Security Basics mailing list archives

RE: Network event viewer


From: "Campa, Albert R." <Albert.Campa () va gov>
Date: Fri, 5 Oct 2007 12:49:56 -0500

After seeing a demo at SANS Las Vegas from NitroSecurity ESM, I was
impressed by its speed.
Check out this article:
 http://www.gcn.com/print/26_20/44829-1.html

Supposedly combines Enterprise management, SIM(Security info management,
and Network behavior anomaly detection.

It takes flow information and log/data from firewalls, IPS, IDS, and
windows logs as well.

Although, I don't know about low cost.


-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of Raoul Armfield
Sent: Friday, October 05, 2007 10:44 AM
To: security-basics () securityfocus com
Subject: Network event viewer

We are looking into a low cost easy to setup software that will 
consolidate the eventlogs of our servers in one location.   I found a 
product called Network Event Viewer by a company called Corner Bowl
Software.  You can direct the eventlogs into a SQL database and also you
can have it send emails based on criteria you specify.  So far I am just
saying basically what the webpage says.  I was wondering if any of you
have experience using this product and what your thoughts are?  If you
have additional suggestions on low cost solutions I would be happy to
entertain them as well.

Raoul


Current thread: