[pca] WeSunSolve : New feature: Security / Patch Report for your servers

[Thomas Gouverneur]

Gael:

On my account, I currently imported 200 different server with 1 patch
level each. It seems to behave like a charm, and panel is taking half a
second to load all of theses. 

So it looks like it's scaling fine...

Anyway, we can arrange a mass-test-scale if you wish ;) If you want to
know if everything will scale, please give me the exact description of
your parc, in terms of numbers of server exactly, and I can arrange a
test....

On a second side, I've already had some scaling issue with WeSunSolve,
which were fixed. I got some other "issues" pending, which I have setup
some MySQL slaves for, but still need to make the code to use them.

Of course, this website is a free4all test bed, and I can't assure SLA
on it ;) But if you wish to work daily with it and use the mail report
and such with thousands of server, we can arrange a test and make
things scale if needed.


HTH,

Thomas



On Fri, 27 Apr 2012 08:48:23 -0500
Gael Martinez <gael.martinez at gmail.com> wrote:

> Thomas,
> 
> security by obscurantism is alas prefered by large corporations
> security teams... such usually rely on network scanners to figure out
> exploitable issues and yea... the output is usually kept secret even
> within the enterprise...
> 
> The other topic could be corporations like mine with thousands of
> servers, a lot of variances, dmz, firewalls, etc..., what is your
> scalability ? :)
> 
> 
> On Fri, Apr 27, 2012 at 8:41 AM, Thomas Gouverneur <tgo at espix.net>
> wrote:
> > The code itself is not opensource, but even if it was, it would not
> > help you that much... the code without the database behind is not
> > very useful ;)
> >
> > What would you need to bypass your "security breach"? an automatic
> > NDA agreement which wesunsolve would take? something else?
> >
> > You can also upload patch information without specifying the real
> > hostname of the server and without giving information about your
> > company...
> >
> > Information retention looks like security by obscurantism... anyway.
> >
> > Regards,
> >
> > Thomas
> >
> >
> > On Fri, 27 Apr 2012 08:46:45 -0400
> > Rajiv Gunja <opn.src.rocks at gmail.com> wrote:
> >
> >> Is this code open source? Will it be possible to share it with
> >> community? For some of us giving out server information is also
> >> considered security breach. Please let me know. Thanks.
> >> -GGR
> >> On Apr 27, 2012 3:20 AM, "Thomas Gouverneur" <tgo at espix.net> wrote:
> >>
> >> > Hello dear patcher!
> >> >
> >> > Martin suggested me to announce this here also: WeSunSolve
> >> > website has integrated PCA to make some patches and security
> >> > (CVE) report for your servers!
> >> >
> >> > Moreover, you can setup mail report to be sent to you
> >> > periodically. Last but not least, you can define a "Patchdiag
> >> > Delay" for theses reports: Define a delay (one day, one week,
> >> > one month, six months...) and patchdiag.xref selection for your
> >> > report will be made accordingly.
> >> >
> >> > To have more details on that, I recommend you to read the today's
> >> > WeSunSolve site news: http://ws2.be/19xtf3fh and also the Wiki:
> >> > http://ws2.be/19xtf38k
> >> >
> >> > If you give a try, don't hesitate to give feedback or to make
> >> > suggestion on what's eventually missing in theses reports...
> >> >
> >> > Thanks for your attention ;)
> >> > Best Regards,
> >> >
> >> > --
> >> > Thomas Gouverneur
> >> > T: +32 498 23 00 40
> >> > W: http://espix.net
> >> > M: <thomas at espix.net>
> >> >
> >> >
> >
> >
> > --
> > Thomas Gouverneur
> >  _____           _
> > | ____|___ _ __ (_)_  __
> > |  _| / __| '_ \| \ \/ /
> > | |___\__ \ |_) | |>  <
> > |_____|___/ .__/|_/_/\_\
> >  Network  |_|       SPRL
> >   TVA: BE683601811
> >
> > T: +32 498 23 00 40
> > W: http://espix.net
> > M: <thomas at espix.net>
> >
> 
> 
> 
> -- 
> Gaël Martinez
> 


-- 
Thomas Gouverneur
 _____           _      
| ____|___ _ __ (_)_  __
|  _| / __| '_ \| \ \/ /
| |___\__ \ |_) | |>  < 
|_____|___/ .__/|_/_/\_\
 Network  |_|       SPRL
   TVA: BE683601811

T: +32 498 23 00 40
W: http://espix.net
M: <thomas at espix.net>