Microsoft Forefront Client Security Benchmark

I was doing an evaluation of the Microsoft Forefront Client Security in Windows 2003 server and the verdict of the spycar test are:-

Spycar Scoring
HKCU_Run : Spycar change allowed
HKCU_RunOnce : Spycar change allowed
HKCU_RunOnceEx : Spycar change allowed
HKLM_Run : Spycar change allowed
HKLM_RunOnce : Spycar change allowed
HKLM_RunOnceEx : Spycar test not performed
IE-HomePageLock : Spycar change allowed
IE-KillAdvancedTab : Spycar change allowed
IE-KillConnectionsTab : Spycar change allowed
IE-KillContentTab : Spycar change allowed
IE-KillGeneralTab : Spycar change allowed
IE-KillPrivacyTab : Spycar change allowed
IE-KillProgramsTab : Spycar change allowed
IE-KillSecurityTab : Spycar change allowed
IE-SetHomePage : Spycar change allowed
IE-SetSearchPage : Spycar change allowed
AlterHostsFile : Spycar change allowed

WTF!! It means simple spyware also cannot block!

The installation itself is very crappy. A single server installation require the following configuration. The resource needed to manage a bunch of AV clients increased because it require you to install WSUS , MOM and the SQL2005 with the SQL 2005 reporting server as well.



And another issue with forefront client is even i update the pattern from the internet but the screen shot still shows the old version. However the dialog box say no new update available.. so which is which?

Comments

Post a Comment

Popular posts from this blog

How to disable Trend Micro OfficeScan using cmd.

Sometimes i find the Trend Micro OfficeScan is annoying when u wanna download some stuff from some cracks sites..so to disable the real time scan using command prompt, you can follow this guide.. 1. Start command prompt. Start->run-> cmd 2. Type "net stop tmlisten" 3. Type "net stop ntrtscan" and voila you Trend Micro OfficeScan real time scan is disable!!
Read more

Fake torrent from www.YayMovies.com .. Beware !!! It is a Scam !!

Have u ever downloaded a torrent from www.YayMovies.com The file will be password protected..and inside there is a readme which states the following... >>> Hello, This video is password protected to stop automated leeching and detection. To get your password, Please visit: www.YayMovies.com We apologize for the inconvenience.   --------- Note: The password is case sensitive. So please enter is exactly as it is displayed. Have a nice day :) ---------- It's a scam. Makes you choose one of the 6 or 7 quizzes. After ask for cellphone #. With that, they begin to bill you a monthly service. Heres the details---------------Minimum age restrictions may apply. You must be at least 18 to participate in the following states: Florida.With Playphone Platinum Plus Subscription Plan you will get unlimited credits (10 ringtone credits and unlimited credits for video's, games and wallpapers) every month for $14.99/month and 2 Playphone Backstage Alerts. To cancel text "STOP",...
Read more

Zishan Z1 firmware Update and Manual

I found out Zishan has released a new firmware for Z1 player. It supports three new playback modes. download here.. The update is simple. All you need is the ZiShan_Z1_0.2.zip and a TF card. I used a 32GB TF card in FAT32 format. 1) Turn off Z1 player; 2) Extract app.bin from ZiShan_Z1_0.2.zip, and put it in the root directory of the TF card; 3) Insert the TF card into the player; 4) Turn on the Z1 player. The LED light will be on for 3 seconds and then blink ultra-fast for around 5 seconds. (Done). 5) Remove the file app.bin in the card. What's new in v0.2: 1) Add 180 EQ settings. (WTF...it's a screen-less player.) 2) Add 3 playback modes: Repeat, Shuffle and Default. (Very useful for me.) 3) Fix a DSD problem. How to choose playback modes: Press 'Prev' for a few seconds until the LED light blinks faster than normal, then release. And: a) Press 'Prev' to choose Repeat track mode. b) Press 'Stop' to choose Shuffle all tracks mode. c)...
Read more