will respond to your

request within three business days bull We will verify the prerequisites and

setup an installation time

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA

QuestionsQuestions

Information Technology at Emory

Client Services Update

Stu Lipkin

Information Technology at Emory

Information Technology DivisionTechnical Services

Discontinuing Support For Windows 98 and Mac OS 9

bull Mainstream support from MS ceased for these products June 30 2002 and December 31 2003 Fee-for-service extended support is available but no future development is planned for these products Microsoft will only provide critical security updates for above products posted on the Windows Update web site Hotfixes for non-critical updates will be available on request only

bull No further development and support for Mac OS 9x is indicated from Apple Mac OS 102 is the recommended platform for Apple computers

Information Technology at Emory

Information Technology DivisionTechnical Services

Windows 98 Support from Microsoft

OPERATING SYSTEM

bull Windows 98bull Windows 98 SEbull Windows ME

END OF SUPPORT

bull June 30 2002bull June 30 2002bull December 31

2003Only paid incident support is available until December 31 2006httpsupportmicrosoftcomdefaultaspxscid=fh[ln]LifeWinhttpsupportmicrosoftcomgplifean1

Information Technology at Emory

Information Technology DivisionTechnical Services

Proposed End of Supportbull We propose to end support for

Mac OS 9x Windows 98 98 SE and Windows ME on May 31st 2005

Information Technology at Emory

Information Technology DivisionTechnical Services

Impact of discontinuation of stated OS support

bull No phone or desktop support from ITD would be provided for customers running Win 98 Win 98 2nd ed ME Mac OS 9x

bull No support provided for ITD applications running on stated OS

bull Development of installers would not be written for above OS

bull Enterprise applications and continuing development would not need to consider the above OSes as included in the technical specifications

Information Technology at Emory

Information Technology DivisionTechnical Services

Impactbull There should be no immediate effect on

users There is no immediate plan to change services so that they are incompatible with these Windows and Macintosh Operating Systems

bull Users should expect that newer applications introduced in the preceding months may not operate on older systems and may require Windows 2000 or Mac OS 102 or higher

Information Technology at Emory

Information Technology DivisionTechnical Services

Proposed Communication Plan

bull present at IT Briefing January 2005bull present at Desknet in January 2005bull prepare announcement to end users mid-Februarybull post announcement in ERWheel FebruaryMarchbull email to Local-l All-emory various Learnlink

conferences (LL Demigods SCC Technology and Emory Announcements) last business day of Jan Feb Mar Apr

bull post on defined page on itemoryeduDesktop Computing

Information Technology at Emory

Oracle Names to Oracle Internet DirectoryMark Parten

Information Technology at Emory

Self-Service Vulnerability Scanning

A new service from your ITD Security Team

Information Technology at Emory

Information Technology DivisionTechnical Services

Introductionbull Utilizes the Nessus Vulnerability Scanning

Toolbull Specifically for use by System Administrators

and Local Support Personnelbull Can scan both desktop and server machinesbull Reports vulnerabilities and gives possible

solutions fixes

Information Technology at Emory

Information Technology DivisionTechnical Services

Getting Startedbull For more information on requesting the

ability to do a Self-Service Scan go to the following URL

httpitemoryedushowdoccfmdocid=4248

bull The ITD Security Team will work with System Administrators and Local Support Personnel to get them set up and scanning once a request has been received

Information Technology at Emory

Information Technology DivisionTechnical Services

OverviewNetwork Vulnerability Scanning Self-Service

Overview FAQ

ITD Security offers Network Vulnerability Scanning Self-Service using Nessus from a centralized scanning server in the DMZ To request the ability to scan your network please send the following information to the security team at SecurityTeam-Llistservemoryedu 1 Name and organization you support2 The IP address range on your network that you would like to scan3 Phone number and e-mail address4 Your network ID

We will confirm this information send a link for the latest Nessus scanning client and provide a password to use when you connect to the system

Information Technology at Emory

Information Technology DivisionTechnical Services

How tobull Use GUI to connect to the Scanning

Serverbull Use network ID and Nessus

password to authenticatebull Create scan session (which nodes

options etc)bull Run scan view results create report

Information Technology at Emory

Information Technology DivisionTechnical Services

Documentation

Can be found at

httpwwwnessusorgdocumentation

Information Technology at Emory

Information Technology DivisionTechnical Services

Self-Service Scanning

QuestionsQuestions

Information Technology at Emory

Information Technology DivisionTechnical Services

NetCom

QuestionsQuestions

  • IT Briefing Agenda 12005
  • Symantec Enterprise Security Architecture
  • Symantec Enterprise Security Architecture Presentation Outline
  • AntiVirus Spring 2005
  • Managed AV
  • Slide 6
  • SESA
  • SESA Architecture
  • Event Manager for Antivirus
  • SESA with Event Manager
  • SESA DEMO
  • SESA Requirements
  • SESA Procedure
  • SESA Procedure (cont)
  • Slide 15
  • Client Services Update
  • Discontinuing Support For Windows 98 and Mac OS 9
  • Windows 98 Support from Microsoft
  • Proposed End of Support
  • Impact of discontinuation of stated OS support
  • Impact
  • Proposed Communication Plan
  • Oracle Names to Oracle Internet Directory
  • Self-Service Vulnerability Scanning
  • Introduction
  • Getting Started
  • Overview
  • How to
  • Documentation
  • Self-Service Scanning
  • NetCom
Page 6: IT Briefing Agenda 1/20/05

Information Technology at Emory

Information Technology DivisionTechnical Services

Managed AVbull Managed AV

ndash Campus parent server available to departmental servers for updates

ndash Virus definitions updated hourly via Intelligent Updates

ndash Investigating installing a managed facultystaff server andor student server to provide management to campus entities without a local managed AV server hellip thoughts

Information Technology at Emory

Information Technology DivisionTechnical Services

SESAbull Scalable solution that integrates

multiple Symantec Security and third party products

bull Provides granular alerting of eventsbull Query filter and sort data for

charting and reportingbull Relatively new still growing

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA Architecture

Information Technology at Emory

Information Technology DivisionTechnical Services

Event Manager for Antivirusbull SESA integration productbull Enables centralized cross-tier

logging alerting and reporting between the SESA event management system and Symantec Antivirus

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA with Event Manager

SESA Datastor

e

AV Server AV ServerConsole

SESA Manager

Oracle

bullCollector on each parent AV server passes logged data to the SESA Manager via an Agent

bullThe Manager stores the event data into the Data store

bullThe Manager uses a directory to manage the devices users and permissions

bullAccess to the Manager is through a SESA console which is java based

bullAll SESA components are Java based except the Data store and Directory (Oracle and DB2)

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA DEMO

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA Requirementsbull Prerequisites

ndash Department must be running Symantec AV Server version 9 or better

ndash Must allow Java SDK 131_09 to be installed ndash Departmental server must be win32-based (ie

Win2K XP 2003) ndash Must have a designated contact

bull ITD Responsibilities ndash Create an OU and an access account ndash Provide on-site installation assistance ndash Provide on-site training at the time of installation

Install and training take about 1 hour and does not require a server reboot

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA Procedurebull ESR Form Method

ndash Go to the Electronic Support Request (ESR) form httphelpemoryedu

ndash Login using your campus id and password ndash Select the General Emory Helpdesk ndash Select the Request Type of General Other ndash Use Please add my managed AV server to

SESA in the Additional Details box

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA Procedure (cont)bull Magic Method

ndash Create a new incident using your name ndash Set Subject to Software ndash Enter Please add my managed AV server

to SESA in the incident description ndash Assign the call to

EU_ITD_CLIENT_SERVICES_TIER_2 queue bull Someone from CSD will respond to your

request within three business days bull We will verify the prerequisites and

setup an installation time

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA

QuestionsQuestions

Information Technology at Emory

Client Services Update

Stu Lipkin

Information Technology at Emory

Information Technology DivisionTechnical Services

Discontinuing Support For Windows 98 and Mac OS 9

bull Mainstream support from MS ceased for these products June 30 2002 and December 31 2003 Fee-for-service extended support is available but no future development is planned for these products Microsoft will only provide critical security updates for above products posted on the Windows Update web site Hotfixes for non-critical updates will be available on request only

bull No further development and support for Mac OS 9x is indicated from Apple Mac OS 102 is the recommended platform for Apple computers

Information Technology at Emory

Information Technology DivisionTechnical Services

Windows 98 Support from Microsoft

OPERATING SYSTEM

bull Windows 98bull Windows 98 SEbull Windows ME

END OF SUPPORT

bull June 30 2002bull June 30 2002bull December 31

2003Only paid incident support is available until December 31 2006httpsupportmicrosoftcomdefaultaspxscid=fh[ln]LifeWinhttpsupportmicrosoftcomgplifean1

Information Technology at Emory

Information Technology DivisionTechnical Services

Proposed End of Supportbull We propose to end support for

Mac OS 9x Windows 98 98 SE and Windows ME on May 31st 2005

Information Technology at Emory

Information Technology DivisionTechnical Services

Impact of discontinuation of stated OS support

bull No phone or desktop support from ITD would be provided for customers running Win 98 Win 98 2nd ed ME Mac OS 9x

bull No support provided for ITD applications running on stated OS

bull Development of installers would not be written for above OS

bull Enterprise applications and continuing development would not need to consider the above OSes as included in the technical specifications

Information Technology at Emory

Information Technology DivisionTechnical Services

Impactbull There should be no immediate effect on

users There is no immediate plan to change services so that they are incompatible with these Windows and Macintosh Operating Systems

bull Users should expect that newer applications introduced in the preceding months may not operate on older systems and may require Windows 2000 or Mac OS 102 or higher

Information Technology at Emory

Information Technology DivisionTechnical Services

Proposed Communication Plan

bull present at IT Briefing January 2005bull present at Desknet in January 2005bull prepare announcement to end users mid-Februarybull post announcement in ERWheel FebruaryMarchbull email to Local-l All-emory various Learnlink

conferences (LL Demigods SCC Technology and Emory Announcements) last business day of Jan Feb Mar Apr

bull post on defined page on itemoryeduDesktop Computing

Information Technology at Emory

Oracle Names to Oracle Internet DirectoryMark Parten

Information Technology at Emory

Self-Service Vulnerability Scanning

A new service from your ITD Security Team

Information Technology at Emory

Information Technology DivisionTechnical Services

Introductionbull Utilizes the Nessus Vulnerability Scanning

Toolbull Specifically for use by System Administrators

and Local Support Personnelbull Can scan both desktop and server machinesbull Reports vulnerabilities and gives possible

solutions fixes

Information Technology at Emory

Information Technology DivisionTechnical Services

Getting Startedbull For more information on requesting the

ability to do a Self-Service Scan go to the following URL

httpitemoryedushowdoccfmdocid=4248

bull The ITD Security Team will work with System Administrators and Local Support Personnel to get them set up and scanning once a request has been received

Information Technology at Emory

Information Technology DivisionTechnical Services

OverviewNetwork Vulnerability Scanning Self-Service

Overview FAQ

ITD Security offers Network Vulnerability Scanning Self-Service using Nessus from a centralized scanning server in the DMZ To request the ability to scan your network please send the following information to the security team at SecurityTeam-Llistservemoryedu 1 Name and organization you support2 The IP address range on your network that you would like to scan3 Phone number and e-mail address4 Your network ID

We will confirm this information send a link for the latest Nessus scanning client and provide a password to use when you connect to the system

Information Technology at Emory

Information Technology DivisionTechnical Services

How tobull Use GUI to connect to the Scanning

Serverbull Use network ID and Nessus

password to authenticatebull Create scan session (which nodes

options etc)bull Run scan view results create report

Information Technology at Emory

Information Technology DivisionTechnical Services

Documentation

Can be found at

httpwwwnessusorgdocumentation

Information Technology at Emory

Information Technology DivisionTechnical Services

Self-Service Scanning

QuestionsQuestions

Information Technology at Emory

Information Technology DivisionTechnical Services

NetCom

QuestionsQuestions

  • IT Briefing Agenda 12005
  • Symantec Enterprise Security Architecture
  • Symantec Enterprise Security Architecture Presentation Outline
  • AntiVirus Spring 2005
  • Managed AV
  • Slide 6
  • SESA
  • SESA Architecture
  • Event Manager for Antivirus
  • SESA with Event Manager
  • SESA DEMO
  • SESA Requirements
  • SESA Procedure
  • SESA Procedure (cont)
  • Slide 15
  • Client Services Update
  • Discontinuing Support For Windows 98 and Mac OS 9
  • Windows 98 Support from Microsoft
  • Proposed End of Support
  • Impact of discontinuation of stated OS support
  • Impact
  • Proposed Communication Plan
  • Oracle Names to Oracle Internet Directory
  • Self-Service Vulnerability Scanning
  • Introduction
  • Getting Started
  • Overview
  • How to
  • Documentation
  • Self-Service Scanning
  • NetCom
Page 7: IT Briefing Agenda 1/20/05

Information Technology at Emory

Information Technology DivisionTechnical Services

SESAbull Scalable solution that integrates

multiple Symantec Security and third party products

bull Provides granular alerting of eventsbull Query filter and sort data for

charting and reportingbull Relatively new still growing

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA Architecture

Information Technology at Emory

Information Technology DivisionTechnical Services

Event Manager for Antivirusbull SESA integration productbull Enables centralized cross-tier

logging alerting and reporting between the SESA event management system and Symantec Antivirus

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA with Event Manager

SESA Datastor

e

AV Server AV ServerConsole

SESA Manager

Oracle

bullCollector on each parent AV server passes logged data to the SESA Manager via an Agent

bullThe Manager stores the event data into the Data store

bullThe Manager uses a directory to manage the devices users and permissions

bullAccess to the Manager is through a SESA console which is java based

bullAll SESA components are Java based except the Data store and Directory (Oracle and DB2)

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA DEMO

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA Requirementsbull Prerequisites

ndash Department must be running Symantec AV Server version 9 or better

ndash Must allow Java SDK 131_09 to be installed ndash Departmental server must be win32-based (ie

Win2K XP 2003) ndash Must have a designated contact

bull ITD Responsibilities ndash Create an OU and an access account ndash Provide on-site installation assistance ndash Provide on-site training at the time of installation

Install and training take about 1 hour and does not require a server reboot

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA Procedurebull ESR Form Method

ndash Go to the Electronic Support Request (ESR) form httphelpemoryedu

ndash Login using your campus id and password ndash Select the General Emory Helpdesk ndash Select the Request Type of General Other ndash Use Please add my managed AV server to

