SIEM
Incorporating a Security Information and Event Management (SIEM) device into a DisPatch solution provides real-time access to crucial information throughout a network. By aggregating data from firewalls, applications, databases, servers/hosts, and other third-party sources, the SIEM delivers large quantities of data from a single interface, saving administrators time to manually compile the information.
Features
-
Presents network and system data using graphical dashboards
-
Determines potential threats based on correlated data
-
Analyzes data for forensics and incident response
-
Stores log files with signatures for compliance
-
Automatically calculates baselines to analyze trends and detect anomalies
-
Tracks attack vectors through event/flow correlation
-
Option to detach USBs or restrict usage
Benefits
-
Simplifies log aggregation
-
Instantaneously detects incidents through automated log file parsing
-
Speeds forensic and incident reporting
-
Adds a layer of security to the network
|
FoxGuard's SIEM supports top tier manufacturers:
|
|
3Com
Apache
Astaro
Barracuda
Check Point
Cisco
Citrix
Fortinet
|
HP
Juniper
McAfee
Microsoft
Nokia
Oracle
Redhat
RSA
|
SonicWALL
SourceFire
Sun
Symantec
Trend
VMWare
WebSense
Watchguard
|
|
in these categories:
|
|
Firewalls
Routers
Switches
IDS
IPS
|
AV
IAM
DLP
NAC
DAM
|
OS
Web & Content Management
NTP Servers
|
Interested in Security Information and Event Management?