Information system and network security with event log monitoring

Many companies mistakenly assume that unauthorized access is an external threat only. The majority of corporate security threats actually stem from internal sources, against which a firewall offers no protection.

A good security strategy includes real-time monitoring for critical security events and periodic analysis of your systems' security logs so that you can detect and respond quickly to attack. In fact, when reviewing the general controls of a corporation, public auditors and regulatory agencies define security log monitoring as a necessary best practice and a part of performing due diligence.

To monitor event logs effectively, you need an automated way to back up and clear the event logs network-wide and to archive them in a central database. This archiving needs to be done with some intelligence, noise has to be removed and a sensible description added. Without doing this, you will suffer from the following limitations:

• No real time monitoring and notification of critical events
• Cryptic event descriptions: Certain events that indicate suspicious activity have less than obvious descriptions
• No long term archive

Windows NT/2000/XP/2003 logs a large ratio of unimportant events, such as workstations polling a domain controller for Group Policy updates. This makes analysis of the data without prior archiving and cleaning difficult to impossible.

Security incidents result in loss of operations, business, customers and revenue. Recovery is often a time consuming and expensive process. GFI EventsManager™ offers a 24/7 real-time intrusion detection and alerting system and an early warning signal to enable intrusion countermeasures. It also provides extensive rules to detect insider attacks.

GFI EventsManager™ to monitor your network for security breaches

• Identify event patterns and pre-empt insider attacks through the powerful GFI EventsManager rules database
• Real-time alerts can detect, alert you, and help you to avoid network security attacks
• Reduce the risk to business continuity by pro-active measure
• Increase productivity reduce manpower wasted in manual log management
• Reduce administrative, financial and technical overhead required to manage, archive and convert apparently meaningless event logs to significant security reports for management

Next steps

• Features
• Screenshots
• Pricing
• Download