New Agent-Less Device Support Part of Most Cost-Effective and Scalable Solution for Collecting all the Data for Compliance and Security
WESTWOOD, Mass— [Network Intelligence, a privately-held leader in transforming enterprise-wide data into compliance and security information, joined RSA, The Security Division of EMC, after its acquisition by EMC in September 2006.]
Network Intelligence™ Corp., the market-proven leader in transforming enterprise-wide data into compliance and security information, today announced new functionality allowing customers to capture and analyze log data from Microsoft Exchange Server 2003, Microsoft SQL Server 7, and Microsoft SQL 2000. By providing cost-effective, scalable support for Microsoft’s applications, Network Intelligence customers are able to leverage the agent-less architecture to monitor and report on activity related to suspicious Exchange email, changes of Exchange user permissions, and unauthorized access to SQL database files, which results in improved security and compliance reporting
Many businesses use Microsoft servers as the foundation for storing, managing and exchanging corporate electronic data, and protecting their integrity is important. Further, since many regulations require the close control of corporate content, monitoring the security data produced by these servers is crucial to compliance. Network Intelligence offers the only agent-less architecture proven to efficiently collect and protect all the data that drives customers’ businesses. The Network Intelligence Engine™ provides the most scalable security event management system available, with guaranteed sustained data collection speeds exceeding 300 thousand events per second and peak speeds exceeding 500 thousand events per second.
“We are one of the first vendors to support new Microsoft Exchange and SQL versions,” said Jim Melvin, executive vice president of marketing and business development at Network Intelligence. “Offering a large breadth of supported devices as well as custom output functions allows better understanding and reporting on all enterprise data critical to company-wide challenges such as regulatory compliance and network security. These new functions are key to integration with existing network management systems. The new supported devices are critical to compliance.”
Contrary to solutions that require software agents to be installed on each Microsoft server or workstation to capture the local log data, Network Intelligence’s agent-less based architecture enables enterprises to reliably capture all the data without the additional complexity or administrative overhead that agent-based solutions require. The agent-less implementation permits Windows-based organizations to leverage Windows’ built-in digital signing to ensure log data integrity and prevent man-in-the-middle attacks
The new device support is one of the new features included in enVision 2.1.3, running on the Network Intelligence Engine appliance family line. The upgrade also includes additional enhanced output action formatting, which enables users to define the format of output actions, and to customize templates and correlated notification rules to include both the alert and last event information. This is especially important for environments where report data is integrated with another enterprise solution that needs to act on the information.
The new version also includes agent-less support for remote databases hosting log data using ODBC connections, which increases support options for customers. In addition, a new management screen allows users to define the log collection parameters such as connection parameters, polling interval, and SQL query to retrieve log data and offers support for systems managing multiple sensors.
Beyond Microsoft Exchange 2003 and SQL Server 7 and 2000, the new version supports many additional devices. New device support includes: McAfee ePolicy Orchestrator 3.5, Websense Web Security Suite 5.5 along with Cisco VPN Concentrator 4.0, Juniper IDP 3.0, Juniper Netscreen Firewall ScreenOs 5.1, McAfee Intrushield 2.1, and Checkpoint NGX. Plus, Tivoli Storage Manager has been certified to run on all of Network Intelligence’s appliance lines.
Pricing & Availability
enVision 2.1.3 on the Network Intelligence Engine is available immediately. Customers with a current support subscription can install the upgrade free of charge.
About Network Intelligence
Network Intelligence, part of RSA, The Security Division of EMC, is a leader in transforming enterprise-wide data into compliance and security information. The LogSmart® Internet Protocol Database™ (IPDB) provides an architecture designed to efficiently collect and protect all the data that drives customers’ businesses. Network Intelligence helps take the cost and complexity out of compliance and security for hundreds of customers worldwide. Network Intelligence joined RSA after its acquisition by EMC in September 2006. For more information, please visit www.network-intelligence.com, or phone 781-375-9000.
About RSA
RSA, The Security Division of EMC, is the expert in information-centric security, enabling the protection of information throughout its lifecycle. RSA enables customers to cost-effectively secure critical information assets and online identities wherever they live and at every step of the way, and manage security information and events to ease the burden of compliance.
RSA offers industry-leading solutions in identity assurance & access control, encryption & key management, compliance & security information management and fraud protection. These solutions bring trust to millions of user identities, the transactions that they perform, and the data that is generated. For more information, please visit www.RSA.com and www.EMC.com.
