Re: Enterprise Security Management - Dream or reality

["Talisker" <Talisker () networkintrusion co uk>]

Maddy
[on list]
Is it essential to use just one vendor? Many security products are
interoperable these days, this way you can use the best of breed from each
category.  I missed the original post so I apologise if I've got the wrong
end of the stick.

Whilst it is easier to have all your security arsenal from the same vendor,
some of the products they acquire to make up the "suite" aren't necessarily
good at what they do.

There can be a benefit from having a single reporting console, but from
experience I don't like to see HIDS and NIDS output on the same screen, with
the exception of router output on the NIDS screen.  Therefore does the NIDS
and HIDS need to be the same vendor?  Moreover, if you do need correlation,
most NIDS and HIDS etc feed into their respective databases, you can link
the info using cross table queries.

There can also be a financial saving in buying from a variety of vendors.

Andy
http://www.networkintrusion.co.uk
Talisker's Network Security Tools List
                    '''
                 (0 0)
  ----oOO----(_)----------
  | The geek shall        |
  |  Inherit the earth     |
  -----------------oOO----
               |__|__|
                  || ||
              ooO Ooo
talisker () networkintrusion co uk

The opinions contained within this transmission are entirely my own, and do
not necessarily reflect those of my employer.





----- Original Message -----
From: "Maddy" <mwlalex () magix com sg>
To: "Predrag Zivic" <pzivic () yahoo com>
Cc: "fw-wiz" <firewall-wizards () nfr net>
Sent: Saturday, December 30, 2000 4:56 PM
Subject: Re: [fw-wiz] Enterprise Security Management - Dream or reality


> Thk u all for responding to my dream security setup. Ok, my list has
> grown now to :
>
> Definite considerations
> 1) Pentasafe (Security Manager)
> 2) Computer Associate (eTrust)
> 3) Symantec (Not sure if there's a single name)
>
> Possible considerations
> 1) Hewlett Packard (ITO)
> 2) ISS (haven't check them out yet)
> 3) CSS (haven't check them out yet)
> 4) [ Create my own software like what Ivan Arce did ] :)
>
> For those who are keen to know the results of our evaulation, feel free
> to email me and I will share with you the outcome later. I would also
> welcome and appreciate any further feedbacks from anyone. Thks guys
> (Ivan, Gary, James, and Predrag), for being so helpful !
>
> Predrag Zivic wrote:
> > Hey we all have the same dreams:-)))
> > The two vendors very close to deliver the dream are:
> > - Computer Associates (eTrust line of products)- the
> > most complete if you ask me.
> > - Symantec (after the Axent acquisition) - Close
> > second.
> > - Network Associates (distant third - if you are
> > concerned ONLY about the Microsoft environment they
> > could be listed here as the second)
> > - Fourth - no close competitor...
> > One will mention the Checkpoint and OPSEC but that is
> > still (according to me:-)) very good perimeter not
> > enterprise security product suite.
> > Another approach is to go with the point solutions and
> > create the custom tailored security management
> > umbrella.
> > Hope this helps...
> > Pez
> >
> > --- Maddy <mwlalex () magix com sg> wrote:
> > > Hi all,
> > >
> > > I have a dream to build an Enterprise Security
> > > Management for my
> > > organization. The capability expected are
> > >
> > > 1. monitoring events from firewalls, IDS, web
> > > servers, NT and HPUX
> > > servers
> > > 2. centralized user management for remote
> > > file/directory mgt, single
> > > sign-on and password distribution mgt.
> > > 3. Customizable reporting and notification
> > > 4. web-browser inteerface for a unified/integrated
> > > console
> > >
> > > I will be looking at Pentasafe's Security Manager,
> > > Arthur Anderssen's
> > > OneView and perhaps a few others. I was told that
> > > there is not such
> > > single umbrella product currently on the market and
> > > that I will have
> > > write some software to integrate existing products.
> > >
> > > I would like the expert opinions on this and pls let
> > > me know if I am
> > > just plain dreaming or it can be a reality. Fyi, I
> > > am willing to go that
> > > extra mile to create that integration software and
> > > so, pls let me know
> > > your ideas/suggestions on this too.
> > >
> > > Thks a million in advance !
> > >
> > > Rgds
> > > Maddy
> > >
> > > _______________________________________________
> > > firewall-wizards mailing list
> > > firewall-wizards () nfr com
> > > http://www.nfr.com/mailman/listinfo/firewall-wizards
> >
> > __________________________________________________
> > Do You Yahoo!?
> > Yahoo! Shopping - Thousands of Stores. Millions of Products.
> > http://shopping.yahoo.com/
> >
> > _______________________________________________
> > firewall-wizards mailing list
> > firewall-wizards () nfr com
> > http://www.nfr.com/mailman/listinfo/firewall-wizards
>
> _______________________________________________
> firewall-wizards mailing list
> firewall-wizards () nfr com
> http://www.nfr.com/mailman/listinfo/firewall-wizards


_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://www.nfr.com/mailman/listinfo/firewall-wizards