Re: Centralized firewall management and log analysis tools

[spaz <marco () spaz org>]

if ur entity has the budget
look into either palo alto networks firewalls
or loglogic



On May 3, 2012, at 10:56 AM, "David Gillett" <gillettdavid () fhda edu> wrote:

>  Back when I was using NetScreen firewalls, before they were absorbed into
> Juniper, I got their "centralized management" tool, and was quite
> disappointed.  It was handy to have one tool for administering all of the
> firewalls in our network, but it didn't really give me anything that I
> wouldn't have today with a browser window with tabs for each device.
>  To really leverage centralization, you want to be able to do things like
> create a policy that can be deployed to multiple locations for consistency.
> Make sure the tool you choose offers you that kind of leverage.
>
> David Gillett, CISSP CCNP
>
> -----Original Message-----
> From: Daniel Gil [mailto:the900 () gmail com]
> Sent: Thursday, May 03, 2012 03:31
> To: security-basics () securityfocus com
> Subject: Centralized firewall management and log analysis tools
>
> Hi list!
>
> Recently I've been tasked with designing a solution for a company that has
> multiple offices, each with a database server and firewall, connected to the
> central headquarters through vpn. They administer each of these offices
> individually and would like a centralized server for firewall
> administration, log analysis and possibly IDS/vpn administration.
>
> I've been thinking about splunk+snort+a firewall that provides centralized
> management. Is there a better set of tools for the job? Or even better, a
> single tool that integrates all features?
>
> I'd love to hear from you people with experience in implementing similar
> solutions which tools worked best for you.
>
> Best regards,
> Dan
>
> ------------------------------------------------------------------------
> Securing Apache Web Server with thawte Digital Certificate In this guide we
> examine the importance of Apache-SSL and who needs an SSL certificate.  We
> look at how SSL works, how it benefits your company and how your customers
> can tell if a site is secure. You will find out how to test, purchase,
> install and use a thawte Digital Certificate on your Apache web server.
> Throughout, best practices for set-up are highlighted to help you ensure
> efficient ongoing management of your encryption keys and digital
> certificates.
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727
> d1
> ------------------------------------------------------------------------
>
>
> ------------------------------------------------------------------------
> Securing Apache Web Server with thawte Digital Certificate
> In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, 
> how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, 
> purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for 
> set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital 
> certificates.
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
> ------------------------------------------------------------------------

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------