{"id":705,"date":"2011-11-01T07:45:11","date_gmt":"2011-11-01T11:45:11","guid":{"rendered":"https:\/\/www.tmurgent.com\/TmBlog\/?p=705"},"modified":"2013-04-06T11:47:15","modified_gmt":"2013-04-06T15:47:15","slug":"how-do-you-know-if-app-v-apps-need-security-updates","status":"publish","type":"post","link":"https:\/\/www.tmurgent.com\/TmBlog\/?p=705","title":{"rendered":"How do you know if App-V Apps need security updates?"},"content":{"rendered":"
\"Secunia I was recently looking into alternatives to Windows Intune<\/a> for ways to check if non-Microsoft application updates are needed, and stumbled into a company called Secunia<\/a>. More importantly to their being an alternative to Intune, they developed a neat way to look at your App-V packages and tell you if those need updates too.<\/div>\n

 <\/p>\n

Secuna, based in Denmark, has several products aimed at managing the patching process. The company maintains a database of information about app versions and security risks, and then uses that with a couple of products, PSI and CSI, to automatically advise and possibly remediate.<\/div>\n

 <\/p>\n

The free personal product, Secunia PSI (Personal Software Inspector), that covers most of the standard ISV applications. It adds an agent to your PC that looks at your installed applications and compares it to the database. It then tells you what isn’t patched, what the risk is, and where to go for the update. Sometimes the update is automated, but often you need to go visit the ISV website to perform the update.<\/div>\n

 <\/p>\n

After playing with PSI, I contacted them and suggested that because App-V programs don’t go to the Add\/Remove programs list, these are ignored and it might be interesting to try to cover them. They blew me away when they responded that not only were they aware of this, the beta of the Commercial product Secunia CSI 5.0 has an added feature to address this! The product has since been released.<\/div>\n

 <\/p>\n

The CSI product (Corporate Software Inspector) is a centralized management product for multiple client machines; a better solution in the enterprise. From one console you can schedule scans on all of your Windows OSs and now Mac OSs. It works either with client agents, or can agentlessy scan clients. This also ties into their excellent database of security holes and available patches. Plus it can optionally tie into SCCM or WSUS if you have that.<\/div>\n

 <\/p>\n

The App-V scanning support is not implemented at the Windows machines using App-V. Instead, you run a scan on the file server hosting the App-V package repository (e.g.: “Content share”). You need to install a very little known tool released by Microsoft that is an Application Virtualization SFT Viewer<\/a> tool. This tool, which integrates into the Windows Explorer, provides CSI access to check the versions of applications and provide it’s analysis.<\/div>\n

 <\/p>\n

Now from their console, you can determine which packages need to be updated for security fixes. Not a bad idea! While I did not perform a full evaluation of the product, it looked “interesting”.<\/div>\n

 <\/p>\n

\"Secunia
\nClick to enlarge<\/a><\/p>\n

 <\/p>\n

CSI has a free trial version if you are interested. Visit their website at www.secunia.com<\/a>. In addition to PSI and CSI, they also have a Vulnerability Intelligence Manager, and an Online Software Inspector.<\/div>\n","protected":false},"excerpt":{"rendered":"

I was recently looking into alternatives to Windows Intune for ways to check if non-Microsoft application updates are needed, and stumbled into a company called Secunia. More importantly to their being an alternative to Intune, they developed a neat way to look at your App-V packages and tell you if those need updates too.  … Continue reading How do you know if App-V Apps need security updates?<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_exactmetrics_skip_tracking":false,"_exactmetrics_sitenote_active":false,"_exactmetrics_sitenote_note":"","_exactmetrics_sitenote_category":0,"footnotes":""},"categories":[36,35,47,48,50],"tags":[4,26],"class_list":["post-705","post","type-post","status-publish","format-standard","hentry","category-all","category-appv4","category-appv5","category-sequencing","category-tools","tag-app-v","tag-secunia","entry"],"_links":{"self":[{"href":"https:\/\/www.tmurgent.com\/TmBlog\/index.php?rest_route=\/wp\/v2\/posts\/705","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.tmurgent.com\/TmBlog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.tmurgent.com\/TmBlog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.tmurgent.com\/TmBlog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.tmurgent.com\/TmBlog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=705"}],"version-history":[{"count":18,"href":"https:\/\/www.tmurgent.com\/TmBlog\/index.php?rest_route=\/wp\/v2\/posts\/705\/revisions"}],"predecessor-version":[{"id":1440,"href":"https:\/\/www.tmurgent.com\/TmBlog\/index.php?rest_route=\/wp\/v2\/posts\/705\/revisions\/1440"}],"wp:attachment":[{"href":"https:\/\/www.tmurgent.com\/TmBlog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=705"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.tmurgent.com\/TmBlog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=705"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.tmurgent.com\/TmBlog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=705"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}