Assuria NEWS Archive 2008                 Assuria NEWS Archive 2007             
 
ASSURIA NEWS ARCHIVE 2006             Assuria News 2005

21st December 2007 - Assuria AutoUpdate #72
Assuria Auditor AutoUpdate #72 is now available from the usual location.  Bulletin 62 for details

21st December - Full support for HP-UX 11i V3 (11.31) now available in AutoUpdate #71
Assuria today released AutoUpdate 71 which updates Assuria Auditor HP-UX agents to provide full support for HP-UX 11i V3.  Bulletin 60 for details.

7th December - Assuria Auditor Windows 2008 new agent.
Assuria is currently testing an all new Assuria Auditor agent for Windows 2008 Server (W2k8).  Microsoft Windows 2008 Server introduces new features and facilities and the new Assuria Auditor includes relevant check for new W2K8 features.  Any Assuria Auditor Customer or Partner that is currently testing Microsofts BETA release of Windows 2008 Server and would like to test the new Assuria Auditor agent on W2K8 should contact w2k8@assuria.com to register interest in a BETA Release of the Assuria Auditor W2K8 agent.   See Bulletin 59.

6th December 2007 - Further User requested enhancements - New Risk Levels
In addition to the  recent  released user requested enhancements - Inventory and Logging Policy and checks.

An enhanced Security Risk Level model is to be introduced during Q1 2008.  See Assuria Bulletin 58.   The current 3 level risk level model used within Assuria Auditor, that is:
 - HIGH
 - MEDIUM
 - LOW

The new risk level scheme will be migrated to a new five level model, that is:
 - CRITICAL
 - HIGH
 - MEDIUM
 - LOW
 - INFORMATION

The 5 Level Risk model is in addition and complementary to the recently introduced CVSS scoring systems  see Assuria Bulletin 46  AutoUpdate 65 from August 2007.

The new Risk Levels will be introduced along with a new reporting subsystem in Q1 2008.

30th November 2007 - Assuria Auditor AutoUpdate #70 released
This AutoUpdate, #70, contains new and updated product content and features. Features include new 'logging' Policy and checks.  Please see Assuria Bulletin 57 for more information.

31st October 2007 - Assuria Auditor AutoUpdate #69 released
This AutoUpdate, #69, contains new and updated product content and features. Features include Policy and checks, minor bug corrections and HIPAA mapping to the Assuria Auditor Console database.  Please see Assuria Bulletin 54 for more information.

17 October  2007 - Assuria Auditor Agent for SLES 10 on x86 released.
Assuria is pleased to announce the availability of Assuria Auditor Agent Novell SuSE Enterprise LINUX (SLES-10) running on x86 computers. See Bulletin 53

16th October 2007 Assuria Auditor agent for HP-UX 11i (PA-RISC) released
Assuria Auditor agent for HP-UX 11i (PA-RISC) with consolidated AutoUpdates up to and including AU#67 is now available for download. More information please see Bulletin 52.

10th October 2007 - Assuria Auditor and CVE compliance. 
The latest issue of the CVE-Announce e-Newsletter states "Assuria Limited has achieved the second phase of the CVE Compatibility Process by submitting a CVE Compatibility Questionnaire for Assuria Auditor (formerly ISS System Scanner), which is posted at http://cve.mitre.org/compatible/questionnaires/86.html. In Phase 2 of the compatibility process the organization's completed compatibility requirements evaluation questionnaire is posted on the CVE Web site while it is evaluated by MITRE as the final step towards the product or service being registered as "Officially CVE-Compatible."

25th September 2007 - Assuria Auditor Agent for SLES 10 on IBM System Z.
Assuria is pleased to announce the availability of Assuria Auditor Agent Novell SuSE Enterprise LINUX (SLES 10) running on IBM System Z computers.

24th September 2007 - Assuria Auditor Agent Updated Service Pack released.
Assuria today released an updated Service pack for its Windows agents.  The Service Pack updates newly installed agent up to AutoUpdate 63 in one single update process.

