IT Security

2,636 new software vulnerabilities via Internet sourced files were detected last year .................. Are you in control of your IT Security?

The Datatel Network Security Scanner "DNSS"
Our DNSS scanning engine is engineered to be faster, less intrusive, and produce better results than all other scanners available. With one of the highest levels of accuracy available, DNSS can help you identify — and dramatically reduce — the number of software vulnerabilities and other weaknesses on your network.

Unrivaled Ease of Use
Despite its powerful capabilities, DNSS was designed to be the easiest scanner to operate on the market. The graphical user interface provides easy control over all aspects of DNSS' scanning and reporting capabilities. DNSS also features a number of automatic features that facilitate such functions as scheduling, repairing common system problems and updating the application.

Non-Intrusive Scanning
Unlike most other security scanners on the market, we have gone to great lengths to provide DNSS with intelligent scanning techniques that are non-intrusive and do not test by exploitation during normal scanning operation. As a result, DNSS can scan your network without overloading its resources and without causing systems to crash. This makes DNSS especially powerful for remote scanning services.

Frequent Updates for New Vulnerabilities
Unlike many commercial scanners that are updated once a month or less, updates to our DNSS vulnerability database are available on a near-daily basis. DNSS Auto-Update function provides easy Internet access for downloading the latest vulnerability checks. Auto-Update can be launched manually or set to run automatically at the beginning of every DNSS session.

Rogue Wireless Access Detection
DNSS can now be used to detect wireless access points that may have been established on your network. DNSS automatically detects the presence of unauthorised access points on networks of any size. DNSS' rogue wireless detection capabilities eliminates the need for using handheld/wireless access detection tools and walking around buildings or driving the corporate perimeter.

Ability to Uncover Unknown Vulnerabilities
In addition to scanning against the most complete database of known vulnerabilities, DNSS' unique, artificial intelligence technology — called Common Hacker Attack Methods or CHAM — delivers a capability beyond what other security scanners can provide. With CHAM, DNSS is able to think like a hacker or network security analyst attempting to penetrate your network. In this way, DNSS can actually detect previously unknown or hidden vulnerabilities, giving you the knowledge you need to better secure your networks.

High-Speed Scanning Ability
DNSS is recognised as one of the fastest security scanners on the market. It has the ability to scan every machine on your network, all types of operating systems, networked devices and third-party or custom applications in record time. In fact, DNSS is able to scan an entire Class C network in about 15 minutes.

Remote Repair Capabilities
DNSS' Auto-Fix function allows us to automatically correct common system security issues such as registry settings, file permissions and more. Because Auto-Fix can function remotely across any size network, we have the freedom and flexibility of operating from a single location.

Comprehensive and Up-to-Date Vulnerabilities Database
DNSS incorporates the most comprehensive and up-to-date vulnerabilities database. Along with constantly monitoring security advisories, we have advanced knowledge of security issues due to discoveries made by our own team of security experts. In fact, the DNSS research team has itself issued a number of advisories regarding major security issues that its members have personally detected. With DNSS Auto-Update feature, this almost daily stream of vulnerability updates can be automatically downloaded at the beginning of every DNSS session.

Superior OS Detection
DNSS incorporates the Nmap (Network Mapper) Fingerprint Database, an open-source utility for network exploration and the most complete database of OS TCP/IP stack fingerprints available. Nmap uses raw IP packets in novel ways to determine which hosts are available on the network, which services or ports they are offering, which operating system they are running, what type of packet filters/firewalls are in use, and dozens of other characteristics. Incorporating Nmap allows DNSS to perform remote operating system detection for subsequently smarter scanning.

Smart Protocol Scanning
Unlike most other security scanners, DNSS does not make assumptions about typical protocols running behind specific ports such as a web server running behind Port 80. Instead, the scanner actually analyses the input/output data on each port to determine which protocol and service is actually running. In this way, DNSS makes adjustments for custom or unconventional machine setup.

Advanced and Customised Reporting Capabilities
Rather than providing boilerplate text, DNSS automatically customises the content of its network audit reports to reflect the severity of the vulnerabilities discovered and the level of security risk involved. You can further customise these reports by rewriting specific content and/or by incorporating your logo or other text in the header and footer sections. DNSS offers two different reporting options: Technical Reports with intricate details to satisfy IT personnel and Executive Reports for high-level management summaries.

Custom Audit Wizard
In addition to a comprehensive database of security audits, DNSS' Audit Wizard gives you the ability to create new audits to check for security vulnerabilities in custom applications or other configurations that may be unique to your network. Audit Wizard simplifies the process of building custom checks and getting them integrated into DNSS for use in your very next scan.

Advanced Scheduling Capabilities
DNSS' scheduler function allows you to set the scanner to run on a regular basis to periodically check for vulnerabilities. And because DNSS is non-intrusive in its scanning operations, you can pre-schedule your scans to be run without having to worry about unplanned network downtime.

Remote Scanning Capabilities
Used in conjunction with DNSS Remote Manager, DNSS scans can be securely initiated from any location. Administrators can now place DNSS scanners in different geographical locations, run scans remotely, and view reports.

Open Architecture
DNSS is built with an open architecture that allows you to develop vulnerability tests and auditing modules tailored to your organisation's own specific requirements. You can also fine-tune the included audits, make custom changes to the DNSS interface and more. A documented set of APIs is provided to simplify the process of building custom scans in your preferred programming language and integrating them into DNSS. DNSS also has a Policies Wizard that walks you through the creation of a custom scan.

Breadth of Systems and Services Audited
DNSS runs on Windows NT/2000 and XP platforms, but, unlike other scanners, it is not limited to scanning only Windows networks. In fact, DNSS has the ability to scan all types of operating systems for vulnerabilities, including Unix-based operating systems (Solaris, Linux, *BSD, etc.) as well as networked devices (such as routers and firewalls) that run "home-grown" operating systems. DNSS includes vulnerability auditing modules for many systems and services such as NetBIOS, HTTP, CGI and WinCGI, FTP, DNS, DoS vulnerabilities, POP3, SMTP, LDAP, TCP/IP, UDP, Registry, Services, Users and Accounts, password vulnerabilities, publishing extensions, and more. DNSS is even able to comprehensively audit databases and wireless networks for vulnerabilities.

 


 



Code of Practice - Copyright © 2001 Datatel Networks Ltd. All rights reserved. - Terms & Conditions