SESA in the Additional Details box

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA Procedure (cont)bull Magic Method

ndash Create a new incident using your name ndash Set Subject to Software ndash Enter Please add my managed AV server

to SESA in the incident description ndash Assign the call to

EU_ITD_CLIENT_SERVICES_TIER_2 queue bull Someone from CSD will respond to your

request within three business days bull We will verify the prerequisites and

setup an installation time

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA

QuestionsQuestions

Information Technology at Emory

Client Services Update

Stu Lipkin

Information Technology at Emory

Information Technology DivisionTechnical Services

Discontinuing Support For Windows 98 and Mac OS 9

bull Mainstream support from MS ceased for these products June 30 2002 and December 31 2003 Fee-for-service extended support is available but no future development is planned for these products Microsoft will only provide critical security updates for above products posted on the Windows Update web site Hotfixes for non-critical updates will be available on request only

bull No further development and support for Mac OS 9x is indicated from Apple Mac OS 102 is the recommended platform for Apple computers

Information Technology at Emory

Information Technology DivisionTechnical Services

Windows 98 Support from Microsoft

OPERATING SYSTEM

bull Windows 98bull Windows 98 SEbull Windows ME

END OF SUPPORT

bull June 30 2002bull June 30 2002bull December 31

2003Only paid incident support is available until December 31 2006httpsupportmicrosoftcomdefaultaspxscid=fh[ln]LifeWinhttpsupportmicrosoftcomgplifean1

Information Technology at Emory

Information Technology DivisionTechnical Services

Proposed End of Supportbull We propose to end support for

Mac OS 9x Windows 98 98 SE and Windows ME on May 31st 2005

Information Technology at Emory

Information Technology DivisionTechnical Services

Impact of discontinuation of stated OS support

bull No phone or desktop support from ITD would be provided for customers running Win 98 Win 98 2nd ed ME Mac OS 9x

bull No support provided for ITD applications running on stated OS

bull Development of installers would not be written for above OS

bull Enterprise applications and continuing development would not need to consider the above OSes as included in the technical specifications

Information Technology at Emory

Information Technology DivisionTechnical Services

Impactbull There should be no immediate effect on

users There is no immediate plan to change services so that they are incompatible with these Windows and Macintosh Operating Systems

bull Users should expect that newer applications introduced in the preceding months may not operate on older systems and may require Windows 2000 or Mac OS 102 or higher

Information Technology at Emory

Information Technology DivisionTechnical Services

Proposed Communication Plan

bull present at IT Briefing January 2005bull present at Desknet in January 2005bull prepare announcement to end users mid-Februarybull post announcement in ERWheel FebruaryMarchbull email to Local-l All-emory various Learnlink

conferences (LL Demigods SCC Technology and Emory Announcements) last business day of Jan Feb Mar Apr

bull post on defined page on itemoryeduDesktop Computing

Information Technology at Emory

Oracle Names to Oracle Internet DirectoryMark Parten

Information Technology at Emory

Self-Service Vulnerability Scanning

A new service from your ITD Security Team

Information Technology at Emory

Information Technology DivisionTechnical Services

Introductionbull Utilizes the Nessus Vulnerability Scanning

Toolbull Specifically for use by System Administrators

and Local Support Personnelbull Can scan both desktop and server machinesbull Reports vulnerabilities and gives possible

solutions fixes

Information Technology at Emory

Information Technology DivisionTechnical Services

Getting Startedbull For more information on requesting the

ability to do a Self-Service Scan go to the following URL

httpitemoryedushowdoccfmdocid=4248

bull The ITD Security Team will work with System Administrators and Local Support Personnel to get them set up and scanning once a request has been received

Information Technology at Emory

Information Technology DivisionTechnical Services

OverviewNetwork Vulnerability Scanning Self-Service

Overview FAQ

ITD Security offers Network Vulnerability Scanning Self-Service using Nessus from a centralized scanning server in the DMZ To request the ability to scan your network please send the following information to the security team at SecurityTeam-Llistservemoryedu 1 Name and organization you support2 The IP address range on your network that you would like to scan3 Phone number and e-mail address4 Your network ID

We will confirm this information send a link for the latest Nessus scanning client and provide a password to use when you connect to the system

Information Technology at Emory

Information Technology DivisionTechnical Services

How tobull Use GUI to connect to the Scanning

Serverbull Use network ID and Nessus

password to authenticatebull Create scan session (which nodes

options etc)bull Run scan view results create report

Information Technology at Emory

Information Technology DivisionTechnical Services

Documentation

Can be found at

httpwwwnessusorgdocumentation

Information Technology at Emory

Information Technology DivisionTechnical Services

Self-Service Scanning

QuestionsQuestions

Information Technology at Emory

Information Technology DivisionTechnical Services

NetCom

QuestionsQuestions

  • IT Briefing Agenda 12005
  • Symantec Enterprise Security Architecture
  • Symantec Enterprise Security Architecture Presentation Outline
  • AntiVirus Spring 2005
  • Managed AV
  • Slide 6
  • SESA
  • SESA Architecture
  • Event Manager for Antivirus
  • SESA with Event Manager
  • SESA DEMO
  • SESA Requirements
  • SESA Procedure
  • SESA Procedure (cont)
  • Slide 15
  • Client Services Update
  • Discontinuing Support For Windows 98 and Mac OS 9
  • Windows 98 Support from Microsoft
  • Proposed End of Support
  • Impact of discontinuation of stated OS support
  • Impact
  • Proposed Communication Plan
  • Oracle Names to Oracle Internet Directory
  • Self-Service Vulnerability Scanning
  • Introduction
  • Getting Started
  • Overview
  • How to
  • Documentation
  • Self-Service Scanning
  • NetCom
Page 8: IT Briefing Agenda 1/20/05

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA Architecture

Information Technology at Emory

Information Technology DivisionTechnical Services

Event Manager for Antivirusbull SESA integration productbull Enables centralized cross-tier

logging alerting and reporting between the SESA event management system and Symantec Antivirus

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA with Event Manager

SESA Datastor

e

AV Server AV ServerConsole

SESA Manager

Oracle

bullCollector on each parent AV server passes logged data to the SESA Manager via an Agent

bullThe Manager stores the event data into the Data store

bullThe Manager uses a directory to manage the devices users and permissions

bullAccess to the Manager is through a SESA console which is java based

bullAll SESA components are Java based except the Data store and Directory (Oracle and DB2)

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA DEMO

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA Requirementsbull Prerequisites

ndash Department must be running Symantec AV Server version 9 or better

ndash Must allow Java SDK 131_09 to be installed ndash Departmental server must be win32-based (ie

Win2K XP 2003) ndash Must have a designated contact

bull ITD Responsibilities ndash Create an OU and an access account ndash Provide on-site installation assistance ndash Provide on-site training at the time of installation

Install and training take about 1 hour and does not require a server reboot

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA Procedurebull ESR Form Method

ndash Go to the Electronic Support Request (ESR) form httphelpemoryedu

ndash Login using your campus id and password ndash Select the General Emory Helpdesk ndash Select the Request Type of General Other ndash Use Please add my managed AV server to

SESA in the Additional Details box

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA Procedure (cont)bull Magic Method

ndash Create a new incident using your name ndash Set Subject to Software ndash Enter Please add my managed AV server

to SESA in the incident description ndash Assign the call to

EU_ITD_CLIENT_SERVICES_TIER_2 queue bull Someone from CSD will respond to your

request within three business days bull We will verify the prerequisites and

setup an installation time

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA

QuestionsQuestions

Information Technology at Emory

Client Services Update

Stu Lipkin

Information Technology at Emory

Information Technology DivisionTechnical Services

Discontinuing Support For Windows 98 and Mac OS 9

bull Mainstream support from MS ceased for these products June 30 2002 and December 31 2003 Fee-for-service extended support is available but no future development is planned for these products Microsoft will only provide critical security updates for above products posted on the Windows Update web site Hotfixes for non-critical updates will be available on request only

bull No further development and support for Mac OS 9x is indicated from Apple Mac OS 102 is the recommended platform for Apple computers

Information Technology at Emory

Information Technology DivisionTechnical Services

Windows 98 Support from Microsoft

OPERATING SYSTEM

bull Windows 98bull Windows 98 SEbull Windows ME

END OF SUPPORT

bull June 30 2002bull June 30 2002bull December 31

2003Only paid incident support is available until December 31 2006httpsupportmicrosoftcomdefaultaspxscid=fh[ln]LifeWinhttpsupportmicrosoftcomgplifean1

Information Technology at Emory

Information Technology DivisionTechnical Services

Proposed End of Supportbull We propose to end support for

Mac OS 9x Windows 98 98 SE and Windows ME on May 31st 2005

Information Technology at Emory

Information Technology DivisionTechnical Services

Impact of discontinuation of stated OS support

bull No phone or desktop support from ITD would be provided for customers running Win 98 Win 98 2nd ed ME Mac OS 9x

bull No support provided for ITD applications running on stated OS

bull Development of installers would not be written for above OS

bull Enterprise applications and continuing development would not need to consider the above OSes as included in the technical specifications

Information Technology at Emory

Information Technology DivisionTechnical Services

Impactbull There should be no immediate effect on

users There is no immediate plan to change services so that they are incompatible with these Windows and Macintosh Operating Systems

bull Users should expect that newer applications introduced in the preceding months may not operate on older systems and may require Windows 2000 or Mac OS 102 or higher

Information Technology at Emory

Information Technology DivisionTechnical Services

Proposed Communication Plan

bull present at IT Briefing January 2005bull present at Desknet in January 2005bull prepare announcement to end users mid-Februarybull post announcement in ERWheel FebruaryMarchbull email to Local-l All-emory various Learnlink

conferences (LL Demigods SCC Technology and Emory Announcements) last business day of Jan Feb Mar Apr

bull post on defined page on itemoryeduDesktop Computing

Information Technology at Emory

Oracle Names to Oracle Internet DirectoryMark Parten

Information Technology at Emory

Self-Service Vulnerability Scanning

A new service from your ITD Security Team

Information Technology at Emory

Information Technology DivisionTechnical Services

Introductionbull Utilizes the Nessus Vulnerability Scanning

Toolbull Specifically for use by System Administrators

and Local Support Personnelbull Can scan both desktop and server machinesbull Reports vulnerabilities and gives possible

solutions fixes

Information Technology at Emory

Information Technology DivisionTechnical Services

Getting Startedbull For more information on requesting the

ability to do a Self-Service Scan go to the following URL

httpitemoryedushowdoccfmdocid=4248

bull The ITD Security Team will work with System Administrators and Local Support Personnel to get them set up and scanning once a request has been received

Information Technology at Emory

Information Technology DivisionTechnical Services

OverviewNetwork Vulnerability Scanning Self-Service

Overview FAQ

ITD Security offers Network Vulnerability Scanning Self-Service using Nessus from a centralized scanning server in the DMZ To request the ability to scan your network please send the following information to the security team at SecurityTeam-Llistservemoryedu 1 Name and organization you support2 The IP address range on your network that you would like to scan3 Phone number and e-mail address4 Your network ID

We will confirm this information send a link for the latest Nessus scanning client and provide a password to use when you connect to the system

Information Technology at Emory

Information Technology DivisionTechnical Services

How tobull Use GUI to connect to the Scanning

Serverbull Use network ID and Nessus

password to authenticatebull Create scan session (which nodes

options etc)bull Run scan view results create report

Information Technology at Emory

Information Technology DivisionTechnical Services

Documentation

Can be found at

httpwwwnessusorgdocumentation

Information Technology at Emory

Information Technology DivisionTechnical Services

Self-Service Scanning

QuestionsQuestions

Information Technology at Emory

Information Technology DivisionTechnical Services

NetCom

QuestionsQuestions

  • IT Briefing Agenda 12005
  • Symantec Enterprise Security Architecture
  • Symantec Enterprise Security Architecture Presentation Outline
  • AntiVirus Spring 2005
  • Managed AV
  • Slide 6
  • SESA
  • SESA Architecture
  • Event Manager for Antivirus
  • SESA with Event Manager
  • SESA DEMO
  • SESA Requirements
  • SESA Procedure
  • SESA Procedure (cont)
  • Slide 15
  • Client Services Update
  • Discontinuing Support For Windows 98 and Mac OS 9
  • Windows 98 Support from Microsoft
  • Proposed End of Support
  • Impact of discontinuation of stated OS support
  • Impact
  • Proposed Communication Plan
  • Oracle Names to Oracle Internet Directory
  • Self-Service Vulnerability Scanning
  • Introduction
  • Getting Started
  • Overview
  • How to
  • Documentation
  • Self-Service Scanning
  • NetCom
Page 9: IT Briefing Agenda 1/20/05

Information Technology at Emory

Information Technology DivisionTechnical Services

Event Manager for Antivirusbull SESA integration productbull Enables centralized cross-tier

logging alerting and reporting between the SESA event management system and Symantec Antivirus

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA with Event Manager

SESA Datastor

e

AV Server AV ServerConsole

SESA Manager

Oracle

bullCollector on each parent AV server passes logged data to the SESA Manager via an Agent

bullThe Manager stores the event data into the Data store

bullThe Manager uses a directory to manage the devices users and permissions

bullAccess to the Manager is through a SESA console which is java based

bullAll SESA components are Java based except the Data store and Directory (Oracle and DB2)

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA DEMO

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA Requirementsbull Prerequisites

ndash Department must be running Symantec AV Server version 9 or better

ndash Must allow Java SDK 131_09 to be installed ndash Departmental server must be win32-based (ie

Win2K XP 2003) ndash Must have a designated contact

bull ITD Responsibilities ndash Create an OU and an access account ndash Provide on-site installation assistance ndash Provide on-site training at the time of installation

Install and training take about 1 hour and does not require a server reboot

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA Procedurebull ESR Form Method

ndash Go to the Electronic Support Request (ESR) form httphelpemoryedu

ndash Login using your campus id and password ndash Select the General Emory Helpdesk ndash Select the Request Type of General Other ndash Use Please add my managed AV server to

SESA in the Additional Details box

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA Procedure (cont)bull Magic Method

ndash Create a new incident using your name ndash Set Subject to Software ndash Enter Please add my managed AV server

to SESA in the incident description ndash Assign the call to

EU_ITD_CLIENT_SERVICES_TIER_2 queue bull Someone from CSD will respond to your

request within three business days bull We will verify the prerequisites and

setup an installation time

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA

QuestionsQuestions

Information Technology at Emory

Client Services Update

Stu Lipkin

Information Technology at Emory

Information Technology DivisionTechnical Services

Discontinuing Support For Windows 98 and Mac OS 9

bull Mainstream support from MS ceased for these products June 30 2002 and December 31 2003 Fee-for-service extended support is available but no future development is planned for these products Microsoft will only provide critical security updates for above products posted on the Windows Update web site Hotfixes for non-critical updates will be available on request only

bull No further development and support for Mac OS 9x is indicated from Apple Mac OS 102 is the recommended platform for Apple computers

Information Technology at Emory

Information Technology DivisionTechnical Services

Windows 98 Support from Microsoft

OPERATING SYSTEM

bull Windows 98bull Windows 98 SEbull Windows ME

END OF SUPPORT

bull June 30 2002bull June 30 2002bull December 31

2003Only paid incident support is available until December 31 2006httpsupportmicrosoftcomdefaultaspxscid=fh[ln]LifeWinhttpsupportmicrosoftcomgplifean1

