Memco Software, a provider of information security software, has introduced Audit Central, an enterprise security product for consolidating and analysing system audit logs. Audit Central enables systems and security administration teams to "see" how their network and servers are being used and determine what actions may be required.
Memco Audit Central enables the consolidation of system and security event logs from Windows NT and Unix platforms, as well as events from Memco`s other security products. These logs detail all system activity and help determine who accessed what information when in order to detect suspicious or malicious activity.
Traditionally, administrators have had to collect log data manually from each NT and Unix server. This is a tedious task even in a relatively small network environment with only a few servers.
With Audit Central, all relevant system and event data is automatically collected in a central relational database for viewing, filtering, reporting and analysis. Audit Central can also alert administrators when specific files are accessed, and work with Memco SeOS and SessionWall to control or block user access.
"Previously, administrators had to manually process audit data, making cross-platform analysis difficult and expensive," says Inana Nkanza, manager of security for Software Futures` systems management business unit. "It has been so tedious that many problems haven`t been discovered because administrators have lacked a big picture perspective. With Audit Central, administrators can now easily see enterprise-wide activity."
"Audit and event data is the backbone of any operational network and essential to security management. But without the proper cross-platform tools, audit data cannot be put to practical use," saysd Steve Foote, analyst of the Hurwitz Group.
Key features of Memco Audit Central include:
Central collection: Consolidates and normalises audit log from multiple sources into a central repository.
Relational database: Audit data stored in a relational database in ODBC standard format for easy manipulation.
Action engine: Can be configured to perform specific actions and alerts based on log analysis and event correlation.
Intelligent viewing: Filtering, viewing and searching tools with a graphical Web browser interface.
Flexible reporting: Automated scheduling and distribution of reports to selected people and/or servers.
Platform support: Intelligent collection agents for Windows NT 4.0 and all major Unix platforms.
Memco products are distributed in South Africa by Software Futures.
Share
Editorial contacts