Analysis: Browser Security Part II By Roger Beall

GET SET FOR RAPID RESPONSE BY PUTTING MANAGEMENT IN PLACE: In this era of zero-day exploits and far-flung networks, it's outrageous that only two browsers--IE and, to a lesser extent, Firefox--let you rapidly deploy and configure software from a central admin server to all networked machines, restrict features through group policies and provide granular installation controls.
Microsoft's free IE Administration Kit is the standout here. IEAK has been around for a few IE incarnations, and we've seen the kit's functionality change with each major release. If you're managing IE, IEAK should be in your toolbox. In fact, in today's world of skinny IT budgets and barely adequate manpower, IEAK has been key in keeping IE dominant on the corporate desktop despite antitrust settlements, unbundling, security woes and periods of stagnated development.
IEAK aids in establishing and delivering user profiles, version control of browsers across the network, and customization of just about every setting using policies.
The only other browser that can boast a network-installation utility to set control by policy is Firefox, and that's only because of open-source project FirefoxADM. This project has been stagnant for a couple of years, unfortunately, and lacks the dedicated vendor support it should be getting. The result is a product that doesn't fully support all versions of Firefox, including the latest release.
Let's face it: Firefox isn't competitive with IE when it comes to enterprise deployments. While we applaud SourceForge for recognizing the importance of such a tool and the effort that's gone into making it available, we question the logic in spending a whole lot of time and money forcing Microsoft to decouple IE7 from the OS so there's a level playing field, if the tools to deploy and control rival browsers on the network aren't there.
The ability to tightly manage distributed browsers is basic to keeping them secure. Until Firefox, Netscape and Opera supporters step up to the plate and get their administrative acts together, IE will maintain its overwhelming market share.

CONTROL YOUR PLUG-INS: Component plug-ins such as Acrobat Reader and Flash Player are common in many environments. Legitimate utilities enhance business, but rogue plug-ins have long been both an admin and a user nightmare. It's been all too easy for an inexperienced user to inadvertently load a malicious control into his