19th September 2007 - Assuria Auditor Agent for NOVELL SLES 9 (SuSE Enterprise LINUX 9) and AutoUpdate #67 available.
Assuria today released a new Assuria Auditor agent for Novel's SuSE Enterprise LINUX 9 (SLES 9) platform.  Assuria AutoUpdate 67 adds key features to the Assuria Auditor Console to support this new agent.  SLES 10 agents for x86 and IBM Z series are in the final stages of testing and will be released shortly.

30th August 2007 - Assuria Auditor AutoUpdate #66 available
Assuria Auditor AutoUpdate #64 is now available in the usual location. See Bulletin 47

21 August 2007 CVSS support introduced to Assuria Auditor
Assuria has introduced full support for CVSS V2 into Assuria Auditor. CVSS is a vulnerability scoring system designed to provide an open and standardized method for rating IT vulnerabilities. CVSS helps organizations prioritize and coordinate a joint response to security vulnerabilities by communicating the base, temporal and environmental properties of a vulnerability. For additional information on CVSS v2, please see http://www.first.org/cvss.  See  Assuria Bulletin 46.

21 August 2007 - Assuria Auditor Auto Update 65
Assuria Auditor Auto Update 65 now available. See Assuria Bulletin 46.

10 August 2007 RHEL 5 Agent available
Assuria Auditor Agent for RHEL 5 now available.. More information in Assuria Bulletin 45. Bulletin 45

30th July 2007 Assuria Auditor AutoUpdate #64 available
 Assuria Auditor AutoUpdate #64 is now available in the usual location. See Bulletin 44

19 July 2007 - Console and VITA 4.2.8 now available
A new build of the Assuria Auditor Console and a new updated release of the Assuria Auditor Console Web Interface are now available for download. The web interface now known as VITA to avoid confusion with another called VISTA. Bulletins 42 and 43 for more information. Bulletin 42                    Bulletin 43

July 2007 -Foresight 03 available
Assuria is driven by it's customer and we are always keen to hear of features or functionality you would like to see in our products. Please send feature and functionality requests to enhancements@assuria.com.
Thank you.
Assuria.
Foresight 03

5 July 2007 - AutoUpdate 63 released
AutoUpdate 63 delivers security content and product updates. More information in Assuria Bulletin 41. Bulletin 41

30 June 2007 New agent for HP-UX Itanium available
This Bulletin introduces the availability of a new Assuria Auditor agent for HP-UX 11.23 running on Intel Itanium (ia64) processors. More information in Assuria Bulletin 40.

20 June 2007 - Assuria introduces Assuria Log Manager
Assuria demonstrated the all new Assuria LOg Manager to delegates at the FIRST Conference in Sevile, Spain.   Assuria Log Manager  manages large communities of logs from Servers and Workstations, Windows, LINUX and UNIX as well as Databases, Applications and network devices such as firewalls and routers. Assuria Log Manager

20 June 2007 - FIRST Conference Seville, Spain
Assuria sponsored the Beer and Gear evening at the FIRST Conference in Seville, Spain.  The conference was attended by over 450 delegates from all around the world.  Information on FIRST from Http://www.first.org.

5 June 2007 - AutoUpdate 62 released
AutoUpdate 62 delivers security content and product updates. ISO-17799 mapping has been added to the Asuuria Auditor database. Error reporting for customer application which read the database have been improved along with a new field 'Error hint'. More information in Assuria Bulletin 39. Bulletin 39

7th May 2007 - Success on Saturday, disappointment on Sunday
Assuria's Chairman, Terry Pudwell, had dusted off his racing overalls and entered the GT90's Revival race at the British Round of the FIA GT Championship at Silverstone.

On Saturday driving one of the 2 Stealths entered by Krayem Racing, Terry was 2nd in the Assuria sponsored Stealth B6 with David Krayen 3rd in the other Stealth B6.

Sunday was disappointment for Terry who had to pull out on the 2nd lap with a mechanical problem, but David Krayem went on to win the race. Success for the Stealths and the Krayem team at Silverstone.

