RE: SUS server

From: Bill Mote <bill.mote(at)mem.com>
Date: Wed Apr 09 2003 - 14:47:50 EDT

Where in my network should I place the SUS server? It seems to me the logical place would be the DMZ as I want to use this server to patch my workstations, laptops, and my servers.

Everything inside my network can talk to the DMZ, but the inverse is not true. The DMZ can only talk to the DB network on the DB protocol. Neither the DMZ nor the DB network can talk to our internal LAN at all. The DB network and the LAN can talk to machines in the DMZ though.

BM

-----Original Message-----
From: Brian W. Spolarich [mailto:bspolarich@nephrostherapeutics.com] Sent: Monday, April 07, 2003 2:31 PM
To: Thane Walkup; focus-ms@securityfocus.com Subject: RE: SUS server

Thane Walkup wrote:
> One VERY good reason not to run SP3 is possible HIPAA and 21CFR11

  One can configure the SUS client to point at an internal SUS server via Active Directory GPOs. I suspect that if you point it at a non-functional URL the auto-update component will essentially be disabled, and it may be possible to disable it completely via GPO (haven't looked).

  -bws

<b>

---

Block Spam, Smut & Viruses
SurfControl E-mail Filter for SMTP & Exchange leverages multiple layers of technology including filtering embedded and attached file content. Rid your enterprise of unwanted content.
http://www.securityfocus.com/SurfControl-focus-ms2 Download your free fully functional trial, complete with 30-days of free technical support.

---

</b>

---

Block Spam, Smut & Viruses
SurfControl E-mail Filter for SMTP & Exchange leverages multiple layers of technology including filtering embedded and attached file content. Rid your enterprise of unwanted content.
http://www.securityfocus.com/SurfControl-focus-ms2 Download your free fully functional trial, complete with 30-days of free technical support.

---

Received on Wed Apr 9 15:03:35 2003