Re: Enterprise Security Management - Dream or reality

[Maddy <mwlalex () magix com sg>]

Oops, someone mentioned Tivoli earlier but I forgot to add that into the
list. Sorry here's the updated list.

 Definite considerations
 1) Pentasafe (Security Manager)
 2) Computer Associate (eTrust)
 3) Symantec (Not sure if there's a single name)
 4) IBM (Tivoli SecureWay)

 Possible considerations
 1) Hewlett Packard (ITO)
 2) ISS (haven't check them out yet)
 3) CSS (haven't check them out yet)
 4) Unisys Single Point security suite
 5) [ Create my own software like what Ivan Arce did ] :)

Ok, I must first clarify to those waiting for the evaluation results
that I do not have all kind of OSes and security tools in my
environment. Therefore, the hands-on eval should not be considered as
complete but only relevant to my environment. So vendors here, pls do
not flame me. :p

During the hands-on eval, the OSes I will be using are Win95, WinNT
Server 4.0 and HPUX 11.x. Security tools include 

Firewalls : Checkpoint FW-1 4.0, Raptor 6.03 (HPUX11.x)
NIDS : ISS RealSecure
HIDS (considering ISS Server Sensor/Symantec ITA/NetworkICE ICEPac)
Anti-virus : Trend Micro ScanMail, Norton Anti-virus
System scanner : Symantec ESM, ISS System scanner
Network scanner : ISS Internet Scanner

Rgds
Maddy

"Stapleton, Bernard (Australia)" wrote:
> Maddy,
>
> I would be very interested in your outcomes of this evaluation.
>
> We already have points 1 and 3 by use of IBM's Tivoli product.
>
> We have Tivoli monitoring day to day procedures and server faults etc. I
> will be building some tivoli monitors for our IDS shortly, so that all the
> IDS logs feed into Tivoli for action.
>
> However if you come up with something that could work, I would seriously
> consider looking at it for our environment.
>
> Thanks
>
> Berny
>
> -----Original Message-----
> From: Maddy [mailto:mwlalex () magix com sg]
> Sent: Sunday, 31 December 2000 03:57 AM
> To: Predrag Zivic
> Cc: fw-wiz
> Subject: Re: [fw-wiz] Enterprise Security Management - Dream or reality
>
> Thk u all for responding to my dream security setup. Ok, my list has
> grown now to :
>
> Definite considerations
> 1) Pentasafe (Security Manager)
> 2) Computer Associate (eTrust)
> 3) Symantec (Not sure if there's a single name)
>
> Possible considerations
> 1) Hewlett Packard (ITO)
> 2) ISS (haven't check them out yet)
> 3) CSS (haven't check them out yet)
> 4) [ Create my own software like what Ivan Arce did ] :)
>
> For those who are keen to know the results of our evaulation, feel free
> to email me and I will share with you the outcome later. I would also
> welcome and appreciate any further feedbacks from anyone. Thks guys
> (Ivan, Gary, James, and Predrag), for being so helpful !
>
> Predrag Zivic wrote:
> > Hey we all have the same dreams:-)))
> > The two vendors very close to deliver the dream are:
> > - Computer Associates (eTrust line of products)- the
> > most complete if you ask me.
> > - Symantec (after the Axent acquisition) - Close
> > second.
> > - Network Associates (distant third - if you are
> > concerned ONLY about the Microsoft environment they
> > could be listed here as the second)
> > - Fourth - no close competitor...
> > One will mention the Checkpoint and OPSEC but that is
> > still (according to me:-)) very good perimeter not
> > enterprise security product suite.
> > Another approach is to go with the point solutions and
> > create the custom tailored security management
> > umbrella.
> > Hope this helps...
> > Pez
> >
> > --- Maddy <mwlalex () magix com sg> wrote:
> > > Hi all,
> > >
> > > I have a dream to build an Enterprise Security
> > > Management for my
> > > organization. The capability expected are
> > >
> > > 1. monitoring events from firewalls, IDS, web
> > > servers, NT and HPUX
> > > servers
> > > 2. centralized user management for remote
> > > file/directory mgt, single
> > > sign-on and password distribution mgt.
> > > 3. Customizable reporting and notification
> > > 4. web-browser inteerface for a unified/integrated
> > > console
> > >
> > > I will be looking at Pentasafe's Security Manager,
> > > Arthur Anderssen's
> > > OneView and perhaps a few others. I was told that
> > > there is not such
> > > single umbrella product currently on the market and
> > > that I will have
> > > write some software to integrate existing products.
> > >
> > > I would like the expert opinions on this and pls let
> > > me know if I am
> > > just plain dreaming or it can be a reality. Fyi, I
> > > am willing to go that
> > > extra mile to create that integration software and
> > > so, pls let me know
> > > your ideas/suggestions on this too.
> > >
> > > Thks a million in advance !
> > >
> > > Rgds
> > > Maddy
> > >
> > > _______________________________________________
> > > firewall-wizards mailing list
> > > firewall-wizards () nfr com
> > > http://www.nfr.com/mailman/listinfo/firewall-wizards
> >
> > __________________________________________________
> > Do You Yahoo!?
> > Yahoo! Shopping - Thousands of Stores. Millions of Products.
> > http://shopping.yahoo.com/
> >
> > _______________________________________________
> > firewall-wizards mailing list
> > firewall-wizards () nfr com
> > http://www.nfr.com/mailman/listinfo/firewall-wizards
>
> _______________________________________________
> firewall-wizards mailing list
> firewall-wizards () nfr com
> http://www.nfr.com/mailman/listinfo/firewall-wizards
>
> "WorldSecure <exchange.ml.com>" made the following
>  annotations on 01/02/01 19:48:18
> ------------------------------------------------------------------------------
> _______________________________________________________
> The information in this Internet eMail is confidential and is intended solely for the addressee.  Access, copying or 
> re-use of information in it by anyone else is unauthorised.  Any views or opinions presented are solely those of the 
> author and do not necessarily represent those of Merrill Lynch Investment Mangers or any of its affiliates.
>
> If you are not the intended recipient please contact either Merrill Lynch Investment Managers, London, +44 (0)20 7743 
> 3000 or Australia on +61 3 9657 3000 as appropriate.
>
> In the United Kingdom, Merrill Lynch Investment Managers is a trading name of Merrill Lynch Investment Mangers Ltd 
> (regulated by IMRO), registered office 33 King William Street, London EC4R 9AS.  Registered in England No. 2020394.  
> A subsidiary of Merrill Lynch & Co., Inc.
> _______________________________________________________
>
> ==============================================================================

_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://www.nfr.com/mailman/listinfo/firewall-wizards