Security Monitoring

Activeworx Security Center is a cost-effective security information management system that provides real-time security device log monitoring with alerts, audit and compliance reports, and tools for advanced, in-depth forensic analysis. Activeworx consolidates and manages alerts from multiple vendors and security devices.

Activeworx reduces the time it takes to analyze event data from multiple sources and produces real-time reports that pinpoint network security breaches and vulnerabilities. These in-depth reports provide the details necessary for regulatory compliance reporting for Sarbanes-Oxley, HIPAA, and the Gramm-Leach-Bliley Act.

There are events that are being triggered from many different security devices on your network. Each of these events has its own key points of interest. Instead of removing the details, Activeworx acts as an event tracker and preserves these key points to enable you to take advantage of all the information within each event. It does this by allowing you to have multiple database types, including events from:

• Intrusion Detection Systems, including Snort
• Syslog Events
• Firewall Events
• Vulnerability Scans
• TCPDump Packets
• Keystroke Loggers

You can monitor any of the following databases:

Microsoft SQL Server - Microsoft SQL Express - MySQL - Oracle - Informix - Paradox - Progress - IBM DB2 - Pervasive - Ingres - SQLBase - Microsoft Access - Microsoft Excel - Visual FoxPro - Filemaker - Miscellaneous other RDBMS systems

When problems are detected, you're immediately notified by network message, e-mail, pager, or SMS message. When a failure is detected, the network monitor tool will try to recover the problem by running a system administrator defined program or by restarting a process.

The product includes build-in monitor rules for: Active Directory, ADO databases, ADSI, Disk Drives, CPU Usage, Disk Spaces, Event Log (with content checking), Exchange, File Existence (with content checking), FTP sites, HTTP(s) (with content checking), ICMP/Ping, MS SQL Databases, Novell NDS, NNTP news servers, NTDS (NT4 compatible DS), NTP time servers, ODBC Databases, Oracle Databases (SQLNet), POP3 Mail servers, PowerShell, Printers, Processes, Services, SMTP Mail servers, SNMP, TCP ports (with handshaking), UDP, UNIX Shell Scripts (RSH), VBScript (custom scripts), WMI and more.

ActiveXperts Network Monitor is a complete solution. Regardless of what you want to monitor, ActiveXperts Network Monitor supports it all at a cost-effective price.

Armor2net personal firewall stops hackers and data thieves and protects your PC from Internet-borne threats. Armor2net can meet your requirements for Internet security and Internet privacy. This PC firewall monitors all Internet connections to and from your computer to ensure that only legitimate traffic is allowed, and alerts you to attempted intrusions. You have the option to grant and deny access to the Internet on a per-application basis, thus preventing worms, Trojan horses, and spyware programs from hurting your computer. Armor2net shows the currently active connections and the details of these connections. You can shut off any unsafe connection.

Armor2net stops browser pop-up ads. You can also customize it on each individual Web site. The spyware remover checks your memory, Registry, and hard drive for known spyware components and lets you remove spyware safely. Armor2net's interface is easy to use. In version 3.11, some bugs were fixed and add new spyware's definitions were added.

AWSPS features a very comprehensive set of tools, some of them unique, for in-depth assessment of Network Security, namely 2 TCP port scanners, 1 UDP port scanner, 1 NetBIOS scanner, comprehensive Local Host and LAN information, NSLookUp, Ping, Finger and much more."

Cyber-Defender is the world's first P2P computer intrusion prevention network for totally protecting your PC beyond antivirus and firewall. Using its progressive early threat detection based on behavior analyzing for any unknown threat and pattern matching for any known threat, Cyber-Defender could find and response malicious files, vulnerable files, suspicious file, and anonymous files in your machine in real time. Also the users of Cyber-Defender consist of a global P2P intrusion prevention network to dynamically protect your computer and other computers in the world.

You can receive event log alerts through a variety of notifications (e.g. email, pager, etc.) and our filtering engine supports advanced features such as thresholds, day/time settings, summaries, timers and recurring schedules not found in other products. The unique real-time log monitoring component can normalize any OS or application – specific delimited log file type (e.g. IIS, DHCP, Firewall) for advanced searching and reporting.

