RE: Network/Server security audit

["Card, Sandra" <scard at exchange dot calstatela dot edu>]

We are about to encounter this.  We are also a turnkey site.  I just got an
email from our campus IT informing me of 'security holes' with the Innopac
server and our two remaining Lantronix boxes.  They used a program called
Nessus.   I have printed out the report and am looking it over before I
contact III.  One problem is telnet.  We do still have some staff using
telnet, although we are converting them to SSH, or to Millennium.  I am
trying to figure out the various elements of the Nessus report.  

I think this is going to be a frequent issue and III needs to be able to
respond to such requests.

Sandra Card
Library
California State University, Los Angeles
scard at calstatela dot edu
323-343-4894


-----Original Message-----
From: Karen Bracken [mailto:KBRACKEN at riversideca dot gov] 
Sent: Friday, July 15, 2005 11:01 AM
To: innopac at innopacusers dot org
Subject: Network/Server security audit


Hello All, 
Our IT shop is in the process of conducting a security audit and had some
questions on patches, rights, and services on our Innovative server. (we are
a turnkey site).  They are having trouble getting correct information from
III.  Have any of you had a similar experience?  Would you be willing to
discuss issues relating to security with the
Innovative server off list?   Thanks in advance for any response,
interest, and comments.



Karen Bracken
Data Technician, Riverside Public Library
(951) 826-5214
--
This message was distributed through the Innovative Users Group INNOPAC list
Public replies:  INNOPAC at innopacusers dot org Update your subscription options:
http://innopacusers.org/mailman/listinfo/innopac


--- StripMime Report -- processed MIME parts ---
multipart/alternative
  text/plain (text body -- kept)
  text/html
---