Information Technology at Emory

Information Technology DivisionTechnical Services

Proposed End of Supportbull We propose to end support for

Mac OS 9x Windows 98 98 SE and Windows ME on May 31st 2005

Information Technology at Emory

Information Technology DivisionTechnical Services

Impact of discontinuation of stated OS support

bull No phone or desktop support from ITD would be provided for customers running Win 98 Win 98 2nd ed ME Mac OS 9x

bull No support provided for ITD applications running on stated OS

bull Development of installers would not be written for above OS

bull Enterprise applications and continuing development would not need to consider the above OSes as included in the technical specifications

Information Technology at Emory

Information Technology DivisionTechnical Services

Impactbull There should be no immediate effect on

users There is no immediate plan to change services so that they are incompatible with these Windows and Macintosh Operating Systems

bull Users should expect that newer applications introduced in the preceding months may not operate on older systems and may require Windows 2000 or Mac OS 102 or higher

Information Technology at Emory

Information Technology DivisionTechnical Services

Proposed Communication Plan

bull present at IT Briefing January 2005bull present at Desknet in January 2005bull prepare announcement to end users mid-Februarybull post announcement in ERWheel FebruaryMarchbull email to Local-l All-emory various Learnlink

conferences (LL Demigods SCC Technology and Emory Announcements) last business day of Jan Feb Mar Apr

bull post on defined page on itemoryeduDesktop Computing

Information Technology at Emory

Oracle Names to Oracle Internet DirectoryMark Parten

Information Technology at Emory

Self-Service Vulnerability Scanning

A new service from your ITD Security Team

Information Technology at Emory

Information Technology DivisionTechnical Services

Introductionbull Utilizes the Nessus Vulnerability Scanning

Toolbull Specifically for use by System Administrators

and Local Support Personnelbull Can scan both desktop and server machinesbull Reports vulnerabilities and gives possible

solutions fixes

Information Technology at Emory

Information Technology DivisionTechnical Services

Getting Startedbull For more information on requesting the

ability to do a Self-Service Scan go to the following URL

httpitemoryedushowdoccfmdocid=4248

bull The ITD Security Team will work with System Administrators and Local Support Personnel to get them set up and scanning once a request has been received

Information Technology at Emory

Information Technology DivisionTechnical Services

OverviewNetwork Vulnerability Scanning Self-Service

Overview FAQ

ITD Security offers Network Vulnerability Scanning Self-Service using Nessus from a centralized scanning server in the DMZ To request the ability to scan your network please send the following information to the security team at SecurityTeam-Llistservemoryedu 1 Name and organization you support2 The IP address range on your network that you would like to scan3 Phone number and e-mail address4 Your network ID

We will confirm this information send a link for the latest Nessus scanning client and provide a password to use when you connect to the system

Information Technology at Emory

Information Technology DivisionTechnical Services

How tobull Use GUI to connect to the Scanning

Serverbull Use network ID and Nessus

password to authenticatebull Create scan session (which nodes

options etc)bull Run scan view results create report

Information Technology at Emory

Information Technology DivisionTechnical Services

Documentation

Can be found at

httpwwwnessusorgdocumentation

Information Technology at Emory

Information Technology DivisionTechnical Services

Self-Service Scanning

QuestionsQuestions

Information Technology at Emory

Information Technology DivisionTechnical Services

NetCom

QuestionsQuestions

  • IT Briefing Agenda 12005
  • Symantec Enterprise Security Architecture
  • Symantec Enterprise Security Architecture Presentation Outline
  • AntiVirus Spring 2005
  • Managed AV
  • Slide 6
  • SESA
  • SESA Architecture
  • Event Manager for Antivirus
  • SESA with Event Manager
  • SESA DEMO
  • SESA Requirements
  • SESA Procedure
  • SESA Procedure (cont)
  • Slide 15
  • Client Services Update
  • Discontinuing Support For Windows 98 and Mac OS 9
  • Windows 98 Support from Microsoft
  • Proposed End of Support
  • Impact of discontinuation of stated OS support
  • Impact
  • Proposed Communication Plan
  • Oracle Names to Oracle Internet Directory
  • Self-Service Vulnerability Scanning
  • Introduction
  • Getting Started
  • Overview
  • How to
  • Documentation
  • Self-Service Scanning
  • NetCom
Page 10: IT Briefing Agenda 1/20/05

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA with Event Manager

SESA Datastor

e

AV Server AV ServerConsole

SESA Manager

Oracle

bullCollector on each parent AV server passes logged data to the SESA Manager via an Agent

bullThe Manager stores the event data into the Data store

bullThe Manager uses a directory to manage the devices users and permissions

bullAccess to the Manager is through a SESA console which is java based

bullAll SESA components are Java based except the Data store and Directory (Oracle and DB2)

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA DEMO

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA Requirementsbull Prerequisites

ndash Department must be running Symantec AV Server version 9 or better

ndash Must allow Java SDK 131_09 to be installed ndash Departmental server must be win32-based (ie

Win2K XP 2003) ndash Must have a designated contact

bull ITD Responsibilities ndash Create an OU and an access account ndash Provide on-site installation assistance ndash Provide on-site training at the time of installation

Install and training take about 1 hour and does not require a server reboot

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA Procedurebull ESR Form Method

ndash Go to the Electronic Support Request (ESR) form httphelpemoryedu

ndash Login using your campus id and password ndash Select the General Emory Helpdesk ndash Select the Request Type of General Other ndash Use Please add my managed AV server to

SESA in the Additional Details box

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA Procedure (cont)bull Magic Method

ndash Create a new incident using your name ndash Set Subject to Software ndash Enter Please add my managed AV server

to SESA in the incident description ndash Assign the call to

EU_ITD_CLIENT_SERVICES_TIER_2 queue bull Someone from CSD will respond to your

request within three business days bull We will verify the prerequisites and

setup an installation time

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA

QuestionsQuestions

Information Technology at Emory

Client Services Update

Stu Lipkin

Information Technology at Emory

Information Technology DivisionTechnical Services

Discontinuing Support For Windows 98 and Mac OS 9

bull Mainstream support from MS ceased for these products June 30 2002 and December 31 2003 Fee-for-service extended support is available but no future development is planned for these products Microsoft will only provide critical security updates for above products posted on the Windows Update web site Hotfixes for non-critical updates will be available on request only

bull No further development and support for Mac OS 9x is indicated from Apple Mac OS 102 is the recommended platform for Apple computers

Information Technology at Emory

Information Technology DivisionTechnical Services

Windows 98 Support from Microsoft

OPERATING SYSTEM

bull Windows 98bull Windows 98 SEbull Windows ME

END OF SUPPORT

bull June 30 2002bull June 30 2002bull December 31

2003Only paid incident support is available until December 31 2006httpsupportmicrosoftcomdefaultaspxscid=fh[ln]LifeWinhttpsupportmicrosoftcomgplifean1

Information Technology at Emory

Information Technology DivisionTechnical Services

Proposed End of Supportbull We propose to end support for

Mac OS 9x Windows 98 98 SE and Windows ME on May 31st 2005

Information Technology at Emory

Information Technology DivisionTechnical Services

Impact of discontinuation of stated OS support

bull No phone or desktop support from ITD would be provided for customers running Win 98 Win 98 2nd ed ME Mac OS 9x

bull No support provided for ITD applications running on stated OS

bull Development of installers would not be written for above OS

bull Enterprise applications and continuing development would not need to consider the above OSes as included in the technical specifications

Information Technology at Emory

Information Technology DivisionTechnical Services

Impactbull There should be no immediate effect on

users There is no immediate plan to change services so that they are incompatible with these Windows and Macintosh Operating Systems

bull Users should expect that newer applications introduced in the preceding months may not operate on older systems and may require Windows 2000 or Mac OS 102 or higher

Information Technology at Emory

Information Technology DivisionTechnical Services

Proposed Communication Plan

bull present at IT Briefing January 2005bull present at Desknet in January 2005bull prepare announcement to end users mid-Februarybull post announcement in ERWheel FebruaryMarchbull email to Local-l All-emory various Learnlink

conferences (LL Demigods SCC Technology and Emory Announcements) last business day of Jan Feb Mar Apr

bull post on defined page on itemoryeduDesktop Computing

Information Technology at Emory

Oracle Names to Oracle Internet DirectoryMark Parten

Information Technology at Emory

Self-Service Vulnerability Scanning

A new service from your ITD Security Team

Information Technology at Emory

Information Technology DivisionTechnical Services

Introductionbull Utilizes the Nessus Vulnerability Scanning

Toolbull Specifically for use by System Administrators

and Local Support Personnelbull Can scan both desktop and server machinesbull Reports vulnerabilities and gives possible

solutions fixes

Information Technology at Emory

Information Technology DivisionTechnical Services

Getting Startedbull For more information on requesting the

ability to do a Self-Service Scan go to the following URL

httpitemoryedushowdoccfmdocid=4248

bull The ITD Security Team will work with System Administrators and Local Support Personnel to get them set up and scanning once a request has been received

Information Technology at Emory

Information Technology DivisionTechnical Services

OverviewNetwork Vulnerability Scanning Self-Service

Overview FAQ

ITD Security offers Network Vulnerability Scanning Self-Service using Nessus from a centralized scanning server in the DMZ To request the ability to scan your network please send the following information to the security team at SecurityTeam-Llistservemoryedu 1 Name and organization you support2 The IP address range on your network that you would like to scan3 Phone number and e-mail address4 Your network ID

We will confirm this information send a link for the latest Nessus scanning client and provide a password to use when you connect to the system

Information Technology at Emory

Information Technology DivisionTechnical Services

How tobull Use GUI to connect to the Scanning

Serverbull Use network ID and Nessus

password to authenticatebull Create scan session (which nodes

options etc)bull Run scan view results create report

Information Technology at Emory

Information Technology DivisionTechnical Services

Documentation

Can be found at

httpwwwnessusorgdocumentation

Information Technology at Emory

Information Technology DivisionTechnical Services

Self-Service Scanning

QuestionsQuestions

Information Technology at Emory

Information Technology DivisionTechnical Services

NetCom

QuestionsQuestions

  • IT Briefing Agenda 12005
  • Symantec Enterprise Security Architecture
  • Symantec Enterprise Security Architecture Presentation Outline
  • AntiVirus Spring 2005
  • Managed AV
  • Slide 6
  • SESA
  • SESA Architecture
  • Event Manager for Antivirus
  • SESA with Event Manager
  • SESA DEMO
  • SESA Requirements
  • SESA Procedure
  • SESA Procedure (cont)
  • Slide 15
  • Client Services Update
  • Discontinuing Support For Windows 98 and Mac OS 9
  • Windows 98 Support from Microsoft
  • Proposed End of Support
  • Impact of discontinuation of stated OS support
  • Impact
  • Proposed Communication Plan
  • Oracle Names to Oracle Internet Directory
  • Self-Service Vulnerability Scanning
  • Introduction
  • Getting Started
  • Overview
  • How to
  • Documentation
  • Self-Service Scanning
  • NetCom
Page 11: IT Briefing Agenda 1/20/05

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA DEMO

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA Requirementsbull Prerequisites

ndash Department must be running Symantec AV Server version 9 or better

ndash Must allow Java SDK 131_09 to be installed ndash Departmental server must be win32-based (ie

Win2K XP 2003) ndash Must have a designated contact

bull ITD Responsibilities ndash Create an OU and an access account ndash Provide on-site installation assistance ndash Provide on-site training at the time of installation

Install and training take about 1 hour and does not require a server reboot

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA Procedurebull ESR Form Method

ndash Go to the Electronic Support Request (ESR) form httphelpemoryedu

ndash Login using your campus id and password ndash Select the General Emory Helpdesk ndash Select the Request Type of General Other ndash Use Please add my managed AV server to

SESA in the Additional Details box

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA Procedure (cont)bull Magic Method

ndash Create a new incident using your name ndash Set Subject to Software ndash Enter Please add my managed AV server

to SESA in the incident description ndash Assign the call to

EU_ITD_CLIENT_SERVICES_TIER_2 queue bull Someone from CSD will respond to your

request within three business days bull We will verify the prerequisites and

setup an installation time

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA

QuestionsQuestions

Information Technology at Emory

Client Services Update

Stu Lipkin

Information Technology at Emory

Information Technology DivisionTechnical Services

Discontinuing Support For Windows 98 and Mac OS 9

bull Mainstream support from MS ceased for these products June 30 2002 and December 31 2003 Fee-for-service extended support is available but no future development is planned for these products Microsoft will only provide critical security updates for above products posted on the Windows Update web site Hotfixes for non-critical updates will be available on request only

bull No further development and support for Mac OS 9x is indicated from Apple Mac OS 102 is the recommended platform for Apple computers

Information Technology at Emory

Information Technology DivisionTechnical Services

Windows 98 Support from Microsoft

OPERATING SYSTEM

bull Windows 98bull Windows 98 SEbull Windows ME

END OF SUPPORT

bull June 30 2002bull June 30 2002bull December 31

2003Only paid incident support is available until December 31 2006httpsupportmicrosoftcomdefaultaspxscid=fh[ln]LifeWinhttpsupportmicrosoftcomgplifean1

Information Technology at Emory

Information Technology DivisionTechnical Services

Proposed End of Supportbull We propose to end support for

Mac OS 9x Windows 98 98 SE and Windows ME on May 31st 2005

Information Technology at Emory

Information Technology DivisionTechnical Services

Impact of discontinuation of stated OS support

bull No phone or desktop support from ITD would be provided for customers running Win 98 Win 98 2nd ed ME Mac OS 9x

bull No support provided for ITD applications running on stated OS

bull Development of installers would not be written for above OS

bull Enterprise applications and continuing development would not need to consider the above OSes as included in the technical specifications

Information Technology at Emory

Information Technology DivisionTechnical Services

Impactbull There should be no immediate effect on

users There is no immediate plan to change services so that they are incompatible with these Windows and Macintosh Operating Systems

bull Users should expect that newer applications introduced in the preceding months may not operate on older systems and may require Windows 2000 or Mac OS 102 or higher

