Gimmiv an A

As many of our customers scrambled to apply the patch for MS08-67, questions abounded on whether our default content would catch and contain the W32/gimmiv.a trojan that was quickly modified to exploit the vulnerability.  We did (and do), of course.  Also interesting to me is the use case this raises from a patch management standpoint.  Regardless of whatever generic policy is chosen and implemented with respect to patch management and NAC, MS08-67 reminds us that we may, at any given time, need to push machines over to the side to apply a critical patch that comes outisde the lines of the normal cycle.  Of course, having good post-admission protection in place gives flexibility that reduces the degree of the immediate fire drill, which is always nice.