Visibility: Edge to Core

Unified Security Management for Greater Visibility into the Enterprise

Unified Security management collects all relevant security information together in a common, normalized schema for rapid analysis and correlation. By looking at all of your data together, relationships between network activity, IPS alerts, database acitivty, etc. can be easily idenitfied, facilitating incident response and forensic capabilities.

The problem: There's too much data ... coming from too many directions

"IT Excellence demands both SIM, Log Management and Network Flow Data Analysis."

Enterprise Strategy Group, April, 2008

To maintain Edge-to-Core protection and visibility, your security management solution needs to collect and maintain a lot of data, while at the same time making it easier to manage that data—which could represent billions of events and flows.

"NitroView provides a mix of SIM and SEM, and its repository can sustain high real-time event insert rates while supporting report generation and analytics. SIEM MQ May 2008"

Mark Nicolette, Gartner SIEM Magic Quadrant, 2008

nitroview enterprise security manager nitroview logcaster

New Technology allows for the convergence of disparate security functions into a Unified Security Management (USM) system. This increases the efficiency and effectiveness of information security efforts. Unification translates directly to a rapid Return on Investment for USM expenditures, as the USM replaces three or more separate security systems, while increasing visibility into the IS infrastructure and lowering risk.

A Unified Security Management solution provides the following benefits over standalone SIM, SEM, NBA and Log Management systems.

  1. Visibility from the edge, through the network, to the core data stores that contain your critical data
  2. Visibility to slow, multi-symptom and multi-vector attacks
  3. Easier compliance reporting
  4. Proof-of-compliance
  5. Lower operational costs of diagnosing and remediating threats
  6. Lower operational costs of collecting, storing, and maintaining information required for internal or regulatory audits
  7. Lower capital requirements of information management through the convergence of all required functions
  8. ... and of course, less cost associated with a security breach, as your overall data protection (and accountability) increases

Topology View
Topology Drill Down
Attack Severity
Users
Application
SIP
Dest Prt
filter

Click any component above to see more detail.  

Operational Forensics — Fast

NitroView provides a fast, responsive and highly customizable user interface that presents network and security data in the best way possible to meet your operational needs. Because NitroView can access and analyze data so quickly, both real-time and forensic data can be managed together, in near real-time, providing a powerful operational tool in your security arsenal.

Scalable Architecture

NitroView is available in a variety of models to meet any need. NitroView may be deployed as a distributed appliance-based solution, or as a single-box solution. Distribution allows a single NitroView management appliance to manage data collected from multiple distributed NitroView Receiver appliances, scaling to support even the largest enterprises. For smaller networks, an "all in one" appliance provides both collection and analysis capabilities in a single cost-effective appliance — the perfect solution for small and medium businesses who require comprehensive security management because of data leakage, PCI compliance, or other information security requirements.

Reliable, Low-Maintenance Appliances

NitroSecurity uses highly customized hardware and our patented high performance data management engine to create a network appliance built for reliability — without requiring extensive IT resources to maintain, without requiring a database administrator, and without software- or database- license traps. The reliability of NitroView and NitroGuard appliances has earned us an EAL 3 common criteria certification — one of the highest CC ratings in the industry.





These icons link to social bookmarking sites to help share this content.
  • share this page:
  • bodytext
  • del.icio.us
  • Reddit
  • Slashdot
  • Technorati
  • Propeller