Information Technology at Emory

Information Technology DivisionTechnical Services

Proposed Communication Plan

bull present at IT Briefing January 2005bull present at Desknet in January 2005bull prepare announcement to end users mid-Februarybull post announcement in ERWheel FebruaryMarchbull email to Local-l All-emory various Learnlink

conferences (LL Demigods SCC Technology and Emory Announcements) last business day of Jan Feb Mar Apr

bull post on defined page on itemoryeduDesktop Computing

Information Technology at Emory

Oracle Names to Oracle Internet DirectoryMark Parten

Information Technology at Emory

Self-Service Vulnerability Scanning

A new service from your ITD Security Team

Information Technology at Emory

Information Technology DivisionTechnical Services

Introductionbull Utilizes the Nessus Vulnerability Scanning

Toolbull Specifically for use by System Administrators

and Local Support Personnelbull Can scan both desktop and server machinesbull Reports vulnerabilities and gives possible

solutions fixes

Information Technology at Emory

Information Technology DivisionTechnical Services

Getting Startedbull For more information on requesting the

ability to do a Self-Service Scan go to the following URL

httpitemoryedushowdoccfmdocid=4248

bull The ITD Security Team will work with System Administrators and Local Support Personnel to get them set up and scanning once a request has been received

Information Technology at Emory

Information Technology DivisionTechnical Services

OverviewNetwork Vulnerability Scanning Self-Service

Overview FAQ

ITD Security offers Network Vulnerability Scanning Self-Service using Nessus from a centralized scanning server in the DMZ To request the ability to scan your network please send the following information to the security team at SecurityTeam-Llistservemoryedu 1 Name and organization you support2 The IP address range on your network that you would like to scan3 Phone number and e-mail address4 Your network ID

We will confirm this information send a link for the latest Nessus scanning client and provide a password to use when you connect to the system

Information Technology at Emory

Information Technology DivisionTechnical Services

How tobull Use GUI to connect to the Scanning

Serverbull Use network ID and Nessus

password to authenticatebull Create scan session (which nodes

options etc)bull Run scan view results create report

Information Technology at Emory

Information Technology DivisionTechnical Services

Documentation

Can be found at

httpwwwnessusorgdocumentation

Information Technology at Emory

Information Technology DivisionTechnical Services

Self-Service Scanning

QuestionsQuestions

Information Technology at Emory

Information Technology DivisionTechnical Services

NetCom

QuestionsQuestions

  • IT Briefing Agenda 12005
  • Symantec Enterprise Security Architecture
  • Symantec Enterprise Security Architecture Presentation Outline
  • AntiVirus Spring 2005
  • Managed AV
  • Slide 6
  • SESA
  • SESA Architecture
  • Event Manager for Antivirus
  • SESA with Event Manager
  • SESA DEMO
  • SESA Requirements
  • SESA Procedure
  • SESA Procedure (cont)
  • Slide 15
  • Client Services Update
  • Discontinuing Support For Windows 98 and Mac OS 9
  • Windows 98 Support from Microsoft
  • Proposed End of Support
  • Impact of discontinuation of stated OS support
  • Impact
  • Proposed Communication Plan
  • Oracle Names to Oracle Internet Directory
  • Self-Service Vulnerability Scanning
  • Introduction
  • Getting Started
  • Overview
  • How to
  • Documentation
  • Self-Service Scanning
  • NetCom
Page 12: IT Briefing Agenda 1/20/05

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA Requirementsbull Prerequisites

ndash Department must be running Symantec AV Server version 9 or better

ndash Must allow Java SDK 131_09 to be installed ndash Departmental server must be win32-based (ie

Win2K XP 2003) ndash Must have a designated contact

bull ITD Responsibilities ndash Create an OU and an access account ndash Provide on-site installation assistance ndash Provide on-site training at the time of installation

Install and training take about 1 hour and does not require a server reboot

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA Procedurebull ESR Form Method

ndash Go to the Electronic Support Request (ESR) form httphelpemoryedu

ndash Login using your campus id and password ndash Select the General Emory Helpdesk ndash Select the Request Type of General Other ndash Use Please add my managed AV server to

SESA in the Additional Details box

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA Procedure (cont)bull Magic Method

ndash Create a new incident using your name ndash Set Subject to Software ndash Enter Please add my managed AV server

to SESA in the incident description ndash Assign the call to

EU_ITD_CLIENT_SERVICES_TIER_2 queue bull Someone from CSD will respond to your

request within three business days bull We will verify the prerequisites and

setup an installation time

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA

QuestionsQuestions

Information Technology at Emory

Client Services Update

Stu Lipkin

Information Technology at Emory

Information Technology DivisionTechnical Services

Discontinuing Support For Windows 98 and Mac OS 9

bull Mainstream support from MS ceased for these products June 30 2002 and December 31 2003 Fee-for-service extended support is available but no future development is planned for these products Microsoft will only provide critical security updates for above products posted on the Windows Update web site Hotfixes for non-critical updates will be available on request only

bull No further development and support for Mac OS 9x is indicated from Apple Mac OS 102 is the recommended platform for Apple computers

Information Technology at Emory

Information Technology DivisionTechnical Services

Windows 98 Support from Microsoft

OPERATING SYSTEM

bull Windows 98bull Windows 98 SEbull Windows ME

END OF SUPPORT

bull June 30 2002bull June 30 2002bull December 31

2003Only paid incident support is available until December 31 2006httpsupportmicrosoftcomdefaultaspxscid=fh[ln]LifeWinhttpsupportmicrosoftcomgplifean1

Information Technology at Emory

Information Technology DivisionTechnical Services

Proposed End of Supportbull We propose to end support for

Mac OS 9x Windows 98 98 SE and Windows ME on May 31st 2005

Information Technology at Emory

Information Technology DivisionTechnical Services

Impact of discontinuation of stated OS support

bull No phone or desktop support from ITD would be provided for customers running Win 98 Win 98 2nd ed ME Mac OS 9x

bull No support provided for ITD applications running on stated OS

bull Development of installers would not be written for above OS

bull Enterprise applications and continuing development would not need to consider the above OSes as included in the technical specifications

Information Technology at Emory

Information Technology DivisionTechnical Services

Impactbull There should be no immediate effect on

users There is no immediate plan to change services so that they are incompatible with these Windows and Macintosh Operating Systems

bull Users should expect that newer applications introduced in the preceding months may not operate on older systems and may require Windows 2000 or Mac OS 102 or higher

Information Technology at Emory

Information Technology DivisionTechnical Services

Proposed Communication Plan

bull present at IT Briefing January 2005bull present at Desknet in January 2005bull prepare announcement to end users mid-Februarybull post announcement in ERWheel FebruaryMarchbull email to Local-l All-emory various Learnlink

conferences (LL Demigods SCC Technology and Emory Announcements) last business day of Jan Feb Mar Apr

bull post on defined page on itemoryeduDesktop Computing

Information Technology at Emory

Oracle Names to Oracle Internet DirectoryMark Parten

Information Technology at Emory

Self-Service Vulnerability Scanning

A new service from your ITD Security Team

Information Technology at Emory

Information Technology DivisionTechnical Services

Introductionbull Utilizes the Nessus Vulnerability Scanning

Toolbull Specifically for use by System Administrators

and Local Support Personnelbull Can scan both desktop and server machinesbull Reports vulnerabilities and gives possible

solutions fixes

Information Technology at Emory

Information Technology DivisionTechnical Services

Getting Startedbull For more information on requesting the

ability to do a Self-Service Scan go to the following URL

httpitemoryedushowdoccfmdocid=4248

bull The ITD Security Team will work with System Administrators and Local Support Personnel to get them set up and scanning once a request has been received

Information Technology at Emory

Information Technology DivisionTechnical Services

OverviewNetwork Vulnerability Scanning Self-Service

Overview FAQ

ITD Security offers Network Vulnerability Scanning Self-Service using Nessus from a centralized scanning server in the DMZ To request the ability to scan your network please send the following information to the security team at SecurityTeam-Llistservemoryedu 1 Name and organization you support2 The IP address range on your network that you would like to scan3 Phone number and e-mail address4 Your network ID

We will confirm this information send a link for the latest Nessus scanning client and provide a password to use when you connect to the system

Information Technology at Emory

Information Technology DivisionTechnical Services

How tobull Use GUI to connect to the Scanning

Serverbull Use network ID and Nessus

password to authenticatebull Create scan session (which nodes

options etc)bull Run scan view results create report

Information Technology at Emory

Information Technology DivisionTechnical Services

Documentation

Can be found at

httpwwwnessusorgdocumentation

Information Technology at Emory

Information Technology DivisionTechnical Services

Self-Service Scanning

QuestionsQuestions

Information Technology at Emory

Information Technology DivisionTechnical Services

NetCom

QuestionsQuestions

  • IT Briefing Agenda 12005
  • Symantec Enterprise Security Architecture
  • Symantec Enterprise Security Architecture Presentation Outline
  • AntiVirus Spring 2005
  • Managed AV
  • Slide 6
  • SESA
  • SESA Architecture
  • Event Manager for Antivirus
  • SESA with Event Manager
  • SESA DEMO
  • SESA Requirements
  • SESA Procedure
  • SESA Procedure (cont)
  • Slide 15
  • Client Services Update
  • Discontinuing Support For Windows 98 and Mac OS 9
  • Windows 98 Support from Microsoft
  • Proposed End of Support
  • Impact of discontinuation of stated OS support
  • Impact
  • Proposed Communication Plan
  • Oracle Names to Oracle Internet Directory
  • Self-Service Vulnerability Scanning
  • Introduction
  • Getting Started
  • Overview
  • How to
  • Documentation
  • Self-Service Scanning
  • NetCom
Page 13: IT Briefing Agenda 1/20/05

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA Procedurebull ESR Form Method

ndash Go to the Electronic Support Request (ESR) form httphelpemoryedu

ndash Login using your campus id and password ndash Select the General Emory Helpdesk ndash Select the Request Type of General Other ndash Use Please add my managed AV server to

SESA in the Additional Details box

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA Procedure (cont)bull Magic Method

ndash Create a new incident using your name ndash Set Subject to Software ndash Enter Please add my managed AV server

to SESA in the incident description ndash Assign the call to

EU_ITD_CLIENT_SERVICES_TIER_2 queue bull Someone from CSD will respond to your

request within three business days bull We will verify the prerequisites and

setup an installation time

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA

QuestionsQuestions

Information Technology at Emory

Client Services Update

Stu Lipkin

Information Technology at Emory

Information Technology DivisionTechnical Services

Discontinuing Support For Windows 98 and Mac OS 9

bull Mainstream support from MS ceased for these products June 30 2002 and December 31 2003 Fee-for-service extended support is available but no future development is planned for these products Microsoft will only provide critical security updates for above products posted on the Windows Update web site Hotfixes for non-critical updates will be available on request only

bull No further development and support for Mac OS 9x is indicated from Apple Mac OS 102 is the recommended platform for Apple computers

Information Technology at Emory

Information Technology DivisionTechnical Services

Windows 98 Support from Microsoft

OPERATING SYSTEM

bull Windows 98bull Windows 98 SEbull Windows ME

END OF SUPPORT

bull June 30 2002bull June 30 2002bull December 31

2003Only paid incident support is available until December 31 2006httpsupportmicrosoftcomdefaultaspxscid=fh[ln]LifeWinhttpsupportmicrosoftcomgplifean1

Information Technology at Emory

Information Technology DivisionTechnical Services

Proposed End of Supportbull We propose to end support for

Mac OS 9x Windows 98 98 SE and Windows ME on May 31st 2005

Information Technology at Emory

Information Technology DivisionTechnical Services

Impact of discontinuation of stated OS support

bull No phone or desktop support from ITD would be provided for customers running Win 98 Win 98 2nd ed ME Mac OS 9x

bull No support provided for ITD applications running on stated OS

bull Development of installers would not be written for above OS

bull Enterprise applications and continuing development would not need to consider the above OSes as included in the technical specifications

Information Technology at Emory

Information Technology DivisionTechnical Services

Impactbull There should be no immediate effect on

users There is no immediate plan to change services so that they are incompatible with these Windows and Macintosh Operating Systems

bull Users should expect that newer applications introduced in the preceding months may not operate on older systems and may require Windows 2000 or Mac OS 102 or higher

Information Technology at Emory

Information Technology DivisionTechnical Services

Proposed Communication Plan

bull present at IT Briefing January 2005bull present at Desknet in January 2005bull prepare announcement to end users mid-Februarybull post announcement in ERWheel FebruaryMarchbull email to Local-l All-emory various Learnlink

conferences (LL Demigods SCC Technology and Emory Announcements) last business day of Jan Feb Mar Apr

bull post on defined page on itemoryeduDesktop Computing

Information Technology at Emory

Oracle Names to Oracle Internet DirectoryMark Parten

Information Technology at Emory

Self-Service Vulnerability Scanning

A new service from your ITD Security Team

Information Technology at Emory

Information Technology DivisionTechnical Services

Introductionbull Utilizes the Nessus Vulnerability Scanning

Toolbull Specifically for use by System Administrators

and Local Support Personnelbull Can scan both desktop and server machinesbull Reports vulnerabilities and gives possible

solutions fixes

Information Technology at Emory

Information Technology DivisionTechnical Services

Getting Startedbull For more information on requesting the

ability to do a Self-Service Scan go to the following URL

httpitemoryedushowdoccfmdocid=4248

bull The ITD Security Team will work with System Administrators and Local Support Personnel to get them set up and scanning once a request has been received

Information Technology at Emory

Information Technology DivisionTechnical Services

OverviewNetwork Vulnerability Scanning Self-Service

Overview FAQ

ITD Security offers Network Vulnerability Scanning Self-Service using Nessus from a centralized scanning server in the DMZ To request the ability to scan your network please send the following information to the security team at SecurityTeam-Llistservemoryedu 1 Name and organization you support2 The IP address range on your network that you would like to scan3 Phone number and e-mail address4 Your network ID

We will confirm this information send a link for the latest Nessus scanning client and provide a password to use when you connect to the system

Information Technology at Emory

Information Technology DivisionTechnical Services

How tobull Use GUI to connect to the Scanning

Serverbull Use network ID and Nessus

password to authenticatebull Create scan session (which nodes

options etc)bull Run scan view results create report

Information Technology at Emory

Information Technology DivisionTechnical Services

Documentation

Can be found at

httpwwwnessusorgdocumentation

Information Technology at Emory

Information Technology DivisionTechnical Services

Self-Service Scanning

QuestionsQuestions

Information Technology at Emory

Information Technology DivisionTechnical Services

NetCom

QuestionsQuestions

  • IT Briefing Agenda 12005
  • Symantec Enterprise Security Architecture
  • Symantec Enterprise Security Architecture Presentation Outline
  • AntiVirus Spring 2005
  • Managed AV
  • Slide 6
  • SESA
  • SESA Architecture
  • Event Manager for Antivirus
  • SESA with Event Manager
  • SESA DEMO
  • SESA Requirements
  • SESA Procedure
  • SESA Procedure (cont)
  • Slide 15
  • Client Services Update
  • Discontinuing Support For Windows 98 and Mac OS 9
  • Windows 98 Support from Microsoft
  • Proposed End of Support
  • Impact of discontinuation of stated OS support
  • Impact
  • Proposed Communication Plan
  • Oracle Names to Oracle Internet Directory
  • Self-Service Vulnerability Scanning
  • Introduction
  • Getting Started
  • Overview
  • How to
  • Documentation
  • Self-Service Scanning
  • NetCom
Page 14: IT Briefing Agenda 1/20/05

