Linux and OSX Management - Sys admins

[shadow_man]

Hi guys,

As admins how do you regulate your OSX / Linux users.

I'm talking about locking down USB access on mass. Websense type items to search regular expressions and report on fraud / data theft etc.

I'm basically looking for a product with centralized management that can allow me to take more control of the Linux / OSX contingent.

Thanks,
J

 

[Maverick Jester]

Websense works on OSX and Linux?

Also, a solution such as Centrify might work best for you.

 

[shadow_man]

Websense works on OSX and Linux?

Also, a solution such as Centrify might work best for you.

Is that a question or a statement?

I don't have Websense in house at the moment, but i'm possibly considering it for the Windows stuff. If it works on OSX and Linux, then thats great too.

I also wouldn't mind some other sort of utility that allows one to block USB etc. I see AD on Mac as a waste of time (unless someone can enlighten me as to otherwise).

Any idea on cost for Centrify?

EDIT: I've also found Likewise Open which allows one to do so - A colleague mentioned its buggy as all hell though - any thoughts?

Thanks,

 

[Maverick Jester]

Is that a question or a statement?

I don't have Websense in house at the moment, but i'm possibly considering it for the Windows stuff. If it works on OSX and Linux, then thats great too.

Sorry, it was meant as a rhetorical question. It should work, at least according to their site (and a buddy) it does. Will have to explicitly confirm this.

I also wouldn't mind some other sort of utility that allows one to block USB etc. I see AD on Mac as a waste of time (unless someone can enlighten me as to otherwise).

Any idea on cost for Centrify?

EDIT: I've also found Likewise Open which allows one to do so - A colleague mentioned its buggy as all hell though - any thoughts?

Thanks,

have also heard that Likewise Open is buggy, no idea on the cost of Centrify I'm afraid...

 

[shadow_man]

Anyone used appliances like this:

http://www.kace.com/products/systems-management-appliance/features
http://www.kace.com/products/systems-deployment-appliance/features
http://www.kace.com/products/mobile-management-appliance/features

Seems they can do all I want and a bit more.

Thanks,

 

[syntax]

Maybe I'm a bad admin but body putty in the usb ports, no optical drives, locked boxes and very limited whitelist based internet access is quite effective when paired with CCTV to monitor tampering.

If you do the above and ban all cameras (including cell phones) around workstations the data is VERY safe :twisted:

With software solutions the possibility of bugs didn't seem worth the risk. The long term cost of voided warranties is also cheaper than implementation and maintenance of complex software solutions.

So you ban all cellphones? and what about data on laptops? how do you stop people taking photos of that when they are no in the office?
No USB or optical drives? That must be awesome for IT tech to fix a stuffed machine.

Here is the truth, data is never safe. If people want to take data out, they can always find a way.