> 보안취약점분석솔루션 > Maxpatrol
Maxpatrol은
네트워크장비, 각종서버, SAP ERP서버 등의 보안취약점을 통합분석 지원하는
All-in-One 제품입니다.
Maxpatrol은 네트워크장비, 각종서버, SAP ERP서버 등의 보안취약점을 통합분석 지원하는 All-in-One 제품입니다.
ALL-IN-ONE CVE & CCE MANAGEMENT SOLUTION
- 1 Pentest ModeBlackbox Scanner
- 2 Audit ModeWhite box Scanner
- 3Compliance ModeChecklist
AGENTLESS SCANNING ARCHITECTURE
- Quick Scanning
- Broad scanning coverage
PENTEST MODE (BLACK-BOX TEST) : 네트워크기반인벤토리식별및취약점진단
- Vulnerability Identification
- 배너기반
- 익스플로잇기반
- Password Bruteforce웹취약점진단(OWASP TOP10)
- Safe Scan Options
- 네트워크프린터스캔제외
- Brute force options
- 포트스캔스레스수조정기능
- 다양한웹스캔옵션
- Quick Updates
- 주간업데이트
- CVE 카탈로그모니터링
- 취약점공개정보
- Positve리서치팀에의해관리
QUICK UPDATE
| Vulnerability | CVE Release | DateMaxPatrol Release Date |
|---|---|---|
| NTP Amplication DDoS Attack(CVE-2013-5211) | 2014-02-01 | 2014-02-04 |
| OpenSSL Heartbleed(CVE-2014-0160) | 2014-04-07 | 2014-04-11 |
| OpenSSL CCS Injection(CVE-2014-0224) | 2014-06-05 | 2014-06-10 |
| Bash Shellshock(CVE-2014-6271,CVE-2014-7169 | 2014-09-24 | 2014-09-29 |
| Glibc Ghost Vulnerability(CVE-2015-0235) | 2015-01-28 | 2015-01-31 |
| HTTP.sys (IIS) Remote Code Execution(CVE-2015-1635) | 2015-04-14 | 2015-04-17 |
Total Number of CVE Signatures: 54,000 (15 Sep2016)
AUDIT MODE -WHITE BOX SCANNER
- Requires the admin account or a limited account
- Provides accurate vulnerability assessment
- Detailed system inventory
- File Integrity monitoring
- Unix file system
- Windows file system
- Oracle DB (procedure, Trigger, Function)
- CISCO (startup file, IOS image, web pages, etc)
- Default configuration analysis
- Updates checks
- Safe Account bruteforce
MAXPATROL -COMPLIANCE SCANNING MODE
| TYPE | Supported Platforms |
|---|---|
| PC | Windows 7, 8, 10, Mac OS X |
| Unix | AIX, AS400, FreeBSD, HP-UX, Solaris |
| Linux | Debian, CentOS, RedHat, SUSE, Ubuntu, Fedora, Mandriva, Oracle, Scientific |
| Windows | Windows 2000, 2003, 2008, 2012, XP, Vista, 7, 8, 8.1 |
| Database | IBM DB2, Oracle, MS SQL, Sybase ASE |
| NW | Alcatel, Avaya, Brocade ICX, CheckPoint, CISCO, F5, Huawei, Nortel, HP, Piolink |
| FW | CISCO PIX, ASA, Juniper, Checkpoint FW-1 & SecurePlatform, Fortinet, Stonesoft |
| WAS | Apache, Tomcat, IIS, Nginx, JBOSS |
| Security | Arbor Peakflow SP, Cisco ACS, IPS/IDS, Ironport |
| Hypervisor | Citrix Xen Server, Presentation Server, VMware vSphere, ESXi |
| Telco | Ericsson NodeB, RNC, Huawei GGSN, NodeB, RNC, |
| Business | Lotus Domino, MS Sharepoint, MS Exchange, Oracle EBS, SAP R3, Netweaver |
| SCADA | Cisco GRID, Siemens WinCC, Wonderware Intouch |
| Wireless | Cisco WLAN Controller |
KEY FEATURES
- All-in-Onevulnerability and Compliance Management Solution
- has a broad coverage of various hardware and software
- Agentlessand highly adaptable to network topology
- Fully support Korea Compliance Standards
- Keeps your results safely within your premises
- Nonintrusive with your infrastructure
- Capable of integration with other solutions
- Is supported by leading security experts
