How much time and how many touchpoints are needed to remediate a client with security updates? Did you know Altiris Out-of-band management has a network filtering option which used the System Defense capabilities built into Intel vPro? Essentially - you can isolate a computer at the client's network interface. Even better, you can keep certain ports\communication open to ONLY the designated Altiris Notification Server - thus allowing delivery of critical software updates!!
What traditionally might involve network teams (to place a system onto a remediation network), client support teams (to deploy the software), and support operation teams (to handle the helpdesk calls) - could automated and resolved much quicker.
We'll be stepping through this at ManageFusion 08 in The Hague (Oct 7-9) and Orlando (Oct 14-16). The hands-on lab is "AP LO2 - Intel: Eliminate Network Attacks During Remote Software Deployment" - two sessions of the same lab scheduled!
If you're not able to attend - the following reference materials and insights may be of interest:
- ensure you have the Altiris agent with Client Task and Software Delivery Agent for Task Server are enabled and installed on the client.
- ensure the client has been discovered as out-of-band capable and that vPro has been provisioned
- addt'l reading and reference materials:
- Use case white paper of network filtering and system defense - http://communities.intel.com/docs/DOC-1927
- Altiris Enterprise Network Filter (ENF) Utility - http://www.symantec.com/connect/node/1626
- Altiris TaskServer and Network Filters - http://www.symantec.com/connect/node/2686
- Using System Defense with Software Delivery - http://www.symantec.com/connect/node/2960
The opinions expressed on this site are mine alone and do not necessarily reflect the opinions or strategies of Intel Corporation or its worldwide subsidiaries.