Introduction

Introduction to GFI LANguard Network Security Scanner

GFI LANguard Network Security Scanner (GFI LANguard N.S.S.) is a security auditing tool, which proactively reports, and supports fixing of network vulnerabilities in a timely fashion.

During a security audit, GFI LANguard N.S.S. scans your entire network, IP by IP, and alerts you about weaknesses discovered on your network(s). Using a combination of operating system functions together with the features offered by GFI LANguard N.S.S., you can proactively deal with the security issues detected. For example, security issues can be proactively detected by shutting down unnecessary ports, closing shares as well as installing service packs and hot-fixes before malicious persons can exploit them.

By default, GFI LANguard N.S.S. allows you to perform security audits on both Windows and Linux-based target computers. During an audit, the scanning engine collects various hardware and software information from the scanned targets. This includes the service pack level of each target computer, potentially vulnerable devices such as wireless access points and USB devices, installed applications, as well as open shares and open ports. The scanner also enumerates specific OS configuration settings such as Windows registry settings and password policy configuration details aiding in the identification of common security issues related to an improperly configured operating system (such as an OS running on default settings).

GFI LANguard N.S.S. is also equipped with algorithms that check for the presence of particular security software (i.e. anti-virus and anti-spyware applications) as well as ensure that they are running with the latest definition files released by their parent company. Where applicable, the scanning engine will also check that important security features such as real time scanning are enabled on anti-virus and anti-spyware applications allowing you to ensure that the security solutions deployed on your network are running effectively.

Out of the box, GFI LANguard N.S.S. also supports patch management for non-English operating systems. This means that you can automatically download missing Microsoft updates in a variety of languages and deploy them network-wide. You can also use the patch deployment engine to remotely install custom software as well as third party (non-Microsoft) patches network-wide (for instance anti-virus definition updates).