EventSentry also helps companies meet the requirements of SOX, HIPAA, PCI and other regulatory requirements. With EventSentry you can consolidate events to a central database and create a variety of reports with the web-based reporting component. Unlike agentless solutions, EventSentry uses reliable agents which monitor your machines in real-time without any impact on performance or the network. Agents also ensure that your systems are monitored in real-time regardless of network connectivity.

Additionally, EventSentry also monitors services, disk space, performance, software/hardware, NTP and file checksums. EventSentry's compliance tracking feature normalizes Windows security events and provides insightful tracking information about Active Directory, application usage and logon activity. Network devices can be monitored through Syslog, SNMP and heartbeat checks. Environment sensors are also available and support monitoring temperature, humidity, water, smoke and motion.

EventSentry can be evaluated for 30 days; a free version is also available. Inquire for server and workstation pricing.

Built-in monitoring rules include: Exchange Server 2000/2003, MS SQL, Oracle and ODBC databases, CPU usage, FTP & HTTP Servers Group Membership, Active Directory & NTDS, Disk Drive health, Disk Space, Event Log (with content checking), File Existence (with content checking), TCP, UDP, ICMP/Ping, SMTP & POP3 Mail Servers, Printers, Processes, Services, UNIX Shell Scripts (RSH), SNMP & Terminal Server. You can also write custom monitor functions in Vbscript and leverage ADSI and WMI, allowing you to monitor virtually anything.

GFI Network Server Monitor tests the status of a service by actually logging on, testing and logging off, rather than deducing a service status from generated events (as other products do), which is the only real way to ensure server uptime!

GoldTach Pro is a mini-sized and powerful personal firewall which can effectively protect you against hackers' intrusion and data thief. GoldTach Pro workes in four ways: TCP/IP packets Filtration,Process Commnication Control, Webpage Content Filtration and E-mail Protection. GoldTach Pro defines three security control levels: Normal, Strict, Custom Beginners can get the essential security by the default settings, and experts can customize the net policies for their needed. GoldTach Pro can block most pop-up ads pop window and block cookie etc to protect your privacy. NetWatch function let you view all IP data packet passing thru your PC. You can also view current data communication on the open port of each process. Process management tool let you know the details for processes, such as parent process ID, open handles, owned thread, created time etc. It is a good way to find and prevent Troy. Mail protection including send e-mail check and modify the extension of the mail e-attachment before clinets receive it.When GoldTach Pro workes in "Lock internet" mode, all the processes can not access the internet but those you permited. You can cut off all the internet connects immediately when emergency occurred . GoldTach Pro supports three types of detailed log: operation log ,blocked IP packet log ,and applicatlion log. If your system is attacked by malice webpage and registry settings are changed, e.g., disabling editing registry with "regedit.ext" or changing IE homepage, you can quickly restore with GoldTach Pro's registry tool. GoldTach Pro provides two panels: Nice Panel & Advance Panel for your easy control of the network. You can know current network status thru system tray icon. The installation packet sizes of this software is only 1.2 MB.

Optimized for today's Internet, McAfee VirusScan Online is fast, effective relief from dangerous PC viruses, worms and Trojans. Auto scanning, immediate cleaning, one-click controls and complete, up-to-the-minute protection keep your desktop, files and e-mail safe 24/7. Ideal for users on dial-up or broadband (DSL, cable), VirusScan Online comes with fast, free antivirus updates (easily downloaded over the Internet) during your subscription period, which saves money and time.

NetIQ Security Manager is an industry-leading Security Information and Event Management (SIEM) solution that provides protection for your critical data and systems.

It provides host-focused security for your vital infrastructure and enables you to satisfy your toughest compliance challenges by automating security activity reviews, log collection, threat management, incident response, and change detection.

With NetIQ Security Manager, you will be able to reduce both organizational risk and workload by addressing far more easily some of the most demanding compliance and data security requirements, including:

• Change detection and file integrity monitoring
• Privileged-user monitoring
• Log management, analysis and query-based forensics
• Security event correlation, forensic analysis, and integrated response

Network Enforcer protects your network and asset security. Network Enforcer network security software accomplishes this through strict user behavior filters that allow you to govern what users are not allowed to do, and how many times they can get away with it before you are alerted, and Network Enforcer takes preventative action.