3 May 2007 - Regulatory and standards reporting with Assuria Auditor
AutoUpdate #61 introduces Regulatory and standards based reporting to Assuria Auditor. More information in Assuria Bulletin 37. Bulletin 37

3 May 2007 - AutoUpdate 61 released - Latest update from Assuria.
AutoUpdate 60 now available. More information in Assuria Bulletin 36. Bulletin 36

3 May 2007 - Assuria to sponsor GT90 Sport car
Assuria's Chairman, Terry Pudwell, has dusted off his racing helmet and overalls to enter the GT90's Revival race at the British Round of the FIA GT Championship. Assuria is sponsoring the Stealth B6 to be driven by Terry and has invited customers and staff to join for a fun weekend at Silverstone.

More information: Stealth Cars - http://www.stealthcars.co.uk/ GT 90s Revival - http://www.gt90s-revival.com/index.html FIA GT Championship - http://www.fiagt.com/

More information in Assuria Bulletin 38. Bulletin 38

12th April 2007 - Assuria moving to new offices within the University campus.
Assuria will be moving to the Science and Technology Centre on the University Campus on the 17th April. The SCT is a couple of hundred yards from the current location and will allow for further growth. The new address is:

Assuria Limited,
Science and Technology Centre,
The University of Reading,
Earley Gate,
Reading,
RG6 6BZ.

All other contact details remain unchanged.

11th April 2007 - Port to SuSE Enterprise Linux on IBM System Z
Assuria today started the port of Assuria Auditor onto SuSE Linux running on IBM System Z systems. A BETA will be available soon. Users wishing to take adavantage of the BETA should contact Assuria. This new port in in addition the the 3 BETA agents recently released.

29th March 2007 - AutoUpdate 60 released
This is the March security content release. AutoUpdate 60 now available for more information in Assuria Bulletin 34. Bulletin 34

29th March 2007 - 3 New BETA agents released.
3 new agents are available for BETA use. The agents are SUN Solaris 10 X86, SuSE Enterprise LINUX and soon HP-UX for Itanium . More information in Assuria Bulletin 34. Bulletin 33

2nd March 2007 - AutoUpdate 59 released.
This is the February content release. AutoUpdate 59 now available. More information in Assuria Bulletin 32. Bulletin 32

19th February - AutoUpdate 58 released
AutoUpdate 58 now available. Features introduced include:
- New Management Graphs - Agents
- UNIX default password settings
- Agent return communicatons diagnostic
- SSHD Configuration settings
- Updated AIX check, Solaris 10 policy
- Updated RedHat Enterprise 3 and 4 Policy
More information in Assuria Bulletin 31

5th February - Assuria a FIRST sponsor at the 19th Annual First Conference - Seville, Spain
Assuria is sponsoring a Beer n' Gear evening where Assuria will show our products to delegates while helping them to relax in a friendly environment after the day’s proceedings. See you in Seville - June 17 - 22nd 2007?

26th January - XPU 57 released
AutoUpdate Update 57 is a security content update, containing updated security content in the form of new and updated checks and policies, and updated patch databases, policy navigators and console database content. The update is compatible with, and suitable for application to Assuria Auditor agents.  See Bulletin 30.

24th January 2007 - Assuria Auditor changes in 2007
Assuria have delivered a significant number of updates and enhancements to Assuria Auditor during 2006.  Many of the updates and enhancements are “under the covers” and not always visible to users.  This Bulletin highlights the changes that were made to Assuria Auditor during 2006.

17th January 2007 - AutoUpdate 56 add new features to Assuria Auditor.
AutoUpdate 56 has added several new features to Assuria Auditor. 
Features introduced include:
  - Global Policy Variable Configuration
  - Exception Configuration
  - Import of Agent Result Files
  - XPU Integrity Enhancements
  - XPU Integrity - New Platform Support
  - Package Baseline
More information about these features are in Assuria Bulletin 28.

ASSURIA NEWS ARCHIVE 2006

20th December 2006 - XPU 55 released
X-Press Update 52 is a security content update, containing updated security content in the form of new and updated checks and policies, and updated patch databases, policy navigators and console database content. The update is compatible with, and suitable for application to, both Assuria Auditor and ISS System Scanner agents.  See Bulletin 27.

