If the contents of the directories are comprised, there are not only infrastructure issues, but also potentially damaging security issues. Typically, all directory modifications should occur on one server per domain. However, sometimes administrators either forget to organize their changes, or can make changes that are not supposed to occur. Also, if a change is required for more than one server document, the administrator must update each document individually. Directory Attender can not only keep track of what has occurred within your directories, but also ensure that specified documents will be consistent in their values.
Click Here For More       Read White Paper

UpdateEXPERT recognized as best Service Pack Management Tool!
Windows & .NET magazine readers rate UpdateEXPERT the best. UpdateEXPERT is a remediation tool for patch management that evaluates networks for missing patches and remediates discovered weaknesses for increased network protection. UpdateEXPERT features an extensive patch management database of test results and analytical information that is completely maintained by St. Bernard Software's software patch experts.

By helping an enterprise identify missing patches and remediate with confidence, UpdateEXPERT enforces software security policies and provides a superior way of managing all hotfixes released. Supporting Windows NT/2000/XP, SQL Server, IE, and a long list of mission-critical applications, UpdateEXPERT enables you to research available fixes, scan your workstations and servers, deploy updates to any number of networked machines without remote agents, and validate that the job was done right.
Click Here For More     Read Review    Read the White Paper

Entercept Database Edition prevents attacks on MS SQL Servers
Most companies use Microsoft’s SQL Server 2000 database as the back-end database for IIS web servers. Most recently, Microsoft warned of five vulnerabilities in its SQL Server 2000 database product, the most serious of which could allow an attacker to take over the server. How do you protect the data and applications from being altered or accessed?

Entercept’s Database Edition provides enterprises a proven, easy-to-deploy method to protect assets and ensure database server integrity from both known and unknown attacks including SQL Injection attacks. Database Edition locks down the database to both enforce correct behavior and block abnormal behavior, making it the most powerful and comprehensive database protection available.
Click Here For More    Read The White Paper

NIST releases Security guidelines
The National Institute of Standards and Technology (NIST) has released final publications of four computer security guidelines. SP 800-47, Security Guide for Interconnecting Information Technology Systems, addresses interconnections between IT systems that are owned and operated by different organizations. SP 800-40, Procedures for Handling Security Patches, addresses the problem of ignored or improperly applied fixes for vulnerabilities and recommends ways to develop a patching and vulnerability policy. SP 800-51, Use of the Common Vulnerabilities and Exposures (CVE) Vulnerability Naming Scheme, recommends that federal agencies make use of CVE designations when acquiring or using CVE-compatible security-related products and services.
More at: http://csrc.nist.gov/publications/nistpubs