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA Procedure (cont)bull Magic Method

ndash Create a new incident using your name ndash Set Subject to Software ndash Enter Please add my managed AV server

to SESA in the incident description ndash Assign the call to

EU_ITD_CLIENT_SERVICES_TIER_2 queue bull Someone from CSD will respond to your

request within three business days bull We will verify the prerequisites and

setup an installation time

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA

QuestionsQuestions

Information Technology at Emory

Client Services Update

Stu Lipkin

Information Technology at Emory

Information Technology DivisionTechnical Services

Discontinuing Support For Windows 98 and Mac OS 9

bull Mainstream support from MS ceased for these products June 30 2002 and December 31 2003 Fee-for-service extended support is available but no future development is planned for these products Microsoft will only provide critical security updates for above products posted on the Windows Update web site Hotfixes for non-critical updates will be available on request only

bull No further development and support for Mac OS 9x is indicated from Apple Mac OS 102 is the recommended platform for Apple computers

Information Technology at Emory

Information Technology DivisionTechnical Services

Windows 98 Support from Microsoft

OPERATING SYSTEM

bull Windows 98bull Windows 98 SEbull Windows ME

END OF SUPPORT

bull June 30 2002bull June 30 2002bull December 31

2003Only paid incident support is available until December 31 2006httpsupportmicrosoftcomdefaultaspxscid=fh[ln]LifeWinhttpsupportmicrosoftcomgplifean1

Information Technology at Emory

Information Technology DivisionTechnical Services

Proposed End of Supportbull We propose to end support for

Mac OS 9x Windows 98 98 SE and Windows ME on May 31st 2005

Information Technology at Emory

Information Technology DivisionTechnical Services

Impact of discontinuation of stated OS support

bull No phone or desktop support from ITD would be provided for customers running Win 98 Win 98 2nd ed ME Mac OS 9x

bull No support provided for ITD applications running on stated OS

bull Development of installers would not be written for above OS

bull Enterprise applications and continuing development would not need to consider the above OSes as included in the technical specifications

Information Technology at Emory

Information Technology DivisionTechnical Services

Impactbull There should be no immediate effect on

users There is no immediate plan to change services so that they are incompatible with these Windows and Macintosh Operating Systems

bull Users should expect that newer applications introduced in the preceding months may not operate on older systems and may require Windows 2000 or Mac OS 102 or higher

Information Technology at Emory

Information Technology DivisionTechnical Services

Proposed Communication Plan

bull present at IT Briefing January 2005bull present at Desknet in January 2005bull prepare announcement to end users mid-Februarybull post announcement in ERWheel FebruaryMarchbull email to Local-l All-emory various Learnlink

conferences (LL Demigods SCC Technology and Emory Announcements) last business day of Jan Feb Mar Apr

bull post on defined page on itemoryeduDesktop Computing

Information Technology at Emory

Oracle Names to Oracle Internet DirectoryMark Parten

Information Technology at Emory

Self-Service Vulnerability Scanning

A new service from your ITD Security Team

Information Technology at Emory

Information Technology DivisionTechnical Services

Introductionbull Utilizes the Nessus Vulnerability Scanning

Toolbull Specifically for use by System Administrators

and Local Support Personnelbull Can scan both desktop and server machinesbull Reports vulnerabilities and gives possible

solutions fixes

Information Technology at Emory

Information Technology DivisionTechnical Services

Getting Startedbull For more information on requesting the

ability to do a Self-Service Scan go to the following URL

httpitemoryedushowdoccfmdocid=4248

bull The ITD Security Team will work with System Administrators and Local Support Personnel to get them set up and scanning once a request has been received

Information Technology at Emory

Information Technology DivisionTechnical Services

OverviewNetwork Vulnerability Scanning Self-Service

Overview FAQ

ITD Security offers Network Vulnerability Scanning Self-Service using Nessus from a centralized scanning server in the DMZ To request the ability to scan your network please send the following information to the security team at SecurityTeam-Llistservemoryedu 1 Name and organization you support2 The IP address range on your network that you would like to scan3 Phone number and e-mail address4 Your network ID

We will confirm this information send a link for the latest Nessus scanning client and provide a password to use when you connect to the system

Information Technology at Emory

Information Technology DivisionTechnical Services

How tobull Use GUI to connect to the Scanning

Serverbull Use network ID and Nessus

password to authenticatebull Create scan session (which nodes

options etc)bull Run scan view results create report

Information Technology at Emory

Information Technology DivisionTechnical Services

Documentation

Can be found at

httpwwwnessusorgdocumentation

Information Technology at Emory

Information Technology DivisionTechnical Services

Self-Service Scanning

QuestionsQuestions

Information Technology at Emory

Information Technology DivisionTechnical Services

NetCom

QuestionsQuestions

  • IT Briefing Agenda 12005
  • Symantec Enterprise Security Architecture
  • Symantec Enterprise Security Architecture Presentation Outline
  • AntiVirus Spring 2005
  • Managed AV
  • Slide 6
  • SESA
  • SESA Architecture
  • Event Manager for Antivirus
  • SESA with Event Manager
  • SESA DEMO
  • SESA Requirements
  • SESA Procedure
  • SESA Procedure (cont)
  • Slide 15
  • Client Services Update
  • Discontinuing Support For Windows 98 and Mac OS 9
  • Windows 98 Support from Microsoft
  • Proposed End of Support
  • Impact of discontinuation of stated OS support
  • Impact
  • Proposed Communication Plan
  • Oracle Names to Oracle Internet Directory
  • Self-Service Vulnerability Scanning
  • Introduction
  • Getting Started
  • Overview
  • How to
  • Documentation
  • Self-Service Scanning
  • NetCom
Page 15: IT Briefing Agenda 1/20/05

Information Technology at Emory

Information Technology DivisionTechnical Services

SESA

QuestionsQuestions

Information Technology at Emory

Client Services Update

Stu Lipkin

Information Technology at Emory

Information Technology DivisionTechnical Services

Discontinuing Support For Windows 98 and Mac OS 9

bull Mainstream support from MS ceased for these products June 30 2002 and December 31 2003 Fee-for-service extended support is available but no future development is planned for these products Microsoft will only provide critical security updates for above products posted on the Windows Update web site Hotfixes for non-critical updates will be available on request only

bull No further development and support for Mac OS 9x is indicated from Apple Mac OS 102 is the recommended platform for Apple computers

Information Technology at Emory

Information Technology DivisionTechnical Services

Windows 98 Support from Microsoft

OPERATING SYSTEM

bull Windows 98bull Windows 98 SEbull Windows ME

END OF SUPPORT

bull June 30 2002bull June 30 2002bull December 31

2003Only paid incident support is available until December 31 2006httpsupportmicrosoftcomdefaultaspxscid=fh[ln]LifeWinhttpsupportmicrosoftcomgplifean1

Information Technology at Emory

Information Technology DivisionTechnical Services

Proposed End of Supportbull We propose to end support for

Mac OS 9x Windows 98 98 SE and Windows ME on May 31st 2005

Information Technology at Emory

Information Technology DivisionTechnical Services

Impact of discontinuation of stated OS support

bull No phone or desktop support from ITD would be provided for customers running Win 98 Win 98 2nd ed ME Mac OS 9x

bull No support provided for ITD applications running on stated OS

bull Development of installers would not be written for above OS

bull Enterprise applications and continuing development would not need to consider the above OSes as included in the technical specifications

Information Technology at Emory

Information Technology DivisionTechnical Services

Impactbull There should be no immediate effect on

users There is no immediate plan to change services so that they are incompatible with these Windows and Macintosh Operating Systems

bull Users should expect that newer applications introduced in the preceding months may not operate on older systems and may require Windows 2000 or Mac OS 102 or higher

Information Technology at Emory

Information Technology DivisionTechnical Services

Proposed Communication Plan

bull present at IT Briefing January 2005bull present at Desknet in January 2005bull prepare announcement to end users mid-Februarybull post announcement in ERWheel FebruaryMarchbull email to Local-l All-emory various Learnlink

conferences (LL Demigods SCC Technology and Emory Announcements) last business day of Jan Feb Mar Apr

bull post on defined page on itemoryeduDesktop Computing

Information Technology at Emory

Oracle Names to Oracle Internet DirectoryMark Parten

Information Technology at Emory

Self-Service Vulnerability Scanning

A new service from your ITD Security Team

Information Technology at Emory

Information Technology DivisionTechnical Services

Introductionbull Utilizes the Nessus Vulnerability Scanning

Toolbull Specifically for use by System Administrators

and Local Support Personnelbull Can scan both desktop and server machinesbull Reports vulnerabilities and gives possible

solutions fixes

Information Technology at Emory

Information Technology DivisionTechnical Services

Getting Startedbull For more information on requesting the

ability to do a Self-Service Scan go to the following URL

httpitemoryedushowdoccfmdocid=4248

bull The ITD Security Team will work with System Administrators and Local Support Personnel to get them set up and scanning once a request has been received

Information Technology at Emory

Information Technology DivisionTechnical Services

OverviewNetwork Vulnerability Scanning Self-Service

Overview FAQ

ITD Security offers Network Vulnerability Scanning Self-Service using Nessus from a centralized scanning server in the DMZ To request the ability to scan your network please send the following information to the security team at SecurityTeam-Llistservemoryedu 1 Name and organization you support2 The IP address range on your network that you would like to scan3 Phone number and e-mail address4 Your network ID

We will confirm this information send a link for the latest Nessus scanning client and provide a password to use when you connect to the system

Information Technology at Emory

Information Technology DivisionTechnical Services

How tobull Use GUI to connect to the Scanning

Serverbull Use network ID and Nessus

password to authenticatebull Create scan session (which nodes

options etc)bull Run scan view results create report

Information Technology at Emory

Information Technology DivisionTechnical Services

Documentation

Can be found at

httpwwwnessusorgdocumentation

Information Technology at Emory

Information Technology DivisionTechnical Services

Self-Service Scanning

QuestionsQuestions

Information Technology at Emory

Information Technology DivisionTechnical Services

NetCom

QuestionsQuestions

  • IT Briefing Agenda 12005
  • Symantec Enterprise Security Architecture
  • Symantec Enterprise Security Architecture Presentation Outline
  • AntiVirus Spring 2005
  • Managed AV
  • Slide 6
  • SESA
  • SESA Architecture
  • Event Manager for Antivirus
  • SESA with Event Manager
  • SESA DEMO
  • SESA Requirements
  • SESA Procedure
  • SESA Procedure (cont)
  • Slide 15
  • Client Services Update
  • Discontinuing Support For Windows 98 and Mac OS 9
  • Windows 98 Support from Microsoft
  • Proposed End of Support
  • Impact of discontinuation of stated OS support
  • Impact
  • Proposed Communication Plan
  • Oracle Names to Oracle Internet Directory
  • Self-Service Vulnerability Scanning
  • Introduction
  • Getting Started
  • Overview
  • How to
  • Documentation
  • Self-Service Scanning
  • NetCom
Page 16: IT Briefing Agenda 1/20/05

Information Technology at Emory

Client Services Update

Stu Lipkin

Information Technology at Emory

Information Technology DivisionTechnical Services

Discontinuing Support For Windows 98 and Mac OS 9

bull Mainstream support from MS ceased for these products June 30 2002 and December 31 2003 Fee-for-service extended support is available but no future development is planned for these products Microsoft will only provide critical security updates for above products posted on the Windows Update web site Hotfixes for non-critical updates will be available on request only

bull No further development and support for Mac OS 9x is indicated from Apple Mac OS 102 is the recommended platform for Apple computers

Information Technology at Emory

Information Technology DivisionTechnical Services

Windows 98 Support from Microsoft

OPERATING SYSTEM

bull Windows 98bull Windows 98 SEbull Windows ME

END OF SUPPORT

bull June 30 2002bull June 30 2002bull December 31

2003Only paid incident support is available until December 31 2006httpsupportmicrosoftcomdefaultaspxscid=fh[ln]LifeWinhttpsupportmicrosoftcomgplifean1

Information Technology at Emory

Information Technology DivisionTechnical Services

Proposed End of Supportbull We propose to end support for

Mac OS 9x Windows 98 98 SE and Windows ME on May 31st 2005

Information Technology at Emory

Information Technology DivisionTechnical Services

Impact of discontinuation of stated OS support

bull No phone or desktop support from ITD would be provided for customers running Win 98 Win 98 2nd ed ME Mac OS 9x

bull No support provided for ITD applications running on stated OS

bull Development of installers would not be written for above OS

bull Enterprise applications and continuing development would not need to consider the above OSes as included in the technical specifications

Information Technology at Emory

Information Technology DivisionTechnical Services

Impactbull There should be no immediate effect on

users There is no immediate plan to change services so that they are incompatible with these Windows and Macintosh Operating Systems

bull Users should expect that newer applications introduced in the preceding months may not operate on older systems and may require Windows 2000 or Mac OS 102 or higher

Information Technology at Emory

Information Technology DivisionTechnical Services

Proposed Communication Plan

bull present at IT Briefing January 2005bull present at Desknet in January 2005bull prepare announcement to end users mid-Februarybull post announcement in ERWheel FebruaryMarchbull email to Local-l All-emory various Learnlink

conferences (LL Demigods SCC Technology and Emory Announcements) last business day of Jan Feb Mar Apr

bull post on defined page on itemoryeduDesktop Computing

Information Technology at Emory

Oracle Names to Oracle Internet DirectoryMark Parten

Information Technology at Emory

Self-Service Vulnerability Scanning

A new service from your ITD Security Team

Information Technology at Emory

Information Technology DivisionTechnical Services

Introductionbull Utilizes the Nessus Vulnerability Scanning

Toolbull Specifically for use by System Administrators

and Local Support Personnelbull Can scan both desktop and server machinesbull Reports vulnerabilities and gives possible

solutions fixes

Information Technology at Emory

Information Technology DivisionTechnical Services

Getting Startedbull For more information on requesting the

ability to do a Self-Service Scan go to the following URL

httpitemoryedushowdoccfmdocid=4248

bull The ITD Security Team will work with System Administrators and Local Support Personnel to get them set up and scanning once a request has been received

Information Technology at Emory

Information Technology DivisionTechnical Services

OverviewNetwork Vulnerability Scanning Self-Service

Overview FAQ

ITD Security offers Network Vulnerability Scanning Self-Service using Nessus from a centralized scanning server in the DMZ To request the ability to scan your network please send the following information to the security team at SecurityTeam-Llistservemoryedu 1 Name and organization you support2 The IP address range on your network that you would like to scan3 Phone number and e-mail address4 Your network ID

We will confirm this information send a link for the latest Nessus scanning client and provide a password to use when you connect to the system