18th December 2006 - Transition from ISS to Assuria is completed
The release by Assuria of an updated version of XPressUpdate.exe program was the final step in teh transition of ISS Systems Scanner from ISS to Assuria. Since Internet Security Systems Inc. (ISS) announced the transition of ISS System Scanner to Assuria Limited in July 2005 Assuria and ISS have been working closely together on a program to achieve the seamless transition of ISS System Scanner customers to Assuria and Assuria Auditor. The final step of the transition program, a new version of the X-Press Update software (XPressUpdate.exe) is now available. This completes the transition to Assuria which has been achieved without any disruption to existing System Scanner users. See Bulletin 26

30th November - XPU 54 released
X-Press Update 54 is a security content update, containing updated security content in the form of new and updated checks and policies, and updated patch databases, policy navigators and console database content. The update is compatible with, and suitable for application to, both Assuria Auditor and ISS System Scanner agents.  See Bulletin 25.

16th November - XPU 53 released
Assuria and ISS have been working closely together on a 12 - 18 month program to achieve the seamlessly transition of ISS System Scanner customers to Assuria and Assuria Auditor. XPU 48 introduced the first feature that was a result of the transition program and subsequent updates have added further underlying features. XPU 49 –> 53 have introduced Console and Agent support for code, check and policy signed by Assuria in addition to ISS.Assuria’s plans are that a new version of the XPressUpdate.exe will be available in mid December 2006. This version is currently undergoing extensive testing by Assuria.  See Bulletin 24

6th November - XPU 52 released
X-Press Update 52 is a security content update, containing updated security content in the form of new and updated checks and policies, and updated patch databases, policy navigators and console database content. The update is compatible with, and suitable for application to, both Assuria Auditor and ISS System Scanner agents.  See Bulletin 23.

1st November 2006 - AssuriaOnline introduced
Assuria announced the availability of AssuriaOnline – the new Assuria customer and partner web resource centre. Assuria Online will include resources and information for our customers and partner only, including the Assuria Download Centre, a Support Centre and other online resources.  This is another important step in the transition of Assuria Auditor from ISS to Assuria.  Read more

30th October - XPU 51 released
XPU 51 introduces Solaris and AIX agents that will accept code signatures from Assuria as well as ISS, new XPU Integrity policy for Solaris and AIX and a new Software Package Baseline capability. See Bulletin 21.

13th October - Assuria joins Veracomp's Security Day in Poland.
Terry Pudwell, Assuria Chairman, presented at Veracomp's Security Day outside Krackow, Poland.  The Security Days was well attended with many of Poland's leading resellers represented.

10th October - ETEK Colombia
ETEK Colombia have recently signed up to be Assuria's representative in Colombia.

3rd October 2006 - XPU 50 released
This XPU provides new and updated checks for Windows, AIX 5L and Red Hat Enterprise agents. Updated Patch databases are provided for Solaris, HP-UX and AIX 5L.  See Bulletin 20

29 September 2006 - Assuria and ISS Italia close sale
Assuria and ISS Italia have recently closed the sale of Assuria Auditor and ISS Proventia products to a major Italian financial organisation.  The sale was led by ISS Italia with support from Assuria.

22 September 2006 - SHELL STEP - South East regional final
Reading University student Daniel Saxil-Nielsen was selected as Runner-Up when he represented Assuria and the Reading Knowledge Transfer Network at the Regional final of the SHELL STEP programme on Wednesday 20th September.

 
Daniel with his display at the regional final.

Daniel worked with Assuria during the summer months. The SHELL STEP programme is a UK-wide programme offering undergraduates project-based work within small to medium sized businesses.  Assuria provided projects for 2 students both of which were very successful. See the SHELL STEP web site.

