Re: Internal Vulnerability Scanning for IBM-i

[John Jones <chianime@xxxxxxxxx>]

Server Hardening 101: Disable services you don't use & properly configure
the services you do use.

On Tue, Apr 10, 2012 at 8:46 AM, <ChadB@xxxxxxxxxxxxxxxxxxxx> wrote:

> Qualys should be capable of finding all sorts of issues on the IBM i
> servers at a network level... it should find config/version items with DNS
> BIND versions, mail forwarding settings, POP3 server related items, and a
> bunch of other possible items if they exist.  They won't be checking for 'i
> specific' vulnerabilities or settings, but Qualys will basically be running
> checks and exploits against an IP address and recording what's found.
>
>
>
> From:   Phil McCullough <Phil.McCullough@xxxxxxxx>
> To:     "'Midrange Systems Technical Discussion'"
>            <midrange-l@xxxxxxxxxxxx>
> Date:   04/09/2012 02:26 PM
> Subject:        Internal Vulnerability Scanning for IBM-i
> Sent by:        midrange-l-bounces@xxxxxxxxxxxx
>
>
>
> We're looking at purchasing the QUALLYS system for internal vulnerability
> scanning (PCI ya-know).
> They don't appear to be able to scan IBM-I's , but we noted that NESSUS
> just announced an IBM-I plug-in for this ($1,500/year).
> Our auditor told us that QUALYS was the industry leader, but scanning the
> IBM-I seems like something good practices would dictate.
> Anyone with experience with this. Any suggestions?
>
> Phil
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
>
>
>
> _____________________________________________________________________________
>
> Scanned by IBM Email Security Management Services powered by MessageLabs.
> For more information please visit
> http://www-935.ibm.com/services/us/index.wss/offerfamily/iss/a1026954
>
> _____________________________________________________________________________
>
>
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.