It’s 10 PM. Do you know where your servers are?

Back in the 60′s and 70′s, news announcers would intone in a serious voice: “It’s 10 PM. Do you know where your children are?”

Awareness is a good thing. And if you are in some way responsible for the servers in your organization, you want to know where your servers are. And whether they are up to date with patches and security software. One IT admin found 30 unmanaged servers – Internet-facing, unpatched machines. And he was working for a serious organization that actually performed scans. I have been with big customers who had to resort to mass emails like “Does anyone use server xyz.company.com? It will be shut down in three days unless someone takes ownership.”

It’s not enough to have one measurement from your management console, because that will only show the properly registered and managed servers. You need a separate tool to actually scan you network to find all the rogue servers. Do you perform regular scans to determine which servers you are running?