Hi Nancy,

I have seen good comments on the NETIQs tools. They are not cheap but they do have a trialware of each:

http://www.netiq.com/products/vsm/default.asp
http://www.netiq.com/products/sa/default.asp

Given a choice I would go with RealSecure:

http://www.iss.net/products_services/managed_services/managed_security_services.php

I've used that in the past when I was working for the government but it's not cheap either...


>Hi, Mike-
>
>Nice to see you, even if only via Internet. Hope you've been keeping well.
>
>>It seems to be very popular lately:
>>
>>http://www.webservertalk.com/showthread.php?s=b0ba66acd338c90e1de2842f3189d203&threadid=171959&perpage=10&pagenumber=1
>
>The consultant found that very thread, as a matter of fact, at the first hack. He'd searched on the phrase in the hack (don't have my notes out). Spent the day at the client's site cleaning and scrubbing their server.
>
>I doubt it's in anyway related to the ASP.NET app. Which is one nice point, at least. Another is there is apparently no damage done to actual files.
>
>The consultant doesn't have any server security tools--other than to probe ports, I guess. If anyone has recommendations for a good analysis tool, I'd be happy to hear about it and pass the info on to the client.
>
>The tool Tracy kindly pointed me to is...confusing at best. Very ambigious reports. I know it's free, community tool, so I'm not looking gift horses in the ... mouth, but maybe something a bit more developed would be good.
>
>Anyway, thanks for the help, Mike.