Re: SNS will be resuming scanning with the McAfee Foundstone Scanner

   Since Craig Lant of SNS has formally announced SNS's impending
scanning here on the Micronet list, this is to copy the Micronet list
on a note just sent to Craig, reiterating your feedback on what you'd
like to see in future scanning reports.

Aron Roberts
Workstation Software Support Group

---begin forwarded text---

Date: Mon, 19 Sep 2005 15:15:05 -0700
To: Craig Lant <craig@berkeley.edu>
From: "Aron Roberts" <aron@socrates.berkeley.edu>
Subject: Re: SNS will be resuming scanning with the McAfee Foundstone Scanner
Cc: "ucb-security list" <ucb-security@lists.berkeley.edu>, "Jake
Harwood" <jakef@socrates.berkeley.edu>

Hi Craig,

In the message "SNS will be resuming scanning with the McAfee
Foundstone Sc", dated 9/19/05, Craig Lant wrote:

>After a lengthy RFP process, SNS is now the proud owner of a state of
>the art network scanning system from the good folks at McAfee. ...
>The feedback we received from that effort was overwhelmingly
>positive. So, we are now resuming that scanning which was so
>successful with this tool.

   Congratulations on obtaining this scanning system! Thank you, as
well, for your detailed notification of SNS's impending scanning.

   Relevant to "the feedback that you received from that effort,"
before you begin scanning, would it be possible to respond to the
following requests regarding the reports generated by SNS's scanning,
which were made by campus computing support staff at a Micronet
meeting on April 12, 2005, and which I forwarded to you back then?

   1. Include severity levels for each vulnerability.
   2. Provide some way of obtaining info on non-CVE-listed vulnerabilities.
   3. Include listings for hosts with zero detectable vulnerabilities.
   4. Include listings for hosts which could not be reached by the scan
      (regardless of reason).

   If you've already responded in the past, a quick recap of which of
these requests, if any, will be implemented in the impending scan
would be very welcome.

Thanks!

Aron Roberts
Workstation Software Support Group

---end forwarded text---

------------------------------------------------------------------------
The following was automatically added to this message by the list server:

For information about Micronet, including subscribing to
or unsubscribing from its mailing list and finding out
about upcoming meetings, please visit the Micronet Web site:
<http://micronet.berkeley.edu/>.
Received on Mon Sep 19 15:23:46 2005