Symantec Management service from SNS

In an effort to gather more information on network threats
directly from
endpoint clients, and to help safeguard Symantec Client
Security
installations on the campus, System and Network Security is
offering a
new Symantec management service. For more information on
this service
please see: https://kb.berkeley.ed
u/kb1525

The new version on the Symantec Client Security software
that reports to
the SNS management console is now available in the
"early adopers"
section of
http://software-central.berkeley.edu/all/syman
tec+client+security.
Clients installing this version of Symantec will send their
anti-virus/firewall/IPS logs, as well as information on
Symantec
software and signature versions, to the SNS management
server. This
version is not affected by the recently announced Symantec
vulnerabilities, so older vulnerable clients can be updated
with this
installation. With the managed client, SNS will be able to
directly
report to security contacts if a client is running out of
date Symantec
software, which should greatly assist the upgrade process in
the future.

We would like to receive feedback from the campus community
during this
pilot period. If you are interested please install the
managed client on
campus hosts and let us know if you encounter any problems.
The software
will also work on home machines and laptops that roam on and
off the
campus network so try it on those machines as well. At the
conclusion of
the pilot, the default "current version" of
Symantec Client Security
(both on Software Central and the CB CD) will report to the
SNS manager.

For campus departments using their own Symantec management
servers, SNS
is operating a Symantec Reporting Server that can receive
logs from
local managers. Departments wishing to use this service will
be able to
run reports from the SNS Reporting Server for clients from
their
managers. Please contact us if you are interested in using
this service.

-- 
Allison Henry
System and Network Security
University of California, Berkeley
http://security.berkeley
.edu

------------------------------------------------------------
------------
The following was automatically added to this message by the
list server:

To learn more about Micronet, including how to subscribe to
or unsubscribe from its mailing list and how to find out
about upcoming meetings, please visit the Micronet Web
site:

http://micronet.berkele
y.edu/

Messages you send to this mailing list are public and
world-viewable,
and the list's archives can be browsed and searched on the
Internet.
This means these messages can be viewed by (among others)
your bosses,
prospective employers, and people who have known you in the
past.