Information Technology at Emory

Information Technology DivisionTechnical Services

How tobull Use GUI to connect to the Scanning

Serverbull Use network ID and Nessus

password to authenticatebull Create scan session (which nodes

options etc)bull Run scan view results create report

Information Technology at Emory

Information Technology DivisionTechnical Services

Documentation

Can be found at

httpwwwnessusorgdocumentation

Information Technology at Emory

Information Technology DivisionTechnical Services

Self-Service Scanning

QuestionsQuestions

Information Technology at Emory

Information Technology DivisionTechnical Services

NetCom

QuestionsQuestions

  • IT Briefing Agenda 12005
  • Symantec Enterprise Security Architecture
  • Symantec Enterprise Security Architecture Presentation Outline
  • AntiVirus Spring 2005
  • Managed AV
  • Slide 6
  • SESA
  • SESA Architecture
  • Event Manager for Antivirus
  • SESA with Event Manager
  • SESA DEMO
  • SESA Requirements
  • SESA Procedure
  • SESA Procedure (cont)
  • Slide 15
  • Client Services Update
  • Discontinuing Support For Windows 98 and Mac OS 9
  • Windows 98 Support from Microsoft
  • Proposed End of Support
  • Impact of discontinuation of stated OS support
  • Impact
  • Proposed Communication Plan
  • Oracle Names to Oracle Internet Directory
  • Self-Service Vulnerability Scanning
  • Introduction
  • Getting Started
  • Overview
  • How to
  • Documentation
  • Self-Service Scanning
  • NetCom
Page 17: IT Briefing Agenda 1/20/05

Information Technology at Emory

Information Technology DivisionTechnical Services

Discontinuing Support For Windows 98 and Mac OS 9

bull Mainstream support from MS ceased for these products June 30 2002 and December 31 2003 Fee-for-service extended support is available but no future development is planned for these products Microsoft will only provide critical security updates for above products posted on the Windows Update web site Hotfixes for non-critical updates will be available on request only

bull No further development and support for Mac OS 9x is indicated from Apple Mac OS 102 is the recommended platform for Apple computers

Information Technology at Emory

Information Technology DivisionTechnical Services

Windows 98 Support from Microsoft

OPERATING SYSTEM

bull Windows 98bull Windows 98 SEbull Windows ME

END OF SUPPORT

bull June 30 2002bull June 30 2002bull December 31

2003Only paid incident support is available until December 31 2006httpsupportmicrosoftcomdefaultaspxscid=fh[ln]LifeWinhttpsupportmicrosoftcomgplifean1

Information Technology at Emory

Information Technology DivisionTechnical Services

Proposed End of Supportbull We propose to end support for

Mac OS 9x Windows 98 98 SE and Windows ME on May 31st 2005

Information Technology at Emory

Information Technology DivisionTechnical Services

Impact of discontinuation of stated OS support

bull No phone or desktop support from ITD would be provided for customers running Win 98 Win 98 2nd ed ME Mac OS 9x

bull No support provided for ITD applications running on stated OS

bull Development of installers would not be written for above OS

bull Enterprise applications and continuing development would not need to consider the above OSes as included in the technical specifications

Information Technology at Emory

Information Technology DivisionTechnical Services

Impactbull There should be no immediate effect on

users There is no immediate plan to change services so that they are incompatible with these Windows and Macintosh Operating Systems

bull Users should expect that newer applications introduced in the preceding months may not operate on older systems and may require Windows 2000 or Mac OS 102 or higher

Information Technology at Emory

Information Technology DivisionTechnical Services

Proposed Communication Plan

bull present at IT Briefing January 2005bull present at Desknet in January 2005bull prepare announcement to end users mid-Februarybull post announcement in ERWheel FebruaryMarchbull email to Local-l All-emory various Learnlink

conferences (LL Demigods SCC Technology and Emory Announcements) last business day of Jan Feb Mar Apr

bull post on defined page on itemoryeduDesktop Computing

Information Technology at Emory

Oracle Names to Oracle Internet DirectoryMark Parten

Information Technology at Emory

Self-Service Vulnerability Scanning

A new service from your ITD Security Team

Information Technology at Emory

Information Technology DivisionTechnical Services

Introductionbull Utilizes the Nessus Vulnerability Scanning

Toolbull Specifically for use by System Administrators

and Local Support Personnelbull Can scan both desktop and server machinesbull Reports vulnerabilities and gives possible

solutions fixes

Information Technology at Emory

Information Technology DivisionTechnical Services

Getting Startedbull For more information on requesting the

ability to do a Self-Service Scan go to the following URL

httpitemoryedushowdoccfmdocid=4248

bull The ITD Security Team will work with System Administrators and Local Support Personnel to get them set up and scanning once a request has been received

Information Technology at Emory

Information Technology DivisionTechnical Services

OverviewNetwork Vulnerability Scanning Self-Service

Overview FAQ

ITD Security offers Network Vulnerability Scanning Self-Service using Nessus from a centralized scanning server in the DMZ To request the ability to scan your network please send the following information to the security team at SecurityTeam-Llistservemoryedu 1 Name and organization you support2 The IP address range on your network that you would like to scan3 Phone number and e-mail address4 Your network ID

We will confirm this information send a link for the latest Nessus scanning client and provide a password to use when you connect to the system

Information Technology at Emory

Information Technology DivisionTechnical Services

How tobull Use GUI to connect to the Scanning

Serverbull Use network ID and Nessus

password to authenticatebull Create scan session (which nodes

options etc)bull Run scan view results create report

Information Technology at Emory

Information Technology DivisionTechnical Services

Documentation

Can be found at

httpwwwnessusorgdocumentation

Information Technology at Emory

Information Technology DivisionTechnical Services

Self-Service Scanning

QuestionsQuestions

Information Technology at Emory

Information Technology DivisionTechnical Services

NetCom

QuestionsQuestions

  • IT Briefing Agenda 12005
  • Symantec Enterprise Security Architecture
  • Symantec Enterprise Security Architecture Presentation Outline
  • AntiVirus Spring 2005
  • Managed AV
  • Slide 6
  • SESA
  • SESA Architecture
  • Event Manager for Antivirus
  • SESA with Event Manager
  • SESA DEMO
  • SESA Requirements
  • SESA Procedure
  • SESA Procedure (cont)
  • Slide 15
  • Client Services Update
  • Discontinuing Support For Windows 98 and Mac OS 9
  • Windows 98 Support from Microsoft
  • Proposed End of Support
  • Impact of discontinuation of stated OS support
  • Impact
  • Proposed Communication Plan
  • Oracle Names to Oracle Internet Directory
  • Self-Service Vulnerability Scanning
  • Introduction
  • Getting Started
  • Overview
  • How to
  • Documentation
  • Self-Service Scanning
  • NetCom
Page 18: IT Briefing Agenda 1/20/05

Information Technology at Emory

Information Technology DivisionTechnical Services

Windows 98 Support from Microsoft

OPERATING SYSTEM

bull Windows 98bull Windows 98 SEbull Windows ME

END OF SUPPORT

bull June 30 2002bull June 30 2002bull December 31

2003Only paid incident support is available until December 31 2006httpsupportmicrosoftcomdefaultaspxscid=fh[ln]LifeWinhttpsupportmicrosoftcomgplifean1

Information Technology at Emory

Information Technology DivisionTechnical Services

Proposed End of Supportbull We propose to end support for

Mac OS 9x Windows 98 98 SE and Windows ME on May 31st 2005

Information Technology at Emory

Information Technology DivisionTechnical Services

Impact of discontinuation of stated OS support

bull No phone or desktop support from ITD would be provided for customers running Win 98 Win 98 2nd ed ME Mac OS 9x

bull No support provided for ITD applications running on stated OS

bull Development of installers would not be written for above OS

bull Enterprise applications and continuing development would not need to consider the above OSes as included in the technical specifications

Information Technology at Emory

Information Technology DivisionTechnical Services

Impactbull There should be no immediate effect on

users There is no immediate plan to change services so that they are incompatible with these Windows and Macintosh Operating Systems

bull Users should expect that newer applications introduced in the preceding months may not operate on older systems and may require Windows 2000 or Mac OS 102 or higher

Information Technology at Emory

Information Technology DivisionTechnical Services

Proposed Communication Plan

bull present at IT Briefing January 2005bull present at Desknet in January 2005bull prepare announcement to end users mid-Februarybull post announcement in ERWheel FebruaryMarchbull email to Local-l All-emory various Learnlink

conferences (LL Demigods SCC Technology and Emory Announcements) last business day of Jan Feb Mar Apr

bull post on defined page on itemoryeduDesktop Computing

Information Technology at Emory

Oracle Names to Oracle Internet DirectoryMark Parten

Information Technology at Emory

Self-Service Vulnerability Scanning

A new service from your ITD Security Team

Information Technology at Emory

Information Technology DivisionTechnical Services

Introductionbull Utilizes the Nessus Vulnerability Scanning

Toolbull Specifically for use by System Administrators

and Local Support Personnelbull Can scan both desktop and server machinesbull Reports vulnerabilities and gives possible

solutions fixes

Information Technology at Emory

Information Technology DivisionTechnical Services

Getting Startedbull For more information on requesting the

ability to do a Self-Service Scan go to the following URL

httpitemoryedushowdoccfmdocid=4248

bull The ITD Security Team will work with System Administrators and Local Support Personnel to get them set up and scanning once a request has been received

Information Technology at Emory

Information Technology DivisionTechnical Services

OverviewNetwork Vulnerability Scanning Self-Service

Overview FAQ

ITD Security offers Network Vulnerability Scanning Self-Service using Nessus from a centralized scanning server in the DMZ To request the ability to scan your network please send the following information to the security team at SecurityTeam-Llistservemoryedu 1 Name and organization you support2 The IP address range on your network that you would like to scan3 Phone number and e-mail address4 Your network ID

We will confirm this information send a link for the latest Nessus scanning client and provide a password to use when you connect to the system

Information Technology at Emory

Information Technology DivisionTechnical Services

How tobull Use GUI to connect to the Scanning

Serverbull Use network ID and Nessus

password to authenticatebull Create scan session (which nodes

options etc)bull Run scan view results create report

Information Technology at Emory

Information Technology DivisionTechnical Services

Documentation

Can be found at

httpwwwnessusorgdocumentation

Information Technology at Emory

Information Technology DivisionTechnical Services

Self-Service Scanning

QuestionsQuestions

Information Technology at Emory

Information Technology DivisionTechnical Services

NetCom

QuestionsQuestions

  • IT Briefing Agenda 12005
  • Symantec Enterprise Security Architecture
  • Symantec Enterprise Security Architecture Presentation Outline
  • AntiVirus Spring 2005
  • Managed AV
  • Slide 6
  • SESA
  • SESA Architecture
  • Event Manager for Antivirus
  • SESA with Event Manager
  • SESA DEMO
  • SESA Requirements
  • SESA Procedure
  • SESA Procedure (cont)
  • Slide 15
  • Client Services Update
  • Discontinuing Support For Windows 98 and Mac OS 9
  • Windows 98 Support from Microsoft
  • Proposed End of Support
  • Impact of discontinuation of stated OS support
  • Impact
  • Proposed Communication Plan
  • Oracle Names to Oracle Internet Directory
  • Self-Service Vulnerability Scanning
  • Introduction
  • Getting Started
  • Overview
  • How to
  • Documentation
  • Self-Service Scanning
  • NetCom
Page 19: IT Briefing Agenda 1/20/05

Information Technology at Emory

Information Technology DivisionTechnical Services

Proposed End of Supportbull We propose to end support for

Mac OS 9x Windows 98 98 SE and Windows ME on May 31st 2005

Information Technology at Emory

Information Technology DivisionTechnical Services

Impact of discontinuation of stated OS support

bull No phone or desktop support from ITD would be provided for customers running Win 98 Win 98 2nd ed ME Mac OS 9x

bull No support provided for ITD applications running on stated OS

bull Development of installers would not be written for above OS

bull Enterprise applications and continuing development would not need to consider the above OSes as included in the technical specifications

Information Technology at Emory

Information Technology DivisionTechnical Services

Impactbull There should be no immediate effect on

users There is no immediate plan to change services so that they are incompatible with these Windows and Macintosh Operating Systems

bull Users should expect that newer applications introduced in the preceding months may not operate on older systems and may require Windows 2000 or Mac OS 102 or higher

Information Technology at Emory

Information Technology DivisionTechnical Services

Proposed Communication Plan

bull present at IT Briefing January 2005bull present at Desknet in January 2005bull prepare announcement to end users mid-Februarybull post announcement in ERWheel FebruaryMarchbull email to Local-l All-emory various Learnlink

conferences (LL Demigods SCC Technology and Emory Announcements) last business day of Jan Feb Mar Apr

bull post on defined page on itemoryeduDesktop Computing

Information Technology at Emory

Oracle Names to Oracle Internet DirectoryMark Parten

Information Technology at Emory

Self-Service Vulnerability Scanning

A new service from your ITD Security Team

Information Technology at Emory

Information Technology DivisionTechnical Services

Introductionbull Utilizes the Nessus Vulnerability Scanning

Toolbull Specifically for use by System Administrators

and Local Support Personnelbull Can scan both desktop and server machinesbull Reports vulnerabilities and gives possible

solutions fixes

Information Technology at Emory

Information Technology DivisionTechnical Services

Getting Startedbull For more information on requesting the

ability to do a Self-Service Scan go to the following URL

httpitemoryedushowdoccfmdocid=4248

bull The ITD Security Team will work with System Administrators and Local Support Personnel to get them set up and scanning once a request has been received

Information Technology at Emory

Information Technology DivisionTechnical Services

OverviewNetwork Vulnerability Scanning Self-Service

Overview FAQ

ITD Security offers Network Vulnerability Scanning Self-Service using Nessus from a centralized scanning server in the DMZ To request the ability to scan your network please send the following information to the security team at SecurityTeam-Llistservemoryedu 1 Name and organization you support2 The IP address range on your network that you would like to scan3 Phone number and e-mail address4 Your network ID

We will confirm this information send a link for the latest Nessus scanning client and provide a password to use when you connect to the system

Information Technology at Emory

Information Technology DivisionTechnical Services

How tobull Use GUI to connect to the Scanning

Serverbull Use network ID and Nessus

password to authenticatebull Create scan session (which nodes

options etc)bull Run scan view results create report

Information Technology at Emory

Information Technology DivisionTechnical Services

Documentation

Can be found at

httpwwwnessusorgdocumentation

Information Technology at Emory

Information Technology DivisionTechnical Services

Self-Service Scanning

QuestionsQuestions

Information Technology at Emory

Information Technology DivisionTechnical Services

NetCom

QuestionsQuestions

  • IT Briefing Agenda 12005
  • Symantec Enterprise Security Architecture
  • Symantec Enterprise Security Architecture Presentation Outline
  • AntiVirus Spring 2005
  • Managed AV
  • Slide 6
  • SESA
  • SESA Architecture
  • Event Manager for Antivirus
  • SESA with Event Manager
  • SESA DEMO
  • SESA Requirements
  • SESA Procedure
  • SESA Procedure (cont)
  • Slide 15
  • Client Services Update
  • Discontinuing Support For Windows 98 and Mac OS 9
  • Windows 98 Support from Microsoft
  • Proposed End of Support
  • Impact of discontinuation of stated OS support
  • Impact
  • Proposed Communication Plan
  • Oracle Names to Oracle Internet Directory
  • Self-Service Vulnerability Scanning
  • Introduction
  • Getting Started
  • Overview
  • How to
  • Documentation
  • Self-Service Scanning
  • NetCom
Page 20: IT Briefing Agenda 1/20/05

