RE: Centralized firewall management and log analysis tools

["Marian Paun" <marian.paun () gmail com>]

We had several years experiente with Quest Intrust and were not very
impressed by it (huge performance issues when the event rate or number of
event sources grow above a certain threshold, ridiculous correlation
capabilities, administration nightmare). For around one year and half we are
using Arcsight and are delighted with it. It _is_ expensive, but great value
for money. Not very sure if the product will keep up after Arcsight was
purchased by HP :(

Marian

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On
Behalf Of Andy Smith
Sent: Friday, May 04, 2012 12:04 AM
To: security-basics () securityfocus com
Subject: Re: Centralized firewall management and log analysis tools

On Thu, May 3, 2012 at 7:12 PM, john dow <guest01 () gmail com> wrote:
> If money is not a concern, I would recommend Check Point. We have 
> quite a big Check Point deployment as well as Juniper Firewalls, 
> Phion/Baracuda Firewalls and some Cisco Firewalls (ASA, PIX). Check 
> Point has by far the best tools for managing a centralized deployment.
> Even their IPS-blade is much better now that I has been before. For 
> log analysis you could use Check Point Eventia Reporter and with 
> Tufin, you can do much more, e.g. track changes, compliance, ...
> I am not a Check Point guy and I regularly complain about Check Point 
> myself, but it is definitely the best package I have experienced yet.

Although Check Point do have some good products from an endpoint point of
view, I manage a number of Provider-1 installations and I can't say I'm
particularly impressed with it. It's extremely resource-hungry, and trying
to get sensible logs out of it when something doesn't work (as happens often
in my experience) is not easy.

My 2p worth.

Andy.

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate In this guide we
examine the importance of Apache-SSL and who needs an SSL certificate.  We
look at how SSL works, how it benefits your company and how your customers
can tell if a site is secure. You will find out how to test, purchase,
install and use a thawte Digital Certificate on your Apache web server.
Throughout, best practices for set-up are highlighted to help you ensure
efficient ongoing management of your encryption keys and digital
certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727
d1
------------------------------------------------------------------------


------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------