Re: Whitelisting Pros & Cons? - Lumension

2011-11-15 Thread James Rankin 
Can't believe that AppSense AM isn't in there as one of the test subjects.
I think the issue is that most people use them for the Environment Manager
(EM) feature of the suite so AppSense are treated more as a competitor in
the UEM (User Environment Management) market rather than against other
applications that do whitelisting, but the whitelisting product is (IMHO)
their strongest. If they were willing to run the rule over AppLocker for
that survey, then AM should surely have been included - most people who
work with Application Manager brand it as "AppLocker on steroids", which is
slightly unfair seeing though it can do a lot more feature-wise.

On 15 November 2011 16:07, Stu Sjouwerman  wrote:

> 
>
> Anyone experience with Lumension? This seems to be one of the bigger
> players.
>
> Did some testing with this perhaps?
>
> ** **
>
> Warm regards,
>
> ** **
>
> Stu 
>
> ** **
>
> *From:* Joseph Heaton [mailto:jhea...@dfg.ca.gov]
> *Sent:* Tuesday, November 15, 2011 10:47 AM
> *To:* NT System Admin Issues
> *Subject:* RE: Whitelisting Pros & Cons?
>
> ** **
>
> Would it be better to have a tool that only does whitelisting, or a
> software more like Viewfinity, where you can do both white and black lists,
> and also elevate permissions for applications that aren't on either list,
> but are needed by a few people, which wouldn't warrant putting it on the
> whitelist?
>
> >>> Stu Sjouwerman  11/14/2011 2:16 PM >>>
>
> Thanks Micheal. Anyone experience with any of the Whitelisting products in
> this InfoWorld Review?
>
> ** **
>
>
> http://www.infoworld.com/d/security-central/test-center-review-whitelisting-security-offers-salvation-835?
> 
>
> ** **
>
> ** **
>
> *Bit9 Parity Suite 5.01*
>
> *10*
>
> *8*
>
> *9*
>
> *9*
>
> *10*
>
> *9.4*
>
> *EXCELLENT*
>
> *30%*
>
> *15%*
>
> *25%*
>
> *10%*
>
> *20%*
>
> *CoreTrace Bouncer 5*
>
> *9*
>
> *9*
>
> *9*
>
> *8*
>
> *9*
>
> *8.9*
>
> *VERY GOOD*
>
> *30%*
>
> *15%*
>
> *25%*
>
> *10%*
>
> *20%*
>
> *Lumension Application Control*
>
> *8*
>
> *9*
>
> *8*
>
> *9*
>
> *9*
>
> *8.5*
>
> *VERY GOOD*
>
> *30%*
>
> *15%*
>
> *25%*
>
> *10%*
>
> *20%*
>
> *McAfee Application Control 5.0*
>
> *9*
>
> *9*
>
> *9*
>
> *8*
>
> *8*
>
> *8.7*
>
> *VERY GOOD*
>
> *30%*
>
> *15%*
>
> *25%*
>
> *10%*
>
> *20%*
>
> *SignaCert Enterprise Trust Services 3.0*
>
> ** **
>
> ** **
>
> ** **
>
> *From:* Micheal Espinola Jr [mailto:michealespin...@gmail.com]
> *Sent:* Monday, November 14, 2011 5:10 PM
> *To:* NT System Admin Issues
> *Subject:* Re: Whitelisting Pros & Cons?
>
> ** **
>
> Whitelisting is the future IMHO.  You cant trust anything anymore.  Faith
> doesnt cut it.  You have to protect yourself and your assets, and
> whitelisting is the best way to do it.
>
> --
> Espi
>
> ** **
>
> ** **
>
> ** **
>
> On Mon, Nov 14, 2011 at 8:48 AM, Stu Sjouwerman 
> wrote:
>
> I'm referring to Whitelisting in the context of security.  About 10 years
> ago, the ratio
> "Good code" versus malware was perhaps 90 good 10 bad.  In that scenario,
> it makes
> sense to keep the bad code out. But over the last 10 years, with automated
> malware
> variant generation, the tables have turned, and there is actually more
> malware than
> good code out there. So in -that- scenario it might make sense to only
> allow "good code"
> and implement application control. Only that which is allowed, will run.
>
> I'd like your feedback - input - discussion on this !
>
> Warm regards,
>
> Stu
>
>
> -Original Message-
> From: Matthew W. Ross [mailto:mr...@ephrataschools.org]
> Sent: Monday, November 14, 2011 11:22 AM
> To: NT System Admin Issues
>
> Subject: Re: Whitelisting Pros & Cons?
>
> Are you asking about web content filtering, email filtering, or some other
> type of "whitelisting?"
>
>
> --Matt Ross
> Ephrata School District
>
>
> - Original Message -
> From: Stu Sjouwerman
> [mailto:s...@sunbelt-software.com]
> To: NT System Admin Issues
> [mailto:ntsysadmin@lyris.sunbelt-software.com]
> Sent: Mon, 14 Nov 2011
> 08:14:57 -0800
> Subject: Whitelisting Pros & Cons?
>
> > Guys, I am writing an article for WServerNews, and would like your
> > public input.
> >
> > What is your experience with Whitelisting, which products you
> > tried/use, and what experience you are having with this, likes and hates
> are all welcome !!
> >
> > Warm regards,
> >
> > Stu
> >
> > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
> >   ~
> >
> > ---
> > To manage subscriptions click here:
> > http://lyris.sunbelt-software.com/read/my_forums/
> > or send an email to listmana...@lyris.sunbeltsoftware.com
> > with the body: unsubscribe ntsysadmin
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <
> http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_for

