The specific tests include the following: MBSA will perform various OS security checks for Windows NT 4.0, Windows 2000, and Windows XP target computers. Microsoft Internet Explorer version 5.01 and laterĮxchange Server 5.5 and Exchange 2000 Server MBSA performs checks for security updates and service packs released for the following Windows operating systems, Windows components, and applications: Both versions of MBSA perform the tests outlined in this section.
The MBSA tool can be executed from both a GUI and from the command line. Scans the Windows OS, Microsoft Internet Information Services (IIS), Microsoft SQL Server, desktop applications, Windows Media Player, and Microsoft Exchange Server for common security misconfigurations. The MBSA tool can also filter the list of missing updates and service packs based on approved updates configured at a Microsoft Software Update Services (SUS) server.įor more information on using the Mbsacli.exe command-line tool to determine which service packs and security updates are applied, please see Chapter 23, Using Patch Management Tools. MBSA uses Shavlik HfNetChk version 3.81 to determine which hotfixes and service packs are not applied to a target computer. Scans for missing service packs and security updates.
The MBSA tool allows you to assess the security configuration of one or more Windows-based computers. Tools such as the Internet Security Systems (ISS) Security Scanner or the eEye Retina Network Security Scanner can detect common vulnerabilities.ĭetermine which available server ports are exposed to the Internet. Microsoft Baseline Security Analyzer (MBSA)Īnalyzes common security misconfigurations.You can use different tools for security assessments, including the following: In addition to comparing the security configuration of your Windows computers with the baseline security settings defined in security templates, you should assess your computers for common security misconfigurations.
0 kommentar(er)
