|
Product Penetration
Assessment
In September 2005 Symantec
Professional Services partnered with
NetworkStreaming to assess the security
architecture and implementation of the SupportDesk™
8 application and appliance. During the
engagement, Symantec performed a Product
Penetration Assessment to evaluate the application
components and related environment against
established security best practices. Symantec
Professional Services has again partnered with
NetworkStreaming to perform a Product Penetration
Test of the SupportDesk™ 9 application and
appliance.
A product penetration
assessment is designed to provide insight into
methods of attack against a specific product or
suite of applications and present a reasonable
example of what an attacker might accomplish. The
assessment is not intended to provide a
comprehensive security evaluation; rather, it
concentrates on modeling specific attack
scenarios, identifying vulnerabilities, and
validating exploitation possibilities. This
document summarizes Symantec's findings.
 Download the SupportDesk
9 Security Information
White Paper
Download the latest version of
Adobe Reader (Required for SupportDesk Document)
How Softanyware™ works
Firewalls are designed to block incoming traffic.
Most remote desktop connection tools are blocked
initially by firewalls because they send traffic
inbound to remote systems. A remote connection
might be established by port forwarding or complex
firewall configuration, but changes to your
firewall setup can compromise security.
Firewalls do allow outbound traffic, however. When
you access the internet, for example, you are
sending outbound traffic through your firewall.
Softanyware™ establishes a remote desktop
connection in the same way. Both Softanyware™ and
the end-user send secure outbound traffic through
their firewalls to the secure servers at
Softanyware™.
Since all Softanyware™ sessions are initiated via
outbound connections, you can do remote computer
control transparently through corporate firewalls.
Click to
expand picture.
Each Softanyware™ session is initiated by you when the support issue occurs and
is then discontinued automatically when the
session is complete, allowing only a small,
irregular period of time wherein Softanyware™
traffic is crossing the internet. This secure
architecture provides the first level of Softanyware™ security, obscuring the entire
support process by leaving existing security
structures in place and spontaneously generating
each support session.
With Softanywares™' fast install/connect, we are
able to begin troubleshooting immediately as soon
as you call in. You
are connected in seconds, without having to buy expensive software. This means that
you can use Softanyware™ to support your entire
remote user base with zero end-user deployment or
maintenance. Your download is only 380KB,
and it automatically uninstalls at the end of the
session, leaving no footprint on your
computer. As long as you can surf
the internet, you can easily connect to our
service.
|