Category: Product

News features include:
– Real-time Event Correlation: Searches and alerts drive continuous monitoring of critical assets using dashboards and communications to members of the security team
– Dashboards: Visualizations of security data support more than 100 security metrics and over 160 reports
– Drill-down and drill-across: In a single click, users can access raw data quickly for analysis and pivot across the raw data-types to follow an investigation wherever it leads
– Federated Identity Monitoring: Correlation of multiple user identities to identify and investigate user activities across the IT infrastructure
– Enhanced incident management: The ability to reprioritize, reassign and journal security events for quick resolution and incident response
– Operationalization of findings: Once a forensic investigation is complete, users can click the “save” button to continuously monitor and alert for the same condition.

http://gov.ulitzer.com/node/2158615

For smaller organizations, Symantec offers both on-premises and cloud-based solutions with Symantec Endpoint Protection Small Business Edition and Symantec Endpoint Protection.cloud, respectively, providing customers with flexibility of choice and freedom of deployment to best meet their business needs.

To identify emerging threats across local and global environments, Symantec Protection Center will offer a centralized view across the Symantec security portfolio and third-party products through three levels of integration — single sign-on, data collection and process automation.

Symantec Enterprise Vault 10 software will add new integration with Symantec’s data loss prevention and encryption technologies to archive and discover organizations’ information without compromising confidential information, in addition to allowing organizations to discover data stored in the cloud and from social networks. Symantec’s Software-as-a-Service-based Enterprise Vault.cloud will offer unlimited cloud storage for e-mail, with rapid search and access, for a flat fee per mailbox per month.

As more law firms and eDiscovery service providers are required to adopt more formal information management processes, they will be faced with increased costs associated with discovery over those that have an efficient information governance strategy and archiving solution available.

“Information streams are evolving from email to social networks and archives are moving from on-premise to the cloud, causing IT administrators to lose sleep over managing information and lawyers to debate new retention policies,” said Brian Dye, vice president of product management, Symantec. Enterprise Vault 10 is adding Data Classification Service (DCS) as a new feature that leverages Symantec’s data loss prevention technology to analyze email content and metadata to automatically classify the email. With no hardware, software, or plug-ins to install and maintain, this solution offers unlimited email storage and retention in secure enterprise-class data centers for a flat fee per mailbox per month.

http://www.securityweek.com/symantec-announces-updates-data-management-protection-and-endpoint-security-solutions

Chris Petersen, founder and CTO of LogRhythm, said: “Virtualisation and cloud computing are transforming the way IT is deployed, managed and consumed, which includes log management and SIEM technology.

http://www.scmagazineuk.com/entry-level-siem-and-log-management-solution-introduced-by-loglogic-as-logrhythm-introduces-virtualised-siem/article/181160/

Niraj Zaveri, a Symantec senior product marketing manager, said system administrators typically have to provision storage to a host application server, then map those servers back to application requirements in a database, then create a storage volume or file system for it on an storage area network (SAN) or network-attached storage (NAS) system. “The point is that you can now just define the set of storage services available to your applications,” he said. “This automates the identification of storage devices matching the storage services … The new functionality in Veritas Operations Manager bridges the gap between server, database and storage administrators to increase storage utilization, scale