RE: Whitelisting Pros & Cons? - Lumension

2011-11-15 Thread Stu Sjouwerman 
Anyone experience with Lumension? This seems to be one of the bigger players.
Did some testing with this perhaps?

Warm regards,

Stu

From: Joseph Heaton [mailto:jhea...@dfg.ca.gov]
Sent: Tuesday, November 15, 2011 10:47 AM
To: NT System Admin Issues
Subject: RE: Whitelisting Pros & Cons?

Would it be better to have a tool that only does whitelisting, or a software 
more like Viewfinity, where you can do both white and black lists, and also 
elevate permissions for applications that aren't on either list, but are needed 
by a few people, which wouldn't warrant putting it on the whitelist?

>>> Stu Sjouwerman 
>>> mailto:s...@sunbelt-software.com>> 11/14/2011 
>>> 2:16 PM >>>
Thanks Micheal. Anyone experience with any of the Whitelisting products in this 
InfoWorld Review?

http://www.infoworld.com/d/security-central/test-center-review-whitelisting-security-offers-salvation-835?


Bit9 Parity Suite 5.01

10

8

9

9

10

9.4
EXCELLENT


30%

15%

25%

10%

20%

CoreTrace Bouncer 5

9

9

9

8

9

8.9
VERY GOOD


30%

15%

25%

10%

20%

Lumension Application Control

8

9

8

9

9

8.5
VERY GOOD


30%

15%

25%

10%

20%

McAfee Application Control 5.0

9

9

9

8

8

8.7
VERY GOOD


30%

15%

25%

10%

20%

SignaCert Enterprise Trust Services 3.0




From: Micheal Espinola Jr [mailto:michealespin...@gmail.com]
Sent: Monday, November 14, 2011 5:10 PM
To: NT System Admin Issues
Subject: Re: Whitelisting Pros & Cons?

Whitelisting is the future IMHO.  You cant trust anything anymore.  Faith 
doesnt cut it.  You have to protect yourself and your assets, and whitelisting 
is the best way to do it.

--
Espi



On Mon, Nov 14, 2011 at 8:48 AM, Stu Sjouwerman 
mailto:s...@sunbelt-software.com>> wrote:
I'm referring to Whitelisting in the context of security.  About 10 years ago, 
the ratio
"Good code" versus malware was perhaps 90 good 10 bad.  In that scenario, it 
makes
sense to keep the bad code out. But over the last 10 years, with automated 
malware
variant generation, the tables have turned, and there is actually more malware 
than
good code out there. So in -that- scenario it might make sense to only allow 
"good code"
and implement application control. Only that which is allowed, will run.

I'd like your feedback - input - discussion on this !

Warm regards,

Stu

-Original Message-
From: Matthew W. Ross 
[mailto:mr...@ephrataschools.org]
Sent: Monday, November 14, 2011 11:22 AM
To: NT System Admin Issues
Subject: Re: Whitelisting Pros & Cons?

Are you asking about web content filtering, email filtering, or some other type 
of "whitelisting?"


--Matt Ross
Ephrata School District


- Original Message -
From: Stu Sjouwerman
[mailto:s...@sunbelt-software.com]
To: NT System Admin Issues
[mailto:ntsysadmin@lyris.sunbelt-software.com]
Sent: Mon, 14 Nov 2011
08:14:57 -0800
Subject: Whitelisting Pros & Cons?
> Guys, I am writing an article for WServerNews, and would like your
> public input.
>
> What is your experience with Whitelisting, which products you
> tried/use, and what experience you are having with this, likes and hates are 
> all welcome !!
>
> Warm regards,
>
> Stu
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
>   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to 
> listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
list