<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<META content="MSHTML 5.50.4611.1300" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><SPAN class=223013819-25112002><FONT face="Comic Sans MS" color=#000080
size=2>How secure is NSClient?</FONT></SPAN></DIV>
<DIV><SPAN class=223013819-25112002><FONT face="Comic Sans MS" color=#000080
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=223013819-25112002><FONT face="Comic Sans MS" color=#000080
size=2>I was asked this question this morning by the resident NT guru, since
we're considering monitoring a few NT boxes which are already 'exposed' to the
Wild Wild Net.</FONT></SPAN></DIV>
<DIV><SPAN class=223013819-25112002><FONT face="Comic Sans MS" color=#000080
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=223013819-25112002><FONT face="Comic Sans MS" color=#000080
size=2>All I can see is that NSClient has password support, but that pretty much
any command (?) can be executed.</FONT></SPAN></DIV>
<DIV><SPAN class=223013819-25112002><FONT face="Comic Sans MS" color=#000080
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=223013819-25112002><FONT face="Comic Sans MS" color=#000080
size=2>Any suggestions on locking this down? Or does this fall under the
"I would't recommend it unless you're fond of rebuilding servers" school of
thought?</FONT></SPAN></DIV>
<DIV><SPAN class=223013819-25112002><FONT face="Comic Sans MS" color=#000080
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=223013819-25112002><FONT face="Comic Sans MS" color=#000080
size=2>jc</FONT></SPAN></DIV></BODY></HTML>