Vintela VMX and security issues

[Kevin Bushman]

I just posted this in "General" as well. Sorry for the double-post. Wasn't sure which one it should go under...

My organization is pushing to install Vintela's VMX product. It's essentially an add on for Microshafts SMS product. It's supposed to allow several different kinds of admin capabilities via SMS - to include automatic patch pushes and software installs. Unfortunately, I don't have much say in it and what's worse, the Microsoft weenies will be the ones in control of it.

Is anybody else using it and what are the security concerns associated with it?

I'm just concerned that the Microsoft weenies will "accidentally" do something to one of the systems I'm responsible for and will then be allowed to say "whoops, I didn't think it would do that...", and then I'd be the one to take the blame and have to fix their screw ups.

Thanks!

[RAC_1]

Are your systems HP-UX??
You can keep track of syslogs etc to know, what had happened/happening.

Anil

[Kevin Bushman]

Yes, my systems are all HP (mostly 11i) but we also have some Solaris and AIX boxes as well. And yea, I thought about the syslog entries. But that doesn't solve my concern.

Anyway, what I was looking for more was any security issues anyone may know about. Also, does anyone know what ports/protocols/services it may need? It doesn't say on Vintela's web site.

[RAC_1]

Vintela'd document, should tell you what port it uses. You can monitor port.

Also that services be started through /etc/inetd.conf. So when requests are made, it logs it syslog.log?

Furthermore you can user nettl/netfmt, ethreal (sniffer softwares) to monitor what is going on those ports.

Anil