NetWrix Change Reporter Suite produces reports that include complete information on every single change that has occurred in an organization and can be used for detailed forensic analysis. Unlike traditional log management solutions, NetWrix makes it very easy to find relevant answers to key questions: who changed what, when and where, including “before” and “after” values for modified settings. The product streamlines compliance to HIPAA, SOX, PCI, GLBA, FISMA and many other regulations, provides an easy-to-use solution that drastically improves IT infrastructure visibility and internal security.

NetWrix Change Reporter Suite is used by thousands of satisfied customers all over the world. Multiple options are available for your convenience. You can download a free trial, evaluate the product in our hosted test lab or schedule a one-to-one demo with a NetWrix expert.

Get the free award-winning server monitoring tool from ObserveIT. Record and Replay all user sessions on your network servers. Any remote access or console session is searchable and ready for playback! Protocol-agnostic: ObserveIT records Terminal Server, Citrix, Remote Desktop, VMware, Dameware, VNC and more. You'll be up and running in minutes, and will understand why the world's leading banks, manufacturers, telco and healthcare companies rely on ObserveIT to generate secure compliance audits, to monitor 3rd-party vendors and to improve system uptime.

Download Now: FREE!

Odyssey is a complete WLAN access control and security product based on the IEEE security standard 802.1x. Odyssey comprises Odyssey Client, a multi-platform client which runs on a WLAN device and allows a user to securely connect to the WLAN; and Odyssey Server, a RADIUS server specially designed to handle WLAN user authentication and security.

OPNET Technologies, Inc. is a leading provider of solutions for IT Service Assurance. OPNET provides the industry's most comprehensive, integrated solution suite for application and network performance management. OPNET's solutions deliver broad visibility and monitoring across infrastructure domains as well as deep data collection and analytics to enable powerful root cause diagnosis.

• Breadth: Provides visibility across the application footprint, including Java, .NET, custom applications; web and application servers;, database servers; client machines; routers, switches, load balancers, firewalls, and WAN accelerators
• Depth: Obtain high quality, fine-grained data specifically targeted at troubleshooting application performance
• Integration across domains: Ability to obtain, analyze and report on data that allows a progressively deeper analysis starting with a symptom, going through triage, and leading to root cause isolation
• Analytics: True correlation of performance-related metrics and events, adaptive base-lining of performance metrics, rules-driven analysis, and advanced visualization that synchronizes data across application tiers to present an integrated view
• Low Overhead: Patented, industry-leading capabilities for collection, long-term storage, rapid retrieval of high-volume, fine-grained data, and automated configuration and tuning of the management solution

OPNET’s solutions have been operationally proven in thousands of customer environments worldwide.

Packet Sniffer SDK (PSSDK) is the most powerful component suite for network packet capture in Windows OS family environment.

The main features of the Packet Sniffer SDK library are:

Any pre-installed packet drivers are not required; Packet Sniffer SDK works fine on Gigabit networks; Packet Sniffer SDK supports all modern development environments for Windows; Packet Sniffer SDK (all its editions: ActiveX, VCL, DLL, and static libraries) is compiled from the same well-optimized C code. Therefore you may be assured that any Packet Sniffer SDK improvement is implemented in all its editions; Packet Sniffer SDK supports multiprocessor (SMP) systems;
Packet Sniffer SDK supports packet filtering by BPF (BSD Packet Filter, user-settable packet filters);
Packet Sniffer SDK supports packet generating/sending functions.

All editions of Packet Sniffer SDK components/libraries contain internal packet driver, which is dynamically loaded/unloaded when the application, using Packet Sniffer SDK, is launched/closed.

Currently Packet Sniffer SDK is represented in the following implementations: ActiveX,DLL,VCL, and static libraries for Microsoft VC compatible and Borland compilers.

Therefore, Packet Sniffer SDK component/library family allows you to use the full power of almost any of the modern visual or non-visual development environment for creating various network applications working with raw network adapter traffic.

Using Packet Sniffer SDK the developer does not need to create special network drivers or to learn internal implementation of the network functionalities in all Windows family operating systems.

