Configuresoft Unveils ECM 4.7 Adding UNIX/Linux Support, Security Compliance Prioritization, and Software Uninstall to Reduce Operational Risk.

COLORADO SPRINGS, Colo. -- Comprehensive Configuration Database Helps Balance Security and IT Operations, Enabling Proactive Compliance to Industry Standards and Regulatory Policy

Configuresoft, an innovator in systems management technology and the creator of the enterprise compliance management market, will unveil this month the latest version if its flagship product Enterprise Configuration Manager (ECM) 4.7, ensuring enterprise security for Windows and non-Windows platforms though proactive IT infrastructure compliance. ECM collects tens of thousands of configuration settings from each machine in an organization and puts them into a comprehensive configuration database (CCDB) to provide an enterprise view of the current state of operations. Only by gathering all available asset, security and configuration data, and centralizing it in a CCDB, can IT managers make sure that the policies they develop are appropriate for the IT infrastructure they actually have.

Configuresoft will be demonstrating ECM 4.7 at Booth 609 at the Microsoft TechEd show in Orlando, Florida from June 5 - 10.

"All networked systems provide potential portals for risk, and the majority of all security attacks exploit configurations that are not in compliance with best practices. ECM gives us the power to eliminate most of the risks to our IT infrastructure by gaining a detailed understanding of system settings and configurations," said Jon Saultz, principal systems engineer for the City of Colorado Springs, Colorado. "ECM enables us to centrally configure all of our enterprise workstations and servers, reducing the manual labor, and providing continuous proactive management of our IT infrastructure."

"We needed an accurate, reliable and efficient method to secure and update 600+ servers running on Microsoft Windows and Solaris, while ensuring regulatory compliance to HIPAA mandates," said an experienced ECM administrator from a large multi-state hospital system with more than 17,000 employees. "Configuresoft ECM was the answer. ECM offers an easy-to-use configuration and a HIPAA compliance toolkit that enables us to meet the regulatory requirements and demonstrate compliance to stay ahead of the IT management game."

"Compliance requires an audit trail that documents current system state and the planned and unplanned changes that occur over time. The compliance devil is in the details, and organizations must find a scalable, efficient mechanism to collect this granular information," said Robin Bloor, partner at Hurwitz & Associates. "Security risk management is becoming the cornerstone of operational compliance and a primary business concern. ECM balances the challenges between security and IT operations, enabling organizations to proactively meet regulatory compliance requirements and industry security guidelines."

Enhanced features and benefits in ECM 4.7 include:

-- UNIX and Linux Platform Support - provides a single solution for proactive compliance across heterogeneous enterprises.

-- Security Compliance Prioritization - enforces asset classification and severity compliance categorization so organizations can quickly focus on business critical vulnerability remediation.

-- Automated Configuration Rollback and Change Management (Enterprise "undo") - restores the actual configuration state value for each computer to reduce the risks associated with enterprise-wide security patching and configuration remediation.

-- Software Uninstall - eliminates enterprise license, desktop standards and policy compliance through removal of rogue, unnecessary or unlicensed applications.

-- Action Based Enterprise Reporting- delivers advanced compliance dashboards that allow one-click security remediation directly from enterprise reports and charts.

-- Web Services Interfaces - allows quick integration with other systems management solutions within a customer's environment to provide a seamless, self-healing environment.

"To successfully and cost-effectively address the dynamic threats and business risks requires proactive compliance management across the enterprise," said Alexander Goldstein, CEO of Configuresoft. "You can't fix what you don't know is broken, but you can plan for risks when you know what you have and how it's working before your vulnerabilities are exploited. ECM 4.7 simplifies operational, regulatory and security compliance, as well as mitigates the risks associated with making enterprise configuration and security changes. This continuous state of audit assurance has become a critical direction for enterprises that are racing to protect their information and IT assets in real-time, while at the same time comply with a landslide of regulations."

About Enterprise Configuration Manager

ECM centralizes and automates the tasks of monitoring, managing and auditing the hardware and software configurations deployed in large enterprise networks or Web server farms. By standardizing server and client configurations, ECM ensures operational compliance to regulatory, industry and corporate standards throughout a computing infrastructure. Sustained by the industry's most proven scalable architecture, ECM collects detailed critical configuration data from each Windows, UNIX, and Linux server and workstation--storing that information in a centralized database for immediate access, analysis and reporting. ECM enforces security policies by automatically resetting configurations to their pre-defined standards when an unauthorized change (or deviation) occurs. These powerful capabilities help IT organizations keep their critical systems properly configured, while ensuring security compliance with regulatory requirements such as HIPAA, GLBA, Sarbanes-Oxley and FISMA.

Pricing and Availability

Enterprise Configuration Manager 4.7 will be available on June 15, 2005. Pricing will start at $995 per server for Windows and Solaris licenses. Red Hat Linux licenses start at $695.

About Configuresoft

Configuresoft is an innovator in systems management technology, serving eight of the 25 world's largest computing environments. Based in Colorado Springs, Colorado, the Company offers enterprise configuration, policy compliance and remediation products that span both operations and IT security. At a time in which organizations must maintain a continuous state of audit throughout their infrastructure, Configuresoft ensures these environments conform to any desired or mandated state. To contact Configuresoft, call 719.447.4600, visit us on the Web at www.configuresoft.com or write to [e-mail].