** Products > Event Management with RSA enVision

Understanding the flood of data from security devices isn't
easy, making compliance goals hard to meet.  RSA enVision offers
effective event management for all organisations.

* Event Correlation

Gathering, storing and presenting security event data is an
important part of the drive to meet compliance regulations.
Keeping control over all the security-relevant log data generated
by various systems and devices on the network is an important
part of compliance at the technical level, as well as being a
business objective in its own right.

Security event management is not a new topic, but the technology
has moved on significantly in the past few years.  It is now
possible to build a system based on ready-to-go appliances
rather than software solutions, allowing implementers to focus
on the meaning and significance of data rather than the low-level
installation issues.

* RSA enVision

The RSA enVision range of appliances offers a scalable solution
for secure event collection and management, based on off-the-shelf
appliances.

This provides full correlation, trend analysis and support
for forensics, with input taken from a wide range of devices,
including IDS and firewalls.

For all but the largest enterprises, a single appliance can carry
out the whole job: capturing events, carrying out real-time and
historical analysis and providing long-term data storage. For
large enterprises and ISPs, dedicated logging devices can be used
to create a fully scalable solution, handling more than 300,000
events per second.

* IDsec and RSA enVision

We are providing installation, support and consultancy for
enVision implementations for companies in the energy supply,
financial and communications sectors. They all need a scalable
solution that is based on off-the-shelf appliances, and they
want to be able to handle input from a wide range of devices,
including IDS, firewalls and servers.

As with many other organisations, the key issue here is ease of
installation: it is important to get real data flowing as soon
as possible, so that the project outlay can be seen as giving
real benefits in the shortest time.

In this work we are pairing IDsec's security integration experience
with our customers' detailed knowledge of their own applications
and understanding of security priorities.

IDsec has considerable expertise in integrating new source
devices that are not supported by the core product. Our certified
engineers can use enVision's Universal Device Support (UDS)
to increase the reach of a deployment.

IDsec is an RSA Solutions Partner.

* About RSA

RSA has acquired Network Intelligence, the leader in security
event management.

Its core product line, the enVision Engine, provided the only
architecture proven to collect efficiently and protect all the
data that drives customers' businesses. RSA enVision takes the
cost and complexity out of compliance and security for hundreds
of customers worldwide.

* About Us

IDsec is an independent company specialising in network security,
and has provided penetration tests and intrusion detection
systems since 1997. We can assess the security of your enterprise
and advise on long-term protection: as we have for a range of
blue-chip clients in the banking, telecoms, manufacturing and
utility sectors.

IDsec Limited 31-33 College Road, Harrow, Middlesex HA1 1EJ,
United Kingdom

T: +44 20 8861 2001 F: +44 20 8861 3433 W: www.idsec.co.uk

All prices exclude VAT and are subject to confirmation.

Copyright (C) 2008 IDsec Limited

products/envision/envision.txt 20081030     (5.08)