Information Technology at Emory

Information Technology DivisionTechnical Services

Impact of discontinuation of stated OS support

bull No phone or desktop support from ITD would be provided for customers running Win 98 Win 98 2nd ed ME Mac OS 9x

bull No support provided for ITD applications running on stated OS

bull Development of installers would not be written for above OS

bull Enterprise applications and continuing development would not need to consider the above OSes as included in the technical specifications

Information Technology at Emory

Information Technology DivisionTechnical Services

Impactbull There should be no immediate effect on

users There is no immediate plan to change services so that they are incompatible with these Windows and Macintosh Operating Systems

bull Users should expect that newer applications introduced in the preceding months may not operate on older systems and may require Windows 2000 or Mac OS 102 or higher

Information Technology at Emory

Information Technology DivisionTechnical Services

Proposed Communication Plan

bull present at IT Briefing January 2005bull present at Desknet in January 2005bull prepare announcement to end users mid-Februarybull post announcement in ERWheel FebruaryMarchbull email to Local-l All-emory various Learnlink

conferences (LL Demigods SCC Technology and Emory Announcements) last business day of Jan Feb Mar Apr

bull post on defined page on itemoryeduDesktop Computing

Information Technology at Emory

Oracle Names to Oracle Internet DirectoryMark Parten

Information Technology at Emory

Self-Service Vulnerability Scanning

A new service from your ITD Security Team

Information Technology at Emory

Information Technology DivisionTechnical Services

Introductionbull Utilizes the Nessus Vulnerability Scanning

Toolbull Specifically for use by System Administrators

and Local Support Personnelbull Can scan both desktop and server machinesbull Reports vulnerabilities and gives possible

solutions fixes

Information Technology at Emory

Information Technology DivisionTechnical Services

Getting Startedbull For more information on requesting the

ability to do a Self-Service Scan go to the following URL

httpitemoryedushowdoccfmdocid=4248

bull The ITD Security Team will work with System Administrators and Local Support Personnel to get them set up and scanning once a request has been received

Information Technology at Emory

Information Technology DivisionTechnical Services

OverviewNetwork Vulnerability Scanning Self-Service

Overview FAQ

ITD Security offers Network Vulnerability Scanning Self-Service using Nessus from a centralized scanning server in the DMZ To request the ability to scan your network please send the following information to the security team at SecurityTeam-Llistservemoryedu 1 Name and organization you support2 The IP address range on your network that you would like to scan3 Phone number and e-mail address4 Your network ID

We will confirm this information send a link for the latest Nessus scanning client and provide a password to use when you connect to the system

Information Technology at Emory

Information Technology DivisionTechnical Services

How tobull Use GUI to connect to the Scanning

Serverbull Use network ID and Nessus

password to authenticatebull Create scan session (which nodes

options etc)bull Run scan view results create report

Information Technology at Emory

Information Technology DivisionTechnical Services

Documentation

Can be found at

httpwwwnessusorgdocumentation

Information Technology at Emory

Information Technology DivisionTechnical Services

Self-Service Scanning

QuestionsQuestions

Information Technology at Emory

Information Technology DivisionTechnical Services

NetCom

QuestionsQuestions

  • IT Briefing Agenda 12005
  • Symantec Enterprise Security Architecture
  • Symantec Enterprise Security Architecture Presentation Outline
  • AntiVirus Spring 2005
  • Managed AV
  • Slide 6
  • SESA
  • SESA Architecture
  • Event Manager for Antivirus
  • SESA with Event Manager
  • SESA DEMO
  • SESA Requirements
  • SESA Procedure
  • SESA Procedure (cont)
  • Slide 15
  • Client Services Update
  • Discontinuing Support For Windows 98 and Mac OS 9
  • Windows 98 Support from Microsoft
  • Proposed End of Support
  • Impact of discontinuation of stated OS support
  • Impact
  • Proposed Communication Plan
  • Oracle Names to Oracle Internet Directory
  • Self-Service Vulnerability Scanning
  • Introduction
  • Getting Started
  • Overview
  • How to
  • Documentation
  • Self-Service Scanning
  • NetCom
Page 21: IT Briefing Agenda 1/20/05

Information Technology at Emory

Information Technology DivisionTechnical Services

Impactbull There should be no immediate effect on

users There is no immediate plan to change services so that they are incompatible with these Windows and Macintosh Operating Systems

bull Users should expect that newer applications introduced in the preceding months may not operate on older systems and may require Windows 2000 or Mac OS 102 or higher

Information Technology at Emory

Information Technology DivisionTechnical Services

Proposed Communication Plan

bull present at IT Briefing January 2005bull present at Desknet in January 2005bull prepare announcement to end users mid-Februarybull post announcement in ERWheel FebruaryMarchbull email to Local-l All-emory various Learnlink

conferences (LL Demigods SCC Technology and Emory Announcements) last business day of Jan Feb Mar Apr

bull post on defined page on itemoryeduDesktop Computing

Information Technology at Emory

Oracle Names to Oracle Internet DirectoryMark Parten

Information Technology at Emory

Self-Service Vulnerability Scanning

A new service from your ITD Security Team

Information Technology at Emory

Information Technology DivisionTechnical Services

Introductionbull Utilizes the Nessus Vulnerability Scanning

Toolbull Specifically for use by System Administrators

and Local Support Personnelbull Can scan both desktop and server machinesbull Reports vulnerabilities and gives possible

solutions fixes

Information Technology at Emory

Information Technology DivisionTechnical Services

Getting Startedbull For more information on requesting the

ability to do a Self-Service Scan go to the following URL

httpitemoryedushowdoccfmdocid=4248

bull The ITD Security Team will work with System Administrators and Local Support Personnel to get them set up and scanning once a request has been received

Information Technology at Emory

Information Technology DivisionTechnical Services

OverviewNetwork Vulnerability Scanning Self-Service

Overview FAQ

ITD Security offers Network Vulnerability Scanning Self-Service using Nessus from a centralized scanning server in the DMZ To request the ability to scan your network please send the following information to the security team at SecurityTeam-Llistservemoryedu 1 Name and organization you support2 The IP address range on your network that you would like to scan3 Phone number and e-mail address4 Your network ID

We will confirm this information send a link for the latest Nessus scanning client and provide a password to use when you connect to the system

Information Technology at Emory

Information Technology DivisionTechnical Services

How tobull Use GUI to connect to the Scanning

Serverbull Use network ID and Nessus

password to authenticatebull Create scan session (which nodes

options etc)bull Run scan view results create report

Information Technology at Emory

Information Technology DivisionTechnical Services

Documentation

Can be found at

httpwwwnessusorgdocumentation

Information Technology at Emory

Information Technology DivisionTechnical Services

Self-Service Scanning

QuestionsQuestions

Information Technology at Emory

Information Technology DivisionTechnical Services

NetCom

QuestionsQuestions

  • IT Briefing Agenda 12005
  • Symantec Enterprise Security Architecture
  • Symantec Enterprise Security Architecture Presentation Outline
  • AntiVirus Spring 2005
  • Managed AV
  • Slide 6
  • SESA
  • SESA Architecture
  • Event Manager for Antivirus
  • SESA with Event Manager
  • SESA DEMO
  • SESA Requirements
  • SESA Procedure
  • SESA Procedure (cont)
  • Slide 15
  • Client Services Update
  • Discontinuing Support For Windows 98 and Mac OS 9
  • Windows 98 Support from Microsoft
  • Proposed End of Support
  • Impact of discontinuation of stated OS support
  • Impact
  • Proposed Communication Plan
  • Oracle Names to Oracle Internet Directory
  • Self-Service Vulnerability Scanning
  • Introduction
  • Getting Started
  • Overview
  • How to
  • Documentation
  • Self-Service Scanning
  • NetCom
Page 22: IT Briefing Agenda 1/20/05

Information Technology at Emory

Information Technology DivisionTechnical Services

Proposed Communication Plan

bull present at IT Briefing January 2005bull present at Desknet in January 2005bull prepare announcement to end users mid-Februarybull post announcement in ERWheel FebruaryMarchbull email to Local-l All-emory various Learnlink

conferences (LL Demigods SCC Technology and Emory Announcements) last business day of Jan Feb Mar Apr

bull post on defined page on itemoryeduDesktop Computing

Information Technology at Emory

Oracle Names to Oracle Internet DirectoryMark Parten

Information Technology at Emory

Self-Service Vulnerability Scanning

A new service from your ITD Security Team

Information Technology at Emory

Information Technology DivisionTechnical Services

Introductionbull Utilizes the Nessus Vulnerability Scanning

Toolbull Specifically for use by System Administrators

and Local Support Personnelbull Can scan both desktop and server machinesbull Reports vulnerabilities and gives possible

solutions fixes

Information Technology at Emory

Information Technology DivisionTechnical Services

Getting Startedbull For more information on requesting the

ability to do a Self-Service Scan go to the following URL

httpitemoryedushowdoccfmdocid=4248

bull The ITD Security Team will work with System Administrators and Local Support Personnel to get them set up and scanning once a request has been received

Information Technology at Emory

Information Technology DivisionTechnical Services

OverviewNetwork Vulnerability Scanning Self-Service

Overview FAQ

ITD Security offers Network Vulnerability Scanning Self-Service using Nessus from a centralized scanning server in the DMZ To request the ability to scan your network please send the following information to the security team at SecurityTeam-Llistservemoryedu 1 Name and organization you support2 The IP address range on your network that you would like to scan3 Phone number and e-mail address4 Your network ID

We will confirm this information send a link for the latest Nessus scanning client and provide a password to use when you connect to the system

Information Technology at Emory

Information Technology DivisionTechnical Services

How tobull Use GUI to connect to the Scanning

Serverbull Use network ID and Nessus

password to authenticatebull Create scan session (which nodes

options etc)bull Run scan view results create report

Information Technology at Emory

Information Technology DivisionTechnical Services

Documentation

Can be found at

httpwwwnessusorgdocumentation

Information Technology at Emory

Information Technology DivisionTechnical Services

Self-Service Scanning

QuestionsQuestions

Information Technology at Emory

Information Technology DivisionTechnical Services

NetCom

QuestionsQuestions

  • IT Briefing Agenda 12005
  • Symantec Enterprise Security Architecture
  • Symantec Enterprise Security Architecture Presentation Outline
  • AntiVirus Spring 2005
  • Managed AV
  • Slide 6
  • SESA
  • SESA Architecture
  • Event Manager for Antivirus
  • SESA with Event Manager
  • SESA DEMO
  • SESA Requirements
  • SESA Procedure
  • SESA Procedure (cont)
  • Slide 15
  • Client Services Update
  • Discontinuing Support For Windows 98 and Mac OS 9
  • Windows 98 Support from Microsoft
  • Proposed End of Support
  • Impact of discontinuation of stated OS support
  • Impact
  • Proposed Communication Plan
  • Oracle Names to Oracle Internet Directory
  • Self-Service Vulnerability Scanning
  • Introduction
  • Getting Started
  • Overview
  • How to
  • Documentation
  • Self-Service Scanning
  • NetCom
Page 23: IT Briefing Agenda 1/20/05

Information Technology at Emory

Oracle Names to Oracle Internet DirectoryMark Parten

Information Technology at Emory

Self-Service Vulnerability Scanning

A new service from your ITD Security Team

Information Technology at Emory

Information Technology DivisionTechnical Services

Introductionbull Utilizes the Nessus Vulnerability Scanning

Toolbull Specifically for use by System Administrators

and Local Support Personnelbull Can scan both desktop and server machinesbull Reports vulnerabilities and gives possible

solutions fixes

Information Technology at Emory

Information Technology DivisionTechnical Services

Getting Startedbull For more information on requesting the

ability to do a Self-Service Scan go to the following URL

httpitemoryedushowdoccfmdocid=4248

bull The ITD Security Team will work with System Administrators and Local Support Personnel to get them set up and scanning once a request has been received

Information Technology at Emory

Information Technology DivisionTechnical Services

OverviewNetwork Vulnerability Scanning Self-Service

Overview FAQ

ITD Security offers Network Vulnerability Scanning Self-Service using Nessus from a centralized scanning server in the DMZ To request the ability to scan your network please send the following information to the security team at SecurityTeam-Llistservemoryedu 1 Name and organization you support2 The IP address range on your network that you would like to scan3 Phone number and e-mail address4 Your network ID

We will confirm this information send a link for the latest Nessus scanning client and provide a password to use when you connect to the system

Information Technology at Emory

Information Technology DivisionTechnical Services

How tobull Use GUI to connect to the Scanning

Serverbull Use network ID and Nessus

password to authenticatebull Create scan session (which nodes

options etc)bull Run scan view results create report

Information Technology at Emory

Information Technology DivisionTechnical Services

Documentation

Can be found at

httpwwwnessusorgdocumentation

Information Technology at Emory

Information Technology DivisionTechnical Services

Self-Service Scanning

QuestionsQuestions

Information Technology at Emory

Information Technology DivisionTechnical Services

NetCom

QuestionsQuestions

  • IT Briefing Agenda 12005
  • Symantec Enterprise Security Architecture
  • Symantec Enterprise Security Architecture Presentation Outline
  • AntiVirus Spring 2005
  • Managed AV
  • Slide 6
  • SESA
  • SESA Architecture
  • Event Manager for Antivirus
  • SESA with Event Manager
  • SESA DEMO
  • SESA Requirements
  • SESA Procedure
  • SESA Procedure (cont)
  • Slide 15
  • Client Services Update
  • Discontinuing Support For Windows 98 and Mac OS 9
  • Windows 98 Support from Microsoft
  • Proposed End of Support
  • Impact of discontinuation of stated OS support
  • Impact
  • Proposed Communication Plan
  • Oracle Names to Oracle Internet Directory
  • Self-Service Vulnerability Scanning
  • Introduction
  • Getting Started
  • Overview
  • How to
  • Documentation
  • Self-Service Scanning
  • NetCom
Page 24: IT Briefing Agenda 1/20/05

