Information required prior to installation


dan.adams@...
 

Hi there

 

We are looking at the possibility of having GATE installed but first require the following information as part of a risk assessment checklist.

 

Does the software make any external network/ communications connections? (How does the connection work, is it inbound or outbound?)

Are there any compatibility issues with Symantec Anti Virus, Sanctuary encryption software?

Do you have a patching\updates policy?

Penetration testing - when was this completed and what were the outcome results?

 

We will also need answers to these questions referenced in relation to documentation but I’ve been unable to find anything suitable.

 

If anyone can provide some info/guidance or point me in the right direction this would be greatly appreciated.

 

Many thanks

 

Dan

 

Daniel Adams

Senior Information Analyst

Lothian Analytical Services

 

Tel. 0131 465 5874 (x.35874)

 



Our Values Into Action

Quality | Dignity and Respect | Care and Compassion | Openness, Honesty and Responsibility | Teamwork

For more information visit: http://www.nhslothian.scot.nhs.uk/values

*****************************************************************

The information contained in this message may be confidential or

legally privileged and is intended for the addressee only. If you

have received this message in error or there are any problems

please notify the originator immediately. The unauthorised use,

disclosure, copying or alteration of this message is

strictly forbidden.

*****************************************************************


Ian Roberts
 


On 31/05/2018 12:16, Adams, Dan wrote:
Does the software make any external network/ communications connections? (How does the connection work, is it inbound or outbound?)
Outbound http(s) connections, yes, but not inbound.  GATE Developer needs to connect to GitHub to download one file (the list of plugins available by default) and to the central Maven repository to download plugins as they are referenced.  If/when you come to deploy GATE processing applications embedded in a production system there are ways to make a self-contained bundle with all the plugins the application requires, which would then operate without needing to connect out to the web.

Are there any compatibility issues with Symantec Anti Virus, Sanctuary encryption software?

None that we are aware of but we haven't specifically tested.

Do you have a patching\updates policy?

New releases are announced on this list.  The software does not auto-update but you can always move to new versions of plugins without necessarily needing to re-install the core.

Penetration testing - when was this completed and what were the outcome results?

I don't believe this is relevant to GATE Developer or any of the standard plugins as they do not accept any incoming network connections.  Third party plugins would have to be evaluated individually.

Ian

-- 
Ian Roberts               | Department of Computer Science
i.roberts@...  | University of Sheffield, UK