Comments on: ConfigCheck vs. Appliances http://lonesysadmin.net/2008/06/18/configcheck-vs-appliances/ im in ur data centrz patchin ur serverz Thu, 20 Nov 2008 10:02:34 +0000 http://wordpress.org/?v=2.6.3 By: Derek Crawford http://lonesysadmin.net/2008/06/18/configcheck-vs-appliances/#comment-74377 Derek Crawford Tue, 08 Jul 2008 21:00:01 +0000 http://lonesysadmin.net/?p=1305#comment-74377 I wrote an IMHO response to this a couple of weeks ago on our Tripwire Virtualization Security blog: http://www.tripwire.org/?p=53 I wrote an IMHO response to this a couple of weeks ago on our Tripwire Virtualization Security blog: http://www.tripwire.org/?p=53

]]> By: Virtualization Security Blog http://lonesysadmin.net/2008/06/18/configcheck-vs-appliances/#comment-74342 Virtualization Security Blog Thu, 03 Jul 2008 17:07:06 +0000 http://lonesysadmin.net/?p=1305#comment-74342 <strong>If A Virtualization Misconfiguration Or Security Vulnerability Exists Within An “ESX Appliance,” Does It Really Exist?...</strong> Earlier this week, I read a blog entry by the Lone Sysadmin about our recently released Tripwire ConfigCheck. He noted that it found some misconfigurations in his VMware ESX server, and then goes on to ask a very interesting question: Now my question ... If A Virtualization Misconfiguration Or Security Vulnerability Exists Within An “ESX Appliance,” Does It Really Exist?…

Earlier this week, I read a blog entry by the Lone Sysadmin about our recently released Tripwire ConfigCheck. He noted that it found some misconfigurations in his VMware ESX server, and then goes on to ask a very interesting question:
Now my question …

]]> By: Greg http://lonesysadmin.net/2008/06/18/configcheck-vs-appliances/#comment-74325 Greg Mon, 23 Jun 2008 11:31:59 +0000 http://lonesysadmin.net/?p=1305#comment-74325 The advice I've received is to treat it as an appliance. Bugfixes are fine to patch; new versions == nuke'n'rebuild time. If you need to make changes, automate and push them across all hosts, and add them to your automated build environment. The advice I’ve received is to treat it as an appliance. Bugfixes are fine to patch; new versions == nuke’n'rebuild time.

If you need to make changes, automate and push them across all hosts, and add them to your automated build environment.

]]> By: Virtualization Security Blog http://lonesysadmin.net/2008/06/18/configcheck-vs-appliances/#comment-74313 Virtualization Security Blog Thu, 19 Jun 2008 21:29:38 +0000 http://lonesysadmin.net/?p=1305#comment-74313 <strong>Treating ESX 3.5.0 like an appliance?.. I wouldn’t...</strong> Just ran across this article on The Lone Sysadmin blog along with some comments from readers and figured that I would post here in reference to it seeing as I work for Tripwire and am pretty close the development of the ConfigCheck tool and the full Tr... Treating ESX 3.5.0 like an appliance?.. I wouldn’t…

Just ran across this article on The Lone Sysadmin blog along with some comments from readers and figured that I would post here in reference to it seeing as I work for Tripwire and am pretty close the development of the ConfigCheck tool and the full Tr…

]]> By: John Troyer http://lonesysadmin.net/2008/06/18/configcheck-vs-appliances/#comment-74306 John Troyer Wed, 18 Jun 2008 22:47:43 +0000 http://lonesysadmin.net/?p=1305#comment-74306 An appliance can come with many knobs and levers, and the ConfigCheck tool is simply indicating what are the most secure settings for those. These might not be what you want in a simple test/dev or other controlled environment because they might compromise on convenience or manageability, but they would be what you'd want in production. An appliance can come with many knobs and levers, and the ConfigCheck tool is simply indicating what are the most secure settings for those. These might not be what you want in a simple test/dev or other controlled environment because they might compromise on convenience or manageability, but they would be what you’d want in production.

]]> By: Bob Plankers http://lonesysadmin.net/2008/06/18/configcheck-vs-appliances/#comment-74305 Bob Plankers Wed, 18 Jun 2008 20:38:55 +0000 http://lonesysadmin.net/?p=1305#comment-74305 That's a great way to put it. :-) That’s a great way to put it. :-)

]]> By: Chris Gregors http://lonesysadmin.net/2008/06/18/configcheck-vs-appliances/#comment-74304 Chris Gregors Wed, 18 Jun 2008 20:18:09 +0000 http://lonesysadmin.net/?p=1305#comment-74304 The difference between a Linux distribution and an appliance is the sysadmin. Consider: A Windows Administrator running ESX considers it an appliance with a gui that happens to have a command line similar to a Linux Distribution. A Unix Administrator running ESX considers it a Linux Distribution running a type 1 hypervisor that happens to have a cool windows management tool. Perspective is everything. The difference between a Linux distribution and an appliance is the sysadmin.

Consider:

A Windows Administrator running ESX considers it an appliance with a gui that happens to have a command line similar to a Linux Distribution.

A Unix Administrator running ESX considers it a Linux Distribution running a type 1 hypervisor that happens to have a cool windows management tool.

Perspective is everything.

]]>