|
TierPoint SIMplify™ exists to provide organizations enhanced tools providing centralization of information for IT operations and security through an online portal application. We have implemented a solution in a Software-As-A-Service model which provides reduced capital and ongoing expenses to organizations. Our solution is a next-generation Security Information Management (SIM) solution that combines Log, Configuration, Asset, Performance, Vulnerability and NetFlow data into a single system. Powered by a unified IT risk management platform, SIMplify uses an integrated data model to extend beyond traditional SIM to offer visibility into security, risk and compliance across network, system and application layers. With end-to-end correlation and advanced policy management, SIMplify delivers effective incident identification that enables organizations to quickly understand and fix the root cause of problems before business is impacted. SIMplify automates the collection, archival and correlation of log data across the IT infrastructure to meet monitoring, reporting and auditing requirements for compliance and security best practices. As a fundamental component of Security Info Management (SIM), log management supports monitoring, correlation, data archival, reporting and forensics functionality to provide real-time insight into event log data across the IT infrastructure. The following is an overview of some of the power features available: Log Management
SIMplify's Centralized Log Management capability allows automated Data Collection and Archiving. It automatically detects, collects, compresses, encrypts and archives log data from all network devices, servers and applications. To support compliance mandates, SIMplify provides the ability to access these logs to aid investigative analysis and ensure regulatory compliance. We are able to do this via an architecture that scales to thousands of devices and centralizes the collection of log data across the enterprise. Leveraging extensive event drill-down capabilities with advanced correlation and analysis of significant events helps enable quick resolution of security incidents. Users can classify events and threat levels based on unique requirements. Real-Time Monitoring and Alerting
SIMplify delivers real-time monitoring and correlation across many data points that are collected from MIBS, Configurations, Syslog, and NetFlow. Providing correlation templates and unique quarantine functionality, users are able to quickly identify and resolve security incidents. Unlike point solutions that create multiple data silos, SIMplify's integrated data model presents a holistic view that helps to uncover hard to identify security problems and trends. - Heterogeneous Real-time Monitoring - monitors security event data across the entire network in real time.
- Real-time Correlated Alerting - allows for the creation and definition of any number of alerts and rules to reduce false positives and identify blended attacks, viruses, intrusions, break-ins, anomalies and other suspicious activity.
- Real-time Event Manager - presents a view of security event data from thousands of network devices, servers and applications; prioritizes actions based on the business impact of each event to allow for corrective measures to be taken before an incident occurs.
- Monitoring Dashboards - SIMplify comes equipped with customizable dashboards as well as the option to build a dashboard from scratch. These dashboards provide a quick, consolidated view of event data that can be customized by user role, business application or business function. Real time monitoring can be performed on Syslog, Performance Metrics, NetFlow, Vunerability Analysis, Configuration changes and Asset Integrity.
Comprehensive reporting
With comprehensive reports, SIMplify empowers executives and operational teams to gain visibility into infrastructure activity by accessing network, system, application and security detail. Reports are either delivered from a secure portal or automatically distributed using a built-in scheduler, and with a single click, sub-level details can be displayed. - Intrusion and Rule - Based Reporting: presents essential information to help security administrators get a comprehensive understanding of the intrusion and rule violations.
- Holistic views - Hacker and virus activity can be correlated across all network devices, servers, and applications, instead of looking at each separately.
- Protocol and Web Usage Reporting - provides a firm handle on protocol and web usage patterns by user, department and device.
- SPAM, Spyware and Antivirus Reporting - generates reports that identify the presence, origin, destination, type and frequency of spam, spyware and viruses across the enterprise.
- Vulnerability Reporting - integrates and reports on vulnerability data derived from industry-leading vulnerability scanners such as Nessus, ISS, eEye, etc.
- Content Categorization Reporting - generates reports to help understand employee web usage patterns by content category.
- Host Reporting - Allows administrators to obtain security, application and system-level host activity-level reports, identify failed login attempts and unauthorized access to sensitive information.
- Automated Report Generation and Distribution - provides a mechanism to e-mail reports automatically to multiple recipients in HTML, MHTML, PDF, Word, Excel and Text formats.
Additionally, with customizable dashboards, SIMplify enables organizations to segregate data and customize views to meet specific user requirements. While C-level executives access high-level risk assessment snapshots to gauge infrastructure health, operations staff are able to see and drilldown into more complex monitoring. Forensics Analysis
SIMplify provides an easy-to-use, configurable mechanism for Forensics investigations that help vector security breaches and aid regulatory compliance by detecting anomalies, identifying policy violations and displaying a chronological order of hacker activity or policy violations. Users can search volumes of archived log, vulnerability, configuration, asset and performance data collected across the enterprise for thorough Investigative Analysis. NetFlow Analysis
SIMplify monitors, analyzes and reports on traffic flow and bandwidth utilization to provide insight into network resource consumption. This enables organizations to better understand traffic patterns and improve network availability, performance and capacity. Configuration Policy Management & Remediation
SIMplify enables users to leverage security, risk and compliance policies to automatically detect policy violations. By centralizing configuration changes across multiple nodes, SIMplify alerts on policy violations, rogue applications and processes, and provides the ability to compare configurations in time. - Configuration Manager - centrally manages policies and enforces change control by automatically tracking, correlating and reconciling configuration settings across the IT infrastructure.
- Configuration Baseline - establishes and maintains a security configuration baseline; identifies, prioritizes and responds to any deviations from baseline configuration.
- Configuration Policy Enforcement - real-time auditing and compliance reporting offers a best practices approach to preparing for audits and maintaining compliance by providing a solid management foundation.
- Configuration Policy Wizard - enables the creation of policies based on specific network settings, processes and change management best practices.
- Correlated Alerting - provides advanced alerting capability that correlates asset status, configuration status and security event data.
- Comprehensive Reporting - provides uncompromised audit trails and tangible evidence of system and network configuration changes.
Performance and Asset Analytics
Performance and Asset information are key elements of Security Information Management, often overlooked by many as evaluation criteria. SIMplify monitors, collects and analyzes performance data in real time to proactively detect, isolate and repair problems. Historical data provides the ability to understand performance trends. Additionally, SIMplify allows you to centralize hardware and software asset tracking and inventory management to mitigate system downtime. This provides the ability to create, track and enforce policies based on devices, servers and applications. Case Studies
Learn more about how customers are using TierPoint SIMplify and how it's making their businesses more successful and efficient. Schedule a complimentary security assessment at your location. For more information on our SIMplify services, contact us at (509) 688-2555 or toll-free at (866) 531-2550. For more information, please browse our white paper list. |