4 September 2006 - XPU 49 released
This XPU provides new and updated checks for Windows, AIX 5L and Red Hat Enterprise agents. Updated Patch databases are provided for Solaris, HP-UX and AIX 5L.  See Bulletin 18

19th August 2006 - XPU 48 released
XPU 48 introduces the first feature that is a result of the transition program. Assuria will be generating Licence keys for customers in the near future and this XPU 48 introduces support for Assuria generated keys in addition to keys generated by Assuria or ISS using the ISS system.  See Bulletin 17

2nd August2006 - XPU 47 released
This XPU provides new and updated checks for Windows, AIX 5L and Red Hat Enterprise agents. Updated Patch databases are provided for Solaris, HP-UX and AIX 5L.  See Bulletin 16

21st July 2006 - XPU 46 released
This XPU provides new and updated checks for Windows, AIX 5L and Red Hat Enterprise agents. Updated Patch databases are provided for Solaris, HP-UX and AIX 5L.  See Bulletin 15

16th June 2006 - XPU 45 released
This XPU provides new and updated checks for Windows, AIX 5L and Red Hat Enterprise agents. Updated Patch databases are provided for Solaris, HP-UX and AIX 5L.  See Bulletin 13

23rd May 2006 - Axians TMT France an Assuria reseller.
Axians TMT has signed with Assuria to resell Assuria Auditor in France.

4May 2006 - XPU 44 released
This XPU provides new and updated checks for Windows, AIX 5L and Red Hat Enterprise agents. Updated Patch databases are provided for Solaris, HP-UX and AIX 5L.  See Bulletin 12

26 April 2006 - Continued local support for ISS System Scanner technology in Asia Pacific from Internet Security Systems KK
Assuria Ltd and ISS KK (Internet Security Systems - Japan) are pleased to announce today a collaboration which will provide continuation of existing local support services to the many users of ISS System Scanner technology in the Asia Pacific region. Read more

23rd March 2006 - Veracomp, Poland sign with Assuria.
Veracomp of Krakrow Poland has signed with Assuria as Distributor.  Assuria and Veracomp are jointly working on a major project in Poland.

10thMarch 2006 - XPU 42 released
XPU, 42, provides new and updated checks for Windows, Red Hat Enterprise and AIX agents. Updated Patch databases are provided for Solaris and HP-UX. The Windows content includes that checks for the application of critical fixes described in the February Microsoft Security Bulletins.  In addition the update to the IBM AIX agent includes a set of checks, and a policy (aix-fixes) that runs them, which are being released as a beta release. These new AIX checks introduce a mechanism for checking for the absence of AIX fixes on AIX 5.1, 5.2 and 5.3.  

20th February 2006 - Solaris 10 support available
Assuria announces the Level 1 availability of Assuria Auditor / ISS System Scanner support for SUN Solaris 10 provided by the current agent for Solaris 9.    The support levels are described below and at http://www.assuria.com/platform-support-levels.htm.  See Assuria Bulletin 07

17th January 2006 - XPU 41 released
XPU 41 includes Updates  for agents on Microsoft Windows 2000 (Server and Professional), Microsoft Windows Server 2003 and Red Hat Enterprise Linux (Versions 3&4).  Updated patch database files are provided for Sun Solaris and HP HP-UX agents.  Checks for the patches identified by Microsoft in the “Patch Tuesday” Security Bulletin published on the 10^th January 2006 are included. 

ASSURIA NEWS 2005

15th December 2005 - XPU 40 released
XPU 40 includes a Console Database update with updated information on new and existing checks.   The HTML Report is re-styled with a new font and cleaner appearance.  Updated Policy Navigators for Red Hat Enterprise Linux, Windows 2000 and Windows 2003. Agents: Updates are included for agents on Microsoft Windows 2000 (Server and Professional), Microsoft Windows Server 2003, Sun Solaris on SPARC (Versions 7, 8 & 9) and Red Hat Enterprise Linux (Versions 3 & 4).  Updated patch database files are provided for Sun Solaris and HP HP-UX agents. Checks for the patches identified by Microsoft in the “Patch Tuesday” Security Bulletin published on the 13^th December 2005 are included. 

5th December - Secure Network Technologies Inc. partners with Assuria.
Secure Network Technologies of Syracuse, New York have joined the growing team of Assuria partners.

