December 27, 2001

NetIQ Updates Security Analyzer to Assist in Securing Microsoft Windows XP

Security Analyzer Enables Security Administrators to Scan Microsoft Windows XP machines to Detect the Universal Plug and Play Vulnerabilities

Press Release

SAN JOSE, Calif.

NetIQ Corp. (Nasdaq: NTIQ), a leading provider of e-business infrastructure management and intelligence solutions, today announced it has updated Security Analyzer, part of NetIQ's security management solution, to enable security administrators to identify Microsoft Windows XP machines with the Universal Plug and Play (UPnP) service and the absence of the appropriate Microsoft patch for the recently disclosed UPnP vulnerabilities as identified in the Microsoft MS01-59 Security Bulletin. Security Administrators may request a free 14-day trial of Security Analyzer. For more information about this vulnerability in Windows XP, as well as Microsoft's recommendations to address it, please visit

Since the UPnP service is installed by default with Windows XP, NetIQ recommends that security administrators immediately locate all Windows XP machines and apply the Microsoft patch as directed by Microsoft. NetIQ has developed a new test for Security Analyzer that will identify the machines with the UPnP vulnerabilities and has posted it to the Security Analyzer update site for download. Security Analyzer customers should have received and already benefited from this new test via the automated AutoSync functionality provided within the product.

"This update underscores NetIQ's commitment to ensure a secure computing infrastructure that enables companies to take full advantage of powerful new functionality, such as UPnP, in Windows XP," said Scott Hollis, director of Security Management Products at NetIQ. "As a result of our focus to provide comprehensive security management solutions, NetIQ was able to quickly respond to this newly identified threat, and in less than 24 hours after the Microsoft bulletin deliver a solution for our existing customers."

Security Analyzer is an award-winning multi-platform vulnerability scanning and assessment product that discovers and identifies fixes by providing more than 2,300 tests for systems operating under Microsoft Windows 9x, Windows NT, Windows 2000, Sun Solaris and Red Hat Linux. Systems are analyzed on demand or at scheduled intervals. The test results are used to generate comparative reports, recommend security fixes, and prioritize responses.

For more information about NetIQ Security Analyzer, please go to

About NetIQ's Security Management Solution

NetIQ offers a comprehensive security management solution that addresses security at multiple layers of the computing infrastructure. Its products allow security administrators to proactively manage security incidents, assess vulnerabilities, enforce organizational security policies and protect computing resources against invasions or unintended use. Products in the security management solution include: Security Manager, Security Analyzer, Firewall Suite, Firewall Reporting Center, Directory and Resource Administrator and File and Storage Administrator. For more information about NetIQ's security management solution, please go to

About NetIQ

NetIQ Corp. (Nasdaq: NTIQ) is a leading provider of e-business infrastructure management and intelligence solutions for all the components of an organization's e-business infrastructure - from back-end servers, networks and directories to front-end web servers and applications. The company is headquartered in San Jose, Calif., with development and operational personnel in Houston, Raleigh, N.C., Bellevue, Wash., and Portland, Ore. For more information, please visit NetIQ's Web site at www.netiq.comor call (408) 856-3000. For more information about WebTrends, the e-business intelligence product line from NetIQ, please or call (888) WEBTRENDS.

Let's Talk

Welcome, Want to talk to someone? Call our Sales team or request a call and we'll get right back to you.

  • Sales: (888) 323-6768

For support information, please visit Technical Support.

Amy Sachrison
Media and Analyst Relations

Phone: (713) 418-5368