[ news_security_news ]
Network Intelligence's New Functionality
SecurityProNews
Staff Writer
2005-06-17
 Insider Reports RSS Feed
Network Intelligence announced new functionality allowing customers to capture and analyze log data from Microsoft Exchange Server 2003, Microsoft SQL Server 7, and Microsoft SQL 2000.
By providing cost-effective, scalable support for Microsoft's applications, Network Intelligence customers are able to leverage the proven agent-less architecture to monitor and report on activity related to suspicious Exchange email, changes of Exchange user permissions, and unauthorized access to SQL database files, which results in improved security and compliance reporting.
Many businesses use Microsoft servers as the foundation for storing, managing and exchanging corporate electronic data, and protecting their integrity is important. Further, since many regulations require the close control of corporate content, monitoring the security data produced by these servers is crucial to compliance. Network Intelligence offers the only agent-less architecture proven to efficiently collect and protect all the data that drives customers' businesses. The Network Intelligence Engine provides the most scalable security event management system available, with guaranteed sustained data collection speeds exceeding 300 thousand events per second and peak speeds exceeding 500 thousand events per second.
"We are one of the first vendors to support new Microsoft Exchange and SQL versions," said Jim Melvin, executive vice president of marketing and business development at Network Intelligence. "Offering a large breadth of supported devices as well as custom output functions allows better understanding and reporting on all enterprise data critical to company-wide challenges such as regulatory compliance and network security. These new functions are key to integration with existing network management systems. The new supported devices are critical to compliance."
Contrary to solutions that require software agents to be installed on each Microsoft server or workstation to capture the local log data, Network Intelligence's agent-less based architecture enables enterprises to reliably capture all the data without the additional complexity or administrative overhead that agent-based solutions extol. The agent-less implementation permits Windows-based organizations to leverage Windows' built-in digital signing to ensure log data integrity and prevent man-in-the-middle attacks.
The new device support is one of the new features included in enVision 2.1.3, running on the Network Intelligence Engine appliance family line. The upgrade also includes additional enhanced output action formatting, which enables users to define the format of output actions, and to customize templates and correlated notification rules to include both the alert and last event information. This is especially important for environments where report data is integrated with another enterprise solution that needs to act on the information.
The new version also includes agent-less support for remote databases hosting log data using ODBC connections, which increases support options for customers. In addition, a new management screen allows users to define the log collection parameters such as connection parameters, polling interval, and SQL query to retrieve log data and offers support for systems managing multiple sensors.
Beyond Microsoft Exchange 2003 and SQL Server 7 and 2000, the new version supports many additional devices. New device support includes: McAfee ePolicy Orchestrator 3.5, Websense Web Security Suite 5.5 along with Cisco VPN Concentrator 4.0, Juniper IDP 3.0, Juniper Netscreen Firewall ScreenOs 5.1, McAfee Intrushield 2.1, and Checkpoint NGX. Plus, Tivoli Storage Manager has been certified to run on all of Network Intelligence's appliance lines.
About the Author:
SecurityProNews is a daily online and email publication focusing on internet security issues.
More news_security_news Articles
Insider Reports RSS Feed
|
|
iEntry 10th Anniversary
RSS
Archive