Information Technology at Emory

Self-Service Vulnerability Scanning

A new service from your ITD Security Team

Information Technology at Emory

Information Technology DivisionTechnical Services

Introductionbull Utilizes the Nessus Vulnerability Scanning

Toolbull Specifically for use by System Administrators

and Local Support Personnelbull Can scan both desktop and server machinesbull Reports vulnerabilities and gives possible

solutions fixes

Information Technology at Emory

Information Technology DivisionTechnical Services

Getting Startedbull For more information on requesting the

ability to do a Self-Service Scan go to the following URL

httpitemoryedushowdoccfmdocid=4248

bull The ITD Security Team will work with System Administrators and Local Support Personnel to get them set up and scanning once a request has been received

Information Technology at Emory

Information Technology DivisionTechnical Services

OverviewNetwork Vulnerability Scanning Self-Service

Overview FAQ

ITD Security offers Network Vulnerability Scanning Self-Service using Nessus from a centralized scanning server in the DMZ To request the ability to scan your network please send the following information to the security team at SecurityTeam-Llistservemoryedu 1 Name and organization you support2 The IP address range on your network that you would like to scan3 Phone number and e-mail address4 Your network ID

We will confirm this information send a link for the latest Nessus scanning client and provide a password to use when you connect to the system

Information Technology at Emory

Information Technology DivisionTechnical Services

How tobull Use GUI to connect to the Scanning

Serverbull Use network ID and Nessus

password to authenticatebull Create scan session (which nodes

options etc)bull Run scan view results create report

Information Technology at Emory

Information Technology DivisionTechnical Services

Documentation

Can be found at

httpwwwnessusorgdocumentation

Information Technology at Emory

Information Technology DivisionTechnical Services

Self-Service Scanning

QuestionsQuestions

Information Technology at Emory

Information Technology DivisionTechnical Services

NetCom

QuestionsQuestions

  • IT Briefing Agenda 12005
  • Symantec Enterprise Security Architecture
  • Symantec Enterprise Security Architecture Presentation Outline
  • AntiVirus Spring 2005
  • Managed AV
  • Slide 6
  • SESA
  • SESA Architecture
  • Event Manager for Antivirus
  • SESA with Event Manager
  • SESA DEMO
  • SESA Requirements
  • SESA Procedure
  • SESA Procedure (cont)
  • Slide 15
  • Client Services Update
  • Discontinuing Support For Windows 98 and Mac OS 9
  • Windows 98 Support from Microsoft
  • Proposed End of Support
  • Impact of discontinuation of stated OS support
  • Impact
  • Proposed Communication Plan
  • Oracle Names to Oracle Internet Directory
  • Self-Service Vulnerability Scanning
  • Introduction
  • Getting Started
  • Overview
  • How to
  • Documentation
  • Self-Service Scanning
  • NetCom
Page 25: IT Briefing Agenda 1/20/05

Information Technology at Emory

Information Technology DivisionTechnical Services

Introductionbull Utilizes the Nessus Vulnerability Scanning

Toolbull Specifically for use by System Administrators

and Local Support Personnelbull Can scan both desktop and server machinesbull Reports vulnerabilities and gives possible

solutions fixes

Information Technology at Emory

Information Technology DivisionTechnical Services

Getting Startedbull For more information on requesting the

ability to do a Self-Service Scan go to the following URL

httpitemoryedushowdoccfmdocid=4248

bull The ITD Security Team will work with System Administrators and Local Support Personnel to get them set up and scanning once a request has been received

Information Technology at Emory

Information Technology DivisionTechnical Services

OverviewNetwork Vulnerability Scanning Self-Service

Overview FAQ

ITD Security offers Network Vulnerability Scanning Self-Service using Nessus from a centralized scanning server in the DMZ To request the ability to scan your network please send the following information to the security team at SecurityTeam-Llistservemoryedu 1 Name and organization you support2 The IP address range on your network that you would like to scan3 Phone number and e-mail address4 Your network ID

We will confirm this information send a link for the latest Nessus scanning client and provide a password to use when you connect to the system

Information Technology at Emory

Information Technology DivisionTechnical Services

How tobull Use GUI to connect to the Scanning

Serverbull Use network ID and Nessus

password to authenticatebull Create scan session (which nodes

options etc)bull Run scan view results create report

Information Technology at Emory

Information Technology DivisionTechnical Services

Documentation

Can be found at

httpwwwnessusorgdocumentation

Information Technology at Emory

Information Technology DivisionTechnical Services

Self-Service Scanning

QuestionsQuestions

Information Technology at Emory

Information Technology DivisionTechnical Services

NetCom

QuestionsQuestions

  • IT Briefing Agenda 12005
  • Symantec Enterprise Security Architecture
  • Symantec Enterprise Security Architecture Presentation Outline
  • AntiVirus Spring 2005
  • Managed AV
  • Slide 6
  • SESA
  • SESA Architecture
  • Event Manager for Antivirus
  • SESA with Event Manager
  • SESA DEMO
  • SESA Requirements
  • SESA Procedure
  • SESA Procedure (cont)
  • Slide 15
  • Client Services Update
  • Discontinuing Support For Windows 98 and Mac OS 9
  • Windows 98 Support from Microsoft
  • Proposed End of Support
  • Impact of discontinuation of stated OS support
  • Impact
  • Proposed Communication Plan
  • Oracle Names to Oracle Internet Directory
  • Self-Service Vulnerability Scanning
  • Introduction
  • Getting Started
  • Overview
  • How to
  • Documentation
  • Self-Service Scanning
  • NetCom
Page 26: IT Briefing Agenda 1/20/05

Information Technology at Emory

Information Technology DivisionTechnical Services

Getting Startedbull For more information on requesting the

ability to do a Self-Service Scan go to the following URL

httpitemoryedushowdoccfmdocid=4248

bull The ITD Security Team will work with System Administrators and Local Support Personnel to get them set up and scanning once a request has been received

Information Technology at Emory

Information Technology DivisionTechnical Services

OverviewNetwork Vulnerability Scanning Self-Service

Overview FAQ

ITD Security offers Network Vulnerability Scanning Self-Service using Nessus from a centralized scanning server in the DMZ To request the ability to scan your network please send the following information to the security team at SecurityTeam-Llistservemoryedu 1 Name and organization you support2 The IP address range on your network that you would like to scan3 Phone number and e-mail address4 Your network ID

We will confirm this information send a link for the latest Nessus scanning client and provide a password to use when you connect to the system

Information Technology at Emory

Information Technology DivisionTechnical Services

How tobull Use GUI to connect to the Scanning

Serverbull Use network ID and Nessus

password to authenticatebull Create scan session (which nodes

options etc)bull Run scan view results create report

Information Technology at Emory

Information Technology DivisionTechnical Services

Documentation

Can be found at

httpwwwnessusorgdocumentation

Information Technology at Emory

Information Technology DivisionTechnical Services

Self-Service Scanning

QuestionsQuestions

Information Technology at Emory

Information Technology DivisionTechnical Services

NetCom

QuestionsQuestions

  • IT Briefing Agenda 12005
  • Symantec Enterprise Security Architecture
  • Symantec Enterprise Security Architecture Presentation Outline
  • AntiVirus Spring 2005
  • Managed AV
  • Slide 6
  • SESA
  • SESA Architecture
  • Event Manager for Antivirus
  • SESA with Event Manager
  • SESA DEMO
  • SESA Requirements
  • SESA Procedure
  • SESA Procedure (cont)
  • Slide 15
  • Client Services Update
  • Discontinuing Support For Windows 98 and Mac OS 9
  • Windows 98 Support from Microsoft
  • Proposed End of Support
  • Impact of discontinuation of stated OS support
  • Impact
  • Proposed Communication Plan
  • Oracle Names to Oracle Internet Directory
  • Self-Service Vulnerability Scanning
  • Introduction
  • Getting Started
  • Overview
  • How to
  • Documentation
  • Self-Service Scanning
  • NetCom
Page 27: IT Briefing Agenda 1/20/05

Information Technology at Emory

Information Technology DivisionTechnical Services

OverviewNetwork Vulnerability Scanning Self-Service

Overview FAQ

ITD Security offers Network Vulnerability Scanning Self-Service using Nessus from a centralized scanning server in the DMZ To request the ability to scan your network please send the following information to the security team at SecurityTeam-Llistservemoryedu 1 Name and organization you support2 The IP address range on your network that you would like to scan3 Phone number and e-mail address4 Your network ID

We will confirm this information send a link for the latest Nessus scanning client and provide a password to use when you connect to the system

Information Technology at Emory

Information Technology DivisionTechnical Services

How tobull Use GUI to connect to the Scanning

Serverbull Use network ID and Nessus

password to authenticatebull Create scan session (which nodes

options etc)bull Run scan view results create report

Information Technology at Emory

Information Technology DivisionTechnical Services

Documentation

Can be found at

httpwwwnessusorgdocumentation

Information Technology at Emory

Information Technology DivisionTechnical Services

Self-Service Scanning

QuestionsQuestions

Information Technology at Emory

Information Technology DivisionTechnical Services

NetCom

QuestionsQuestions

  • IT Briefing Agenda 12005
  • Symantec Enterprise Security Architecture
  • Symantec Enterprise Security Architecture Presentation Outline
  • AntiVirus Spring 2005
  • Managed AV
  • Slide 6
  • SESA
  • SESA Architecture
  • Event Manager for Antivirus
  • SESA with Event Manager
  • SESA DEMO
  • SESA Requirements
  • SESA Procedure
  • SESA Procedure (cont)
  • Slide 15
  • Client Services Update
  • Discontinuing Support For Windows 98 and Mac OS 9
  • Windows 98 Support from Microsoft
  • Proposed End of Support
  • Impact of discontinuation of stated OS support
  • Impact
  • Proposed Communication Plan
  • Oracle Names to Oracle Internet Directory
  • Self-Service Vulnerability Scanning
  • Introduction
  • Getting Started
  • Overview
  • How to
  • Documentation
  • Self-Service Scanning
  • NetCom
Page 28: IT Briefing Agenda 1/20/05

Information Technology at Emory

Information Technology DivisionTechnical Services

How tobull Use GUI to connect to the Scanning

Serverbull Use network ID and Nessus

password to authenticatebull Create scan session (which nodes

options etc)bull Run scan view results create report

Information Technology at Emory

Information Technology DivisionTechnical Services

Documentation

Can be found at

httpwwwnessusorgdocumentation

Information Technology at Emory

Information Technology DivisionTechnical Services

Self-Service Scanning

QuestionsQuestions

Information Technology at Emory

Information Technology DivisionTechnical Services

NetCom

QuestionsQuestions

  • IT Briefing Agenda 12005
  • Symantec Enterprise Security Architecture
  • Symantec Enterprise Security Architecture Presentation Outline
  • AntiVirus Spring 2005
  • Managed AV
  • Slide 6
  • SESA
  • SESA Architecture
  • Event Manager for Antivirus
  • SESA with Event Manager
  • SESA DEMO
  • SESA Requirements
  • SESA Procedure
  • SESA Procedure (cont)
  • Slide 15
  • Client Services Update
  • Discontinuing Support For Windows 98 and Mac OS 9
  • Windows 98 Support from Microsoft
  • Proposed End of Support
  • Impact of discontinuation of stated OS support
  • Impact
  • Proposed Communication Plan
  • Oracle Names to Oracle Internet Directory
  • Self-Service Vulnerability Scanning
  • Introduction
  • Getting Started
  • Overview
  • How to
  • Documentation
  • Self-Service Scanning
  • NetCom
Page 29: IT Briefing Agenda 1/20/05

Information Technology at Emory

Information Technology DivisionTechnical Services

Documentation

Can be found at

httpwwwnessusorgdocumentation

Information Technology at Emory

Information Technology DivisionTechnical Services

Self-Service Scanning

QuestionsQuestions

Information Technology at Emory

Information Technology DivisionTechnical Services

NetCom

QuestionsQuestions

  • IT Briefing Agenda 12005
  • Symantec Enterprise Security Architecture
  • Symantec Enterprise Security Architecture Presentation Outline
  • AntiVirus Spring 2005
  • Managed AV
  • Slide 6
  • SESA
  • SESA Architecture
  • Event Manager for Antivirus
  • SESA with Event Manager
  • SESA DEMO
  • SESA Requirements
  • SESA Procedure
  • SESA Procedure (cont)
  • Slide 15
  • Client Services Update
  • Discontinuing Support For Windows 98 and Mac OS 9
  • Windows 98 Support from Microsoft
  • Proposed End of Support
  • Impact of discontinuation of stated OS support
  • Impact
  • Proposed Communication Plan
  • Oracle Names to Oracle Internet Directory
  • Self-Service Vulnerability Scanning
  • Introduction
  • Getting Started
  • Overview
  • How to
  • Documentation
  • Self-Service Scanning
  • NetCom
Page 30: IT Briefing Agenda 1/20/05

Information Technology at Emory

Information Technology DivisionTechnical Services

Self-Service Scanning

QuestionsQuestions

Information Technology at Emory

Information Technology DivisionTechnical Services

NetCom

QuestionsQuestions

  • IT Briefing Agenda 12005
  • Symantec Enterprise Security Architecture
  • Symantec Enterprise Security Architecture Presentation Outline
  • AntiVirus Spring 2005
  • Managed AV
  • Slide 6
  • SESA
  • SESA Architecture
  • Event Manager for Antivirus
  • SESA with Event Manager
  • SESA DEMO
  • SESA Requirements
  • SESA Procedure
  • SESA Procedure (cont)
  • Slide 15
  • Client Services Update
  • Discontinuing Support For Windows 98 and Mac OS 9
  • Windows 98 Support from Microsoft
  • Proposed End of Support
  • Impact of discontinuation of stated OS support
  • Impact
  • Proposed Communication Plan
  • Oracle Names to Oracle Internet Directory
  • Self-Service Vulnerability Scanning
  • Introduction
  • Getting Started
  • Overview
  • How to
  • Documentation
  • Self-Service Scanning
  • NetCom
Page 31: IT Briefing Agenda 1/20/05

Information Technology at Emory

Information Technology DivisionTechnical Services

NetCom

QuestionsQuestions

  • IT Briefing Agenda 12005
  • Symantec Enterprise Security Architecture
  • Symantec Enterprise Security Architecture Presentation Outline
  • AntiVirus Spring 2005
  • Managed AV
  • Slide 6
  • SESA
  • SESA Architecture
  • Event Manager for Antivirus
  • SESA with Event Manager
  • SESA DEMO
  • SESA Requirements
  • SESA Procedure
  • SESA Procedure (cont)
  • Slide 15
  • Client Services Update
  • Discontinuing Support For Windows 98 and Mac OS 9
  • Windows 98 Support from Microsoft
  • Proposed End of Support
  • Impact of discontinuation of stated OS support
  • Impact
  • Proposed Communication Plan
  • Oracle Names to Oracle Internet Directory
  • Self-Service Vulnerability Scanning
  • Introduction
  • Getting Started
  • Overview
  • How to
  • Documentation
  • Self-Service Scanning
  • NetCom