GFI Languard Network Security Scanner 6.0 (LNSS) is a scanner to detect a wide range of security vulnerabilities on your network and also offers patch management for operating system and applications.
GFI LNSS 6.0 is not freeware, an evaluation version is available. License information and download: http://www.gfi.com/
This plugin was written by Ponzandro
Discussion forum: http://www.911cd.net/forums/
Special thanks to Joshua for his great work on the MDAC2.81 plugin as a requirement to get GFI LNSS finally working.
Also thanks to Frodo for his nice method and instructions using RAR-SFX and cmdow.exe to save space on the CD and cleaning up the ramdrive after running the plugin.
GFI LNSS 6.0 was tested with BartPE3032, XPE1.0.2 with WMI enabled. Size of the RAR-SFX Archive on CD is @15,6MB (@7,6MB)
This plugin runs from ramdrive and needs free space on the ramdrive of @45MB (@37MB), also free physical memory of 80MB for its processes. On machines with a to low amount of ram you should specify a pagefile.
Paths are hardcoded in the inf file, using variables did not work for me. Change the driveletter of your ramdrive if you use another driveletter.
GFI LNSS stores its data in an access database, you need Joshuas plugin for MDAC2.81 support available here: http://www.drowaelder.de/winpe/PEIndex.htm.
Microsoft xml3 support to generate the HTML Reports (ms_xml3.inf is included).
Sherpya's Registry Expander v1.2 available here: http://winpe.sourceforge.net/
Winrar installed on your building system with context menu enabled (like "add to archive...").
Setting up the plugin:
Install GFI LNSS 6.0 on your system and do an online update.
Navigate to your installation folder, usually it is C:\Programs\GFI
In the right pane right click on the folder LANguard Network Security Scanner 6.0 and choose add to archive...
In the dialog box, type lnss_sfx into the Archive Name field. In the same dialog box tick Create SFX Archive and also tick Create Solid Archive.The Archive name automatically changes to lnss_sfx.exe.
Click on the Advanced tab, then click on the SFX Options button.In the Path to extract type (or cut and paste): .\%Temp%\Programs\GFI. Untick Save and Restore Paths.
Next click on the Modes Tab and tick the Hide All and Overwrite All Files options.
Click OK twice, this creates the lnss_sfx.exe Archive. Copy lnss_sfx.exe to the plugin folder GFI_LNSS.
Save some Space:
If you do not have to patch german, french, italian, spanish OS and Microsoft Office applications you could delete the following files in C:\Programs\GFI\LANguard Network Security Scanner 6.0\Data\PatchManagement :
mssecure_de.xml (german), mssecure_fr.xml (french), mssecure_it.xml (italian), mssecure_es.xml (spanish) before building the lnss_sfx.exe Archive.This will reduce the size of the Archive on the CD from 15,6MB to 7,6MB (37MB / 45MB on ramdrive).
Running the plugin :
You have to run Joshuas mdac-installer.exe to register the mdac components before running LNSS
GFI LNSS consumes quite a lot of RAM (45MB for its files and up to 80MB physical RAM for its processes).
If you are starting a scan and nothing happens after a while you're possibly out of RAM.
In that case try adding a pagefile using Paragliders tool SetPageFile: http://www.paraglidernc.com/ , reduce the size of your ramdrive to 64MB to leave more physical RAM or run the scan from a machine with more RAM.
When scanning machines on the network please note to specify an account that has administrative rights on the target machine in the fields Username:<domain\userid> and Password:<yourpassword>to have access to the remote registry.
Online update of the program components is working also updating Microsoft vulnerability / patch definitions (mssecure.cab)
If you have to download a large amount of Servicepacks and Patches you should specify a download directory on the network or a local disk if the space on your ramdrive is not large enough.