topic Re: Security patching for HP Agents in Server Management - Systems Insight Manager

Security patching for HP Agents

Pagnotta — Fri, 11 Feb 2005 02:30:36 GMT

Dear All,

I've a question regarding the patching "in terms of security" of HP agents used by HP SIM or thers HP tools.
Is there a way to be informed about critical patches released that must be applied ? And furthermore, is it possible to deploy such patches through "HP SIM" ?

Regards
Angelo

Re: Security patching for HP Agents

David Claypool — Fri, 11 Feb 2005 12:22:32 GMT

HP's Software Security Response Team maintains a close relationship with CERT and other agencies regarding this matter. Additionally, ProLiant management software undergoes security audits by outside agencies. However, since we rely on many open source libraries, our products may be affected from time to time.

You may sign up for automatic notification of drivers and alerts at http://h30046.www3.hp.com/subhub.php (select â driver & support alerts/notificationsâ then Servers/HP Server Management Software/HP Management Applications).

Additionally, you can review notices for ProLiant management software at http://www.hp.com/servers/manage --> Software Security Customer Advisories.

You may also be interested in knowing about the new ProLiant Essentials Vulnerability and Patch Management Pack which incorporates a security vulnerability scanner that can be customized for your needs and also distribute patches for Windows and RedHat Linux. More info at http://www.hp.com/servers/manage --> Vulnerability and Patch Management

Re: Security patching for HP Agents

Pagnotta — Mon, 14 Feb 2005 02:55:16 GMT

Is the plug-in "VulnÃ©rability & Patch Management" for "HP SIM" free ? Does it come with the new release of "HP SIM" or do I have to pay an extra licence ?

Moreover, does this product allow the patching of both HP agents and Windows software ?

Regar

Re: Security patching for HP Agents

David Claypool — Mon, 14 Feb 2005 13:53:34 GMT

Version Control provides updates for software and firmware provided by HP. It is free.

The Vulnerability and Patch Management Pack provides patching for software that originates with Microsoft or RedHat. HP SIM 4.2 comes with 2 evaluation licenses. Additional licenses are US$249, and until 28 Feb there is a buy 1 get 1 free offer.

These 2 processes are separate to match with most customers' procedures. When HP publishes something new, most customers don't immediately install it unless tehre is a patch for a problem they have experienced. Many skip 1 or more versions between updates. In the case of security patching, that is almost always immediately applied.

Re: Security patching for HP Agents

Pagnotta — Tue, 15 Feb 2005 02:36:53 GMT

Hello,

What do you mean by additional licence ? Is it a licence per server ? Or does this additional licence covers a number of systems ?

Regards
Angelo

Re: Security patching for HP Agents

David Claypool — Tue, 15 Feb 2005 10:25:38 GMT

License information is available from http://www.hp.com/servers/manage --> Vulnerability and Patch Management Pack