Server Security

MailSecurity for Exchange/SMTP is an email content checking, exploit detection, threats analysis and anti-virus solution that removes all types of email-borne threats before they can affect your email users. MailSecurity s key features include multiple virus engines, for better protection; email content and attachment checking, to quarantine dangerous emails; an exploit shield, to perform email intrusion detection & defence; and an email threats engine, to analyse & defuse HTML scripts, .exe files & more. The software is available for VS API or as a gateway version - The VS API version integrates with Exchange Server 2000 and scans the Exchange 2000 information stores. The gateway version should be deployed at the perimeter of the network as a mail relay server. MailSecurity for Exchange/SMTP can also be used for free, using a single virus scanning engine, which makes it a great no-cost solution for small mail servers.

MONyog MySQL Monitor enables database administrator to manage multiple MySQL servers from a web interface that provides access to a variety of tools to monitor and tune server performance, analyze security settings, view current server processes and more. It allows you to view a wide range of vital servers statistics that can help you identify performance problems (slow queries, table locks, database connections etc.) as well as security issues. Other features include support for SSH tunneling, statistical charts, email alerts, query log analyzer, and detailed documentation. MONyog comes with a built-in web server and does not require any installation of remote agents.

KFSensor is a host based Intrusion Detection System (IDS)that acts as a honeypot to attract and log potential hackers and portscanner-kiddies by simulating vulnerable system services and even Trojans. You can create different scenarios, select which ports the program should act upon and what action to take when access is attempted. KFSensor provides detailed logging, analysis of attack and security alerts. The log view dispays details about each attempted access, as well as the computer name and IP address. You can choose to be alerted by sound, blinking tray icon or email. The program can run as service, allowing you to keep it running in the background at all times.

8Signs Firewall is a powerful rules based software firewall for administrators that want to protect a Windows Internet server. It offers features like stateful inspection, HTTP filtering, MAC address filtering, port scan detection, SYN flood protection, IP address ban lists, Tarpits and remote administration. Additional features include time sensitive rules (that will only take effect at certain times), separate rulesets for multiple network adapters, support for all protocols (TCP, Netbeui, IPX etc.), detailed logging, NT Service and more. 8Signs Firewall is aimed at administrators or advanced users that are comfortable with configuring their own rules to restrict or limit specific traffic on the network. It offers more flexibility than most personal firewalls, however at the same time requires a greater level of expertise in order to properly configure it. 8Signs Firewall was created by the author of the former ConSeal Firewall.

ServerMask removes or modifies unnecessary response data and provides control over visible server header data in HTTP responses. It includes session cookie masking, a unique feature that permits the customization of any type of session cookie (including the Windows-specific ASP session cookie). ServerMask can also emulate the Apache Web server HTTP header order and disable Microsoft WebDav with one click to suppress its multiple identifiable headers. In addition, it also removes the Windows-specific Public header from HTTP responses and converts the Windows SMTP banner to any message. ServerMask runs as an ISAPI filter and can be installed in a matter of minutes. It provides a valuable addition to any security strategy by masking the real identity of the server software.

Password Policy Enforcer allows network administrators to go beyond the standard Windows options and create and enforce a password policy, that ensures that users are choosing strong (difficult to crack) passwords. PPE checks every new password for compliance with the policy. Passwords that do not comply with the policy are rejected. PPE also displays a customizable password policy message dialog that help users choose a compliant password without having to call the helpdesk for assistance. Policies include options on special characters, upper/lower case, unique characters, numeric characters, dictionary options and more. Policies can be enforced globally or restricted to selected users, so that there can be different password policies for different users. The program completely integrates into the MS Management Console.

ThreatSentry is an IIS ISAPI add-on, that continuously collects, analyze and organizes server events into an evolving baseline of acceptable activity. Each server connection is compared against this baseline to identify and take action against any activity falling outside of acceptable parameters. The program starts in a training mode were it starts to learn which activity should be considered normal and which not. The administrator can interact with the results to further fine tune the results. You can define a security policy that will act upon threats by blocking the IP address, sending alerts (email, pager, visual, audio) or stopping the web service.

FourEyes allows network administrators to enforce a four-eyes policy on Windows NT, 2000 and XP workstations or servers by requiring two users to authenticate during a local logon. A user can only use the computer if another user (the observer) also enters their username and password (or other authentication information). FourEyes does not include an authentication subsystem, but uses the existing software and hardware for authentication.