CA eTrust Audit puts critical security information at managers` fingertips

Computer Associates International, Inc (CA) has announced the release of eTrust Audit 1.5, a security auditing product that collects and analyses event data from heterogeneous servers and other resources, allowing administrators to identify potentially malicious system activity anywhere in their e-business environments.

Armed with this information, administrators can immediately respond to anomalous conditions - thwarting attacks or problems before they adversely affect critical e-business systems. "As hacker exploits become increasingly sophisticated, and as customers` e-business environments become more complex, the ability to rapidly discern suspicious anomalies in access patterns and behaviours becomes essential," said Barry Keyes, vice president, eTrust solutions, CA. "CA`s eTrust Audit 1.5 provides this essential auditing-and-analysis capability, reducing our customers` exposure to malicious intrusions from both external and internal sources."

eTrust Audit 1.5 collects security and system audit information from resources throughout the business without creating the performance-sapping network traffic generated by competing auditing products. eTrust Audit effectively consolidates data from UNIX and Windows NT servers - as well as other eTrust products - and stores it in the eTrust Audit central database for easy access and reporting. Administrators can then use this data for monitoring, alerting, and reporting information about user activity across platforms, thereby reducing the cost and complexity of managing audit information.

Key features of eTrust Audit 1.5 include:

• Cross Platform Event Management. eTrust Audit collects audit log data from diverse sources - including Unix, NT/2000, OS/390, Oracle, leading Web servers such as Netscape and Apache, third party applications via (Submit) API calls and SNMP-enabled devices. The ability to correlate events and identify activity patterns across these different systems makes eTrust Audit an invaluable solution for e-business administrators dealing with unauthorized access and malicious hacker assaults.

• Host-based Intrusion Detection. Automated pattern-matching intelligence and a powerful language for defining intrusion patterns allow eTrust Audit to trigger a variety of actions - including email and pop-up window alerts, SNMP "traps," and automatic denial of access - when suspicious events occur. eTrust Audit also ships with highly effective pre-defined policies for intrusion prevention and automatic damage control. The information in eTrust Audit`s log can also be vital for any forensic work and or legal action taken in the wake of an attack.

• eTrust Audit 1.5 works seamlessly with eTrust Intrusion Detection, CA`s network-based intrusion detection solution, to create a powerful combined host- and network-level intrusion detection architecture.

• eTrust Audit is an integral component of CA`s comprehensive eTrust security solutions portfolio. This unmatched breadth and sophistication of the eTrust portfolio - which includes certificate management, risk assessment, attack detection, loss prevention and more - enables management teams to effectively defend, administer access to, and ensure the security of even the most complex e-business environments. eTrust solutions are also compliant with established and emerging security industry standards, ensuring full interoperability with existing internal security mechanisms and those of e-business trading partners.

Additional information about the CA`s eTrust product line is available at www.ca.com/etrust.