GFI OFFERS FREE COPY OF LANGUARD SECURITY EVENT LOG MONITOR:

Intrusion detection using the Windows NT/2000 security event logs

London, UK, 5 November 2001 - GFI is offering a free starter pack of its intrusion detection tool, LANguard Security Event Log Monitor (S.E.L.M.). LANguard S.E.L.M. performs intrusion detection by monitoring the security event logs of all the Windows NT/2000 servers and workstations on the corporate network and alerting the administrator to possible intrusions/attacks in real time. The free copy, for 1 server and 5 workstations, is available from http://www.gfi.com/freeselm/

Internal security breaches on the rise: Intrusion detection is a must
Cyber attacks have doubled this year, and 60 to 80% of security breaches actually occur on the internal network*. Intrusion detection is the right technology to combat this fast-growing threat, but not all IDS tools are up to scratch. Most intrusion detection products are network-based and work by sniffing network traffic. These products are impaired by switches, traffic encryption (IPsec & SSL) and the high speed of today's networks. LANguard S.E.L.M., being host-based, can monitor attacks within the context of operating system objects like user accounts, groups and files. Therefore, unlike network-based products, LANguard S.E.L.M. can detect vital events relating to an attack, such as failed logons, account lockouts, and more.

A new method of intrusion detection
"LANguard S.E.L.M. is revolutionary because it is the first product to perform intrusion detection based on Windows NT/2000 event logs," explained Nick Galea, GFI CEO. "By expanding the basic audit and reporting facilities found in Windows NT/2000, LANguard S.E.L.M. enables security administrators to respond quickly to important security events, without spending hours examining logs."

LANguard S.E.L.M. notifies administrators of critical security events in real time and provides tips for interpreting events while recommending courses of action. Through its pre-built event viewer filters, LANguard S.E.L.M. allows administrators to check for high, medium or low security events as often as needed, depending on corporate requirements. Its report module can be used for in-depth investigations and trends analysis. LANguard S.E.L.M. is also much more affordable than other intrusion detection tools, with pricing starting at $350 rather than $5,000 and up.

LANguard S.E.L.M. was recently awarded the NSS Group 'Approved' logo. For more product information and to download the free starter pack, please visit http://www.gfi.com/freeselm/.

About GFI
GFI has six offices in the US, UK, Germany, France, Australia and Malta, and has a worldwide network of distributors. GFI is the developer of FAXmaker, Mail essentials and LANguard, and has supplied applications to clients such as Microsoft, Telstra, Time Warner Cable, Shell Oil Lubricants, NASA, DHL, Caterpillar, BMW, the US IRS, and the USAF. GFI has won the Microsoft Fusion 2000 (GEM) Packaged Application Partner of the Year award, and was named one of 1999's fastest growing software companies for Windows by Microsoft Corp. and CMP Media.

* As reported by Information Security Magazine (October 2001) and Enterprise Server Magazine (August 2001) respectively.