Configuresoft Squashes and Cleans Up SQL Slammer Worm in Minutes.

Business Editors/High-Tech Writers

WOODLAND PARK, Colo.--(BUSINESS WIRE)--Feb. 3, 2003

Enterprise Configuration Manager Prevents and Neutralizes Security

Vulnerabilities Using Automated Compliance Assessment and Targeted

Change Capabilities

Configuresoft, the configuration management company, today announced that the SQL Slammer worm, like its predecessors NIMDA and Code Red, exploited the fact that most enterprises do not know how their systems are configured and rely on administrators to manually keep security patches and settings up-to-date. The labor intensive and complex task of isolating all instances and versions of SQL Server 2000 and SQL Desktop Engine (MSDE) 2000 installed on servers and desktops in a network is beyond the resources of even the largest IT organizations. Although Microsoft issued a patch for the SQL flaw six months ago, more than 200,000 computers remained unpatched and became infected, according to estimates from security information site Incidents.org. The SQL Slammer attack provides another costly reminder that enterprises and government agencies will remain susceptible to known vulnerabilities unless they implement an automated infrastructure to proactively monitor, audit, and manage server and desktop configurations on an ongoing basis.

Configuresoft's Enterprise Configuration Manager (ECM) product, which combines a database of current system configurations with change detection, compliance monitoring, and deployment tools, enables organizations in minutes to identify all machines in their network that are vulnerable to the SQL Slammer worm, or have already been compromised. ECM also provides automated capabilities for containing and stopping the worm from spreading, installing the patch, and restarting the services that were affected.

"Code Red, NIMDA, and now SQL Slammer have all painfully exposed that enterprises can no longer rely on manual processes to keep patches and critical security configurations up-to-date. The biggest challenge facing large enterprises is lack of visibility into the actual configurations that exist in their networks," said Alexander Goldstein, Chief Executive Officer of Configuresoft. "Enterprise Configuration Manager provides the automated compliance management capabilities that are needed in the Windows operating system to enable IT departments to proactively manage and control what is otherwise an unmanageable amount of data."

Solving SQL Slammer

ECM provides the infrastructure, tools, and built-in intelligence to centrally contain and stop a SQL Slammer attack, patch systems, and prevent future worm infections. ECM's unique capabilities enable a single administrator to rapidly:

-- Target every server and workstation running SQL Server or MSDE across the entire enterprise. ECM also displays version and service pack levels to take the guesswork out of patching.

-- Contain the spread of SQL Slammer by stopping all SQL and MSDE services across the enterprise from a single console, and deploy the patch to all vulnerable machines. ECM also ensures the latest virus definitions are distributed, and that antivirus services are active on all clients.

-- Recover systems following an attack by restarting all SQL services after verifying the patches are properly installed.

-- Prevent further worm attacks by automating compliance to security standards and proactively managing patch assessment and deployment.

About Enterprise Configuration Manager

ECM centralizes and automates the labor-intensive task of monitoring, managing, and auditing the hardware and software configurations of Windows NT, 2000, and XP systems deployed in large enterprise networks or Web server farms. ECM enables enterprises to efficiently and cost-effectively standardize server, workstation, and mobile system configurations, and keep them in compliance, to minimize downtime, prevent security vulnerabilities, accelerate problem resolution, reduce help desk calls, and enhance system performance. ECM can identify and help correct configuration problems before users even know they exist. ECM Security Update Manager, an add-on module for ECM, automates security patch management by alerting administrators of new security bulletins issued by Microsoft, instantly assessing entire networks to detect vulnerabilities, and deploying required patches to all the target machines with a single mouse click.

Pricing and Availability

Enterprise Configuration Manager is available from Configuresoft and its business partners worldwide. Pricing starts at $995 per server and $30 per workstation. Pricing for ECM Security Update Manager starts at $25 per server and $5 per workstation. ECM and SUM support Windows NT/2000 Server, Windows NT Workstation 4.0, Windows 2000 Professional, Windows XP, and Microsoft SQL Server 2000 or higher.

Company Background

Founded in 1999, Configuresoft, Inc. develops software that centralizes, automates, and dramatically lowers the cost of desktop, notebook, and server configuration and compliance management for Windows NT, 2000, and XP-based networks and Web sites. Configuresoft's customers are Fortune 5000 companies that are deploying or planning to deploy large Windows NT and Windows 2000-based infrastructures. Configuresoft is privately held and headquartered in Woodland Park, Colorado. To contact Configuresoft, call 719.447.4600, visit us on the Web at http://www.configuresoft.com/, or write to [e-mail].