24 November - Elite Computer Solutions in Saudi Arabia partners with Assuria
Elite Computer Solutions have signed with Assuria to sell and support the former ISS product System Scanner now managed and developed by Assuria. 

4th November - 1Pro Latvia sign with Assuria
1Pro based in Riga, Latvia today signed with Assuria to sell and support former ISS System Scanner users in Latvia.  

1st November - Patriot Technologies partners with Assuria
US Government certified Patriot Technologies has partnered with Assuria to provide product continuity and ongoing support for their ISS System Scanner customers following the transition of System Scanner to Assuria.  More information about Patriot Technologies at http://www.patriot-tech.com. 

October 26th - Secure Technology Hawaii latest Assuria Partner.
Secure Technology Hawaii, based in Honolulu today became Assuria's latest international partner.  For information about Secure Technology Hawaii please visit http://www.sthi.com. 

October 15th - XPU 38 available
Assuria today released XPU 38 which adds information to the System Scanner Console database and Policy Navigator for the new Red Hat Enterprise Linux version 3 and 4 agent

October 14th - Fishnet Security joins Assuria
Fishnet Security, Headquartered in Kansas, has signed with Assuria as a reseller of Assuria Auditor.  Assuria Auditor formerly ISS's System Scanner is being actively developed by Assuria.  Information about Fishnet Security http://www.fishnetsecurity.com.

October 12th - Assuria releases a new agent for Red Hat Enterprise Linux version 3 and 4
Assuria today released a new Red Hat Enterprise Linux agent, this agent is fully compatible with ISS's System Scanner.  

October 7th - CONDYN to represent Assuria in Southern Africa
CONDYN today signed as Assuria's representative for South African and sub-Saharan Africa.  Information about Condyn please visit http://www.comdyn.net.

September 20th - EAR (Early Access Release) Red Hat Enterprise 3 and 4 agent
Assuria today has made available an EAR (Early Access Release) of the new Assuria Auditor agent for Red Hat Enterprise Linux version 3 and 4.  A small number of customers have been invited to evaluate this software in their labs.  The full release of the agent is expected in 1 to 2 weeks

September 14th - NOREG, Budapest new partner in Hungary
Budapest based NOREG is the latest Reseller to sign with Assuria.  Information about NOREG  http://www.noreg.hu 

September 8th - XPU 37 available
Assuria today has released XPU 37 for ISS System Scanner / Assuria Auditor.  For information on the the content of XPU 37 please click here.

August 31st - Informzachita Moscow signs with Assuria
Moscow based Informzachita have signed with Assuria as reseller for Russia and CIS.  Informzachita - http://www.infosec.ru/ 

August 30th - PSI Brasil is the latest Assuria partner.
PSI Brasil become the latest Reseller to sign with Assuria.  PSI are based in Sao Paulo http://www.prodserv.com.br 

August 26th - IntraSystems signs up with Assuria
IntraSystems of Randolp, MA has signed with Assuria.  http://www.intrasystems.com/

August 22nd - New partners in Germany and The Netherlands
GAI NetConsult Gmbh and PointGroup have joined the Assuria Partner Program.
GAI NetConsult are based in Berlin http://www.gai-netconsult.de 
PointGroup are based in The Netherlands.  http://www.veilig.net

August 9th 2005- OVAL Board
Nick Connor of Assuria Limited has joined the OVAL Board.  http://oval.mitre.org/community/board/board.html

August 2nd 2005 - OVAL compatible.  
Assuria Limited has declared that its host-based vulnerability assessment tool, Assuria Auditor, will be OVAL-compatible. For additional information about this and other OVAL-compatible products, visit the OVAL-Compatible Products and Services page.  See Assuria's OVAL compatibility declaration here. 

July 28th 2005 - ISS EOL Announcement for System Scanner.
Internet Security Systems today announced the End of sale (EOS) of System Scanner™ and the start of the transition of product support and development to Assuria.  Read the ISS Announcement on the ISS web site.

System Scanner is a registered trademark of Internet Security Systems, Inc.