Ipswitch WhatUp

Ipswitch WhatUp Gold

Ipswitch WhatUp Gold combines a set of technologies for the analysis, visualization and managements of all network infrastructure – network devices, servers, applications, virtual resources, configuration settings and network traffic. All listed transactions require only several minutes and are executed using a uniform control panel.

Ipswitch WhatsUp Gold Standard

Ipswitch WhatsUp Gold Standard is the solution for management of the small and medium enterprises of networks. A system provides simple, anticipatory monitoring and management of network infrastructure. WhatsUp Gold Standard includes the built-in center of the notification, detection 2 and 3 levels, comparison and creation of reports and capability of expansion of functionality at the expense of any connected modules WhatsUp Gold. This solution has the best ratio the price quality in comparison with any management tool networks which is available in the market. For the WhatsUp Gold Standard installation, scanning of network, display of all its elements in the form of the scheme, system configuration of the notification needs no more than several hours.

WhatsUp Gold Standard functions:

• Monitoring of infrastructure of systems, networks and key IP services for increase in predictability of processes and prevention of problems.
• Automatic detection of network and its display on the card.
• Use of the platform of management of warnings allowing to send alarms and notifications in real time.
• Navigation using web and Windows consoles.
• Ensuring protection of networks.
• Ranging of the rights of administrators on the basis of the principle of cast.

Advantages of WhatsUp Gold Standart:

• Pro-active monitoring of availability and capacity of network devices and systems – survey and practical analytical data for management of the difficult and dynamic environment.
• The simple scheme of licensing by the number of devices – exact calculation and forecasting of expansion of network.
• Scaling to the enterprise level.
• Wireless management - free management of both wire, and wireless infrastructure in networks, systems and applications.

Set of plug-ins WhatsUp Gold Standart:

• Application Performance Monitoring (APM). The overview of operability of applications allowing to detect quickly the place of emergence of problems with performance and to eliminate them from any source before crucial applications and users are mentioned.
• Flow Monitor. Detailed information on network performance gives the chance to analyze, receive notifications and to create reports on use of network and consumption of traffic in real time to guarantee service quality.
• WhatsConfigured. The powerful, inexpensive and simple management tool in use by a configuration which automates processes of creation, recovery, storage and change of backup copies of files of a configuration of network devices.
• WhatsVirtual. Complex monitoring of virtual environments of data processing centers with a possibility of viewing physical and virtual resources on the single console.
• VoIP Monitor. Monitoring and drawing up reports on network performance for the purpose of ensuring quality of calls under the Voiceover IP protocol.
• Flow Publisher. Detailed viewing network traffic for all devices (regardless of whether they have the built-in support of stream monitoring) expands possibilities of Flow Monitor.
• Failover Manager. Network monitoring and task management of steel by more flexible for functioning of high availability. The plug-in provides continuous visualization of a status of the traced infrastructure when performance or capability to interaction of primary WhatsUp server is weakened.
• WhatsUp Gold Poller. Addition to WhatsUp Gold for the distributed polling. Will allow to manage 20,000 devices and 100,000 monitors with one WhatsUp Gold server and additional resources of poll. The distributed architecture of polls appropriates collections on several polls for control of balance of loadings and performance improvement.

WhatsUp Gold 16.3

• The interface expands possibilities of the user and simplifies navigation.
• The setup package and the master of network detection reduce quantity of stages of installation and deployment by 50%.
• The new possibility of unlimited licensing expands model of licensing Ipswitch by the number of devices which provides to IT specialists unobstructed sight of network without compromises.
• The first and unique built-in support of Cisco NetFlow-Lite provides to IT specialists the best visibility of a traffic flow, advanced network planning and the simplified diagnostics.
• Provides support of full-function monitoring of performance of applications for Microsoft Exchange SharePoint, Dynamics Lync SQL Server, to Internet Information Services (IIS) Windows, Active Directory and Hyper-V.
• Offers IT specialists the mode of service of the device one click, detailed management of diagrams of shutdowns and notifications, an intellectual algorithm of actions at shutdown of devices.
• Gives to operators enhanced capabilities of setup and support of enciphering for monitoring of Secure Shell (SSH).

WhatsUp Gold 14.4

• Expanded security aids according to FIPS 140-2 the standard: WUG 14.4 is capable to determine the protected OS by FIPS 140-2 and to work with them;
• Acceleration of data collection at the expense of a possibility of configuring of intervals between polls;
• Support of Microsoft IIS needlessly in additional setup;
• Closer integration with WhatsConnected allows to receive dynamic cards of relevant network topology.

WhatsConnected 3.0

• Engine of automatic stay and mapping of nodes of network;
• Digital asset management: information extraction after the applications installed on nodes, to parts according to OS, inventory of data of BIOS;
• Setup of filters of data mapping on network points;
• New methods of display of network and new reports, the including reviews of subnets and VLAN;
• New tools of check of devices (Ping, Telnet, SSH, CPU, Memory, Interface, Configuration Capture)
• Support of information display on technical support of HP servers and Dell.

2018: Vulnerabilities are detected

Experts of Positive Technologies Vyacheslav Moskvin and Anton Vaychikauskas in February, 2018 revealed vulnerabilities in software of Ipswitch WhatsUp Gold intended for automatic detection of network resources and their interrelation, tracking of a status and availability of network and also for configuration management.

Use of the vulnerable version of WhatsUp Gold in industrial enterprise can lead to cyberincidents, including to production process violation — the head of the safety department of industrial management systems of Positive Technologies Vladimir Nazarov noted. — Such products can have an access to a considerable part of network equipment, including the network devices located in a technology segment. Therefore it is especially important to eliminate timely detected vulnerabilities in similar programs because they are of special interest for malefactors.

The first vulnerability (CVE-2018-5777) in Ipswitch WhatsUp Gold allows remote attacking to use the wrong configuration of the TFTP server and to execute any commands in the operating system of the server. The malefactor can get access to all information on the server and also create the base for the subsequent development of the attack on network infrastructure.

The second vulnerability (CVE-2018-5778) is connected with insufficient filtering of the user input on some WhatsUp Gold web pages and an opportunity to execute a SQL injection. Depending on the DBMS settings it can give to the malefactor different opportunities, from unauthorized full access to the database of this software — before accomplishment of any code. As a result attacking can get access to credentials for management of the network equipment which is stored in the database of a vulnerable system.

For elimination of the detected vulnerabilities it is necessary to update WhatsUp Gold to the version not below WhatsUp Gold 2017 Plus Service Pack 2 (v.17.1.2).