Commercial Integrator February 2022 - 9

#Security
TD SYNNEX
Announces
VulnerabilityScanning
Offering
THE TD SYNNEX Corp.
VISUALSolv business unit has
announced new network
security offerings catered to
AV integrators. The Fremont,
Calif.-based tech distribution
giant is offering complimentary
vulnerability scans for up to
five public-facing IP addresses.
These enable integrators to
capture point-in-time snapshots
of their customers' externalfacing
IT assets.
The Reseller-Enabled Vulnerability
Assessment Program,
available through TD SYNNEX
ServiceSolv, provides a detailed
assessment of customers'
security posture. This is then
reviewed by a vendor-neutral
security expert.
TD SYNNEX says the program
identifies vulnerabilities
97% of the time. This results in
new sales in security products
and services. Indeed, participating
integrators average
year-over-year product growth
of 79%, as compared to 29%
for those who don't participate.
Sandi Stambaugh, senior
vice president, product management,
TD SYNNEX, says
network security is playing an
increasingly significant role
within the commercial AV industry
as integrators work with customers
on a more regular basis
to eliminate vulnerabilities.
" TD SYNNEX is pleased to
invest in additional resources
to help integrators provide
greater value and gain more
market share as they're challenged
to think like network
security administrators and act
as trusted security advisors, "
Stambaugh says.
The offering is a response
to the proliferation of IoT in
commercial AV and the growing
number of non-traditional
devices on the network.
" Our Reseller-Enabled Vulnerability
Assessment Program
provides a unique opportunity
for TD SYNNEX customers,
including those within the AV
space, as the industry continues
to face new challenges in
network security, " Joe Pittillo,
senior vice president, services,
North America, TD SYNNEX,
says. " We encourage existing
and new partners to leverage
our team of experts as they
look to build a stronger security
practice in 2022. "
›› @TDSYNNEX, #cybersecurity,
#network, #vulnerabilities
#Cybersecurity
Log4j Scanning
Tools Available
for Free, Public Use
THE LOG4J VULNERABILITIES
sent IT and security teams into
a panic early in December.
The Apache Foundation has
since fixed the bugs and issued
patches. So, the onus is now
on software developers and
administrators to patch software
and apply the fixes. Log4j is a
popular Java logging tool. Understandably,
the tech industry
rallied to help IT departments
and technologists address
every instance of Log4j in their
environment with scanning
Network security has risen to paramount importance in the commercial AV industry as ever more
integrated systems connect to the network. TD SYNNEX is offering complimentary vulnerability
scans. Meantime, multiple Log4j scanning tools have emerged after a scare in December.
commercialintegrator.com
tools. That includes multiple
open-source and commercial
scanning tools provided by
government organizations and
tech firms alike. This rundown
highlights some available tools.
› CISA: The U.S. Cybersecurity
and Infrastructure Security
Agency (CISA) published an
open-source Log4j scanner
derived from scanners created
by others in the open-source
community. The tool is available
on CISA's GitHub page. The
scanner is a modified version
of scanners from cybersecurity
company FullHunt and others.
› CrowdStrike: Cybersecurity
giant CrowdStrike has also
released a free Log4j scanning
tool, called the CrowdStrike
Archive Scan Tool (CAST). The
firm says the tool performs a
targeted search by scanning
a given set of directories for
JAR, WAR, ZIP and EAR files.
Then, it performs a deeper scan
on those file types matching
against a known set of checksums
for Log4j libraries. The
tool can run on Windows, Mac
and Linux systems.
› Microsoft: Microsoft
has added Log4j tools to
Microsoft 365 Defender. This
includes updates that provide
a " consolidated view " of the
organization's exposure to the
vulnerabilities on the device,
software and vulnerable component
levels. The tools include
discovery of vulnerable Log4j
library components on devices
and discovery of vulnerable applications
with the Log4j library
on devices. In addition, there is
a dedicated Log4j dashboard
and a new schema in advanced
hunting. This surfaces file-level
findings from the disk and
provides the ability to correlate
them with additional context.
›› #network, #log4j,
#vulnerabilities
FEBRUARY 2022 Commercial Integrator
9
IBRAVERY/STOCK.ADOBE.COM

http://www.commercialintegrator.com

Commercial Integrator February 2022

Table of Contents for the Digital Edition of Commercial Integrator February 2022