RE: Gartner Group: DO NOT USE IIS!

This is a multi-part message in MIME format.
--
[ Picked text/plain from multipart/alternative ]
That's not the point that Gartner are making. The specific threats they
are discussing are Red Worm and Nimda which are IIS specific. They don't
particularly care about your client unless you're running personal IIS
instances, sure you have to look after those anyway, but for other
reasons.

I'm not going to start this tired old thread again, but it is an
established fact that *nix servers are more secure than NT/2000 servers.
You're bound to ask me to back this up, so have a look at
http://www.unix-vs-nt.org/kirch/

Alistair

-----Original Message-----
From: Walden H. Leverich [mailto:WaldenL@TechSoftInc.com]
Sent: 26 September 2001 17:23
To: 'midrange-l@midrange.com'
Subject: RE: Gartner Group: DO NOT USE IIS!


Every time I read this quote I cringe. Let's consider, if I was running
say
Apache, or the native AS/400 HTTP server I would STILL have to patch all
my
PCs running IE (clients) and Outlook Express (again clients). So the
cost to
patch these pcs should not be included in the TCO of IIS since the cost
is
there regardless of the server used.

snip..

-----Original Message-----
From: Dennis Lovelady [mailto:dlovelady@dtcc.com]
Sent: Wednesday, September 26, 2001 9:40 AM
To: midrange-l@midrange.com
Subject: Re: Gartner Group: DO NOT USE IIS!



Hi, all:

Quoting Gartner
     To protect against Nimda, Microsoft recommends
     installing numerous patches and service packs on
     virtually every PC and server running IE, IIS Web
     servers or the Outlook Express e-mail client. As
     the earlier Code Red worm showed, many servers and
     PCs running IIS Web server processes may not be obvious
     since they may be run as personal Web servers on the
     intranet but still be exposed to the Internet.
End quote

Ummm... I have a slightly different suggestion.  For those applications
where AS/400 may not be a good fit, or may just be too expensive to
implement there....

Why patch MS to make it kinda-sorta reliable for the next few minutes?
Why
use MS at all?  Why does our user community and those who make the
decisions even CONSIDER putting up with the expense and problems of
trouble-prone MS products?

All of this stuff and much more is available for Linux and other flavors
of
Unix, and at prices that should scare the dickens out of Macro$loth
(frequently $0.00; invariably less than MS).  Also, have those
decision-making people not been watching the salary costs of MS "CEs"
vs. a
good System Administrator on ANY other platform?
   Number of unix systems impacted by IIS threats: 0.
   Number of unix systems impacted by the Code Red virus: 0

Dennis Lovelady
Accenture








"Norm Dennis" <wmss@iinet.net.au>@midrange.com on 09/26/2001 09:20:16 AM

Please respond to midrange-l@midrange.com

Sent by:  midrange-l-admin@midrange.com


To:   <midrange-l@midrange.com>
cc:
Subject:  Re: Gartner Group: DO NOT USE IIS!


This is a link to The Australian:

http://australianit.news.com.au/common/storyPage/0,3811,2937520%5E442,00
.htm
l



----- Original Message -----
From: "Schenck, Don" <Don.Schenck@pfizer.com>
Sent: Wednesday, 26 September 2001 20:56


Anyone else see the article in which it quotes the Gartner Group as
saying
companies should abandon IIS as quickly as possible?

As a Windows developer ... lemme tell ya ... truer words have never been
spoken.



_______________________________________________
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
To post a message email: MIDRANGE-L@midrange.com
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/cgi-bin/listinfo/midrange-l
or email: MIDRANGE-L-request@midrange.com
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.
_______________________________________________
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
To post a message email: MIDRANGE-L@midrange.com
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/cgi-bin/listinfo/midrange-l
or email: MIDRANGE-L-request@midrange.com
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.



**********************************************************************
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote also confirms that this email message has been swept by
MIMEsweeper for the presence of computer viruses.

www.mimesweeper.com
**********************************************************************