You are here: Interact > News
     

News

 

Current Articles | Archives | Search

How to handle IT security as XP goes into Extended Support
Wednesday, April 29, 2009
Intercept were quoted in an article on Microsoft XP going into extended support in Computer Weekly. The article stated that Microsoft has ended mainstream support for all flavours of Windows XP, including Windows XP Professional and Windows XP Professional x64 Edition. Extended support will be available until 8 April, 2014, but the burden will be on IT managers to ensure their Windows XP estates are secure. Although Microsoft is moving XP into the Extended Support of its lifecycle, it will continue to develop hot fixes, as and when they are required.

Stuart Okin, managing director of Comsec Consulting, and a former security expert at Microsoft, says that getting telephone support from Microsoft will be the main issue after mainstream support ends. "This will affect clients, [but] only when there is a major outbreak of malware and they are not sure where to turn to. In essence nothing changes. Patch your systems; make sure you have malware protection, as well as other controls, such as firewalls. For businesses, make sure you security test all the way through the development lifecycle."

Gary Collins, chief information officer at Intercept IT, a specialist in cloud computing, pointed out that even with the arrival of Vista, Microsoft was retrospectively patching holes in Windows XP as it found problems with the new operating system (OS). This meant recoding parts of the XP operating system and releasing hot fixes.

He says many organisations have been reluctant to move to Windows Vista, and Windows 7 is not yet available. As a result, securing Windows XP will remain a focal issue. "A high proportion of our clients have not upgraded to Vista, which they see as resource-hungry, so it is unfortunate timing for Microsoft that XP support is ending, and Windows 7 will not be out until early 2010."

The onus will be on users to ensure they keep XP up-to-date, as is the case with older operating systems, says Collins. "A couple of clients of ours are large banks that still have Windows NT 3.51 and NT 4 on their servers. They put protection around the outside, using intrusion detection systems and intrusion prevention. But they also ensure those networks are not exposed."

Collins advises organisations to ensure they have adequate firewall, anti-virus, and intrusion detection systems. But he added that there are also many experienced Microsoft partners that will continue to offer support services for Windows XP. This was echoed by Microsoft, which says that along with its strategic partners, it will offer custom support relationships, at a price, that go beyond the Extended Support phase.

Read the full story on Computer Weekly

< Back to news