Main Packet Sniffer SDK elements are developed as objects with properties, methods, and events that make the applications development process simpler and more flexible.

RegRun is an integrated suite of utilities that will make your computer-management life easier, and will help protect you from much of the destructive activity of today's Trojans. It includes advanced Windows Startup Manager that gives you absolute control over what starts up when you load Windows. The new feature in this version is Startup Optimizer. It can automatically removes useless and dangerous applications from Windows Startup. A lot of well known applications are included into constantly updated Application Database. RegRun Rescue automates everyday backup of your registry. WinCleaner quickly wipes unwanted files and allows to manage cookies. In addition RegRun Suite includes fast registry search and replace feature, customizable registry tracer, bootlog analyser, process manager and trojan analyser. RegRun Suite is fully compatible with well known antiviral software. Recommended for XP and W2K.

Retina is a vulnerability assessment scanner. It identifies and fixes potential security holes that exist in your network. Retina can not only figure out known security holes, but also unknown holes in your network. Many new features and functionalities have been added to Retina, including: customizable reporting, wireless audits, remote OS detection, a new audits wizard, faster scans, and much more.

It provides detailed inventory of the network assets, assesses network vulnerabilities and identifies devices that are exposed. By deploying missing patches/updates and service packs, Security Manager Plus automatically remediates some open threats to the systems. It also provides solutions to mitigate risks, secure IT environment and generates comprehensive audit reports for compliance and understanding.

Security Manager Plus offers

• Vulnerability Scanning
• Open Ports Detection
• Hardware/ Software Inventories
• Patch Management
• Windows Change Management
• Audit Reports
• Compliance Reporting

Spy Sweeper detects and safely removes all forms of invasive spyware, including Trojans, adware, key loggers, and system monitors. New Version 2.1 features a real-time active memory shield, smart sweeper technology that adapts to dynamically changing spies to ensure your protection, support for detachable and network drives, customizable sweeping options to save you time and one-click access to a detailed spy database. The Spy Sweeper application offers one-time access to the latest updated spyware definitions, giving you immediate spyware protection. For ongoing protection against ever-evolving spyware, Spy Sweeper offers a fee-based subscription service that provides the most advanced security available. A Spy Sweeper subscription offers seamless updates to new definitions that detect and remove threats as they emerge plus the support of expert customer service to help keep your system free from spyware problems.

Spytech SecurityWorks is a compiled suite of security-related utilities for everyday use. The suite includes: SpyAgent - utility for monitoring all applications run and keystrokes entered on a subject machine; SpamAgent - spam filtering and reporting tool that allows you to keep spam from reaching your inbox; PopupAgent - kills and stops ad popups from annoying you and wasting your browsing time on the web; Web Eradicator - securely deletes personal files with three different deletion strengths; PasswordLock - securely stores all your passwords in an encrypted, password-protected list for easy, private access; SpyLock - locks down your workstation desktop.

Sygate Personal Firewall provides security in a user-friendly interface, protecting your PC from hackers, Trojans, and DoS attacks. New features include full-ICS support, protocol driver level protection, enhanced logging, and more. Sygate Personal Firewall offers protection from malicious code intrusions, keeping the information on your PC safe and private.

ZoneAlarm is designed to protect your DSL or cable-connected PC from hackers. This program includes four interlocking security services: a firewall, an Application Control, an Internet Lock, and Zones. The firewall controls the door to your computer and allows only traffic that you understand and initiate. The Application Control allows you to decide which applications can and cannot use the Internet. The Internet Lock blocks Internet traffic while your computer is unattended or while you are not using the Internet, and it can be activated automatically with your computer's screensaver or after a set period of inactivity. Zones monitor all activity on your computer and alert you when a new application attempts to access the Internet.

In addition to systems and network management, Zyrion Traverse also does application monitoring of databases, web apps, java applications, mail servers, exchange, blackberry enterprise server, etc.

Some key features include:

• Bandwidth monitor
• Linux Server monitoring
• Windows Monitoring
• Cisco router monitoring
• Oracle, MySQL, SQL Server monitor
• Exchange, Active directory, etc.

Reports include:

• SLA
• Real time event logs, traps, syslogs
• Capacity planning
• Performance and Trend analysis