RE: Logging

["Bugtraq" <bugtraq () datacash co za>]

I'm busy doing a POC of RSA's envision. So far, so good. You can set up
a dashboard with alerts, graphs and tables to keep an eye on your
systems and users in real-time. It's pretty expensive, but integrates
nicely into Active Directory. Initially you have to do quite a lot of
work to extract the relevant information from your logs. It collects
Windows event logs (without a 3rd party remote agent), it takes syslogs
and SNMP traps from many different devices (and automatically id's the
remote system type and its function). The out-of-the-box list of
supported devices is extensive and is growing quarterly. You can also
create your own templates relatively easily. It has hundreds of built-in
reports, but most need tweaking to provide you with the relevant
information. Overall, a really nice product, I haven't found anything to
compete with it yet. I'd be interested to find out if anyone has done
comparisons between this and another product in the same space.

-Grant

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of infolookup () gmail com
Sent: 19 January 2008 05:58 PM
To: Krzyston, Randy; listbounce () securityfocus com;
security-basics () securityfocus com
Subject: Re: Logging

I am interested in seeing some feed back on this topic, cause I am
looking into doing this too. 

Sent via BlackBerry from T-Mobile

-----Original Message-----
From: "Krzyston, Randy" <RandyK () gen-probe com>

Date: Fri, 18 Jan 2008 10:19:21 
To:<security-basics () securityfocus com>
Cc:<listbounce () securityfocus com>
Subject: Logging


We are looking to implement a syslog server.  It needs to not only be
capable of storing logs ,but also detailed reporting for things such as
SOX.  I've looked at LogLogic's products.  I also heard about Kiwi, but
have not experience with it.

Any comments?


Randy



DISCLAIMER: This email and any files transmitted with it are confidential to DataCash Group plc and its group 
companies. It is intended only for the person to whom it is addressed. If you have received this email in error, please 
forward it to info () datacash com with the subject line "Received in Error".  If you are not the intended recipient 
you must not use, disclose, copy, print, distribute or rely on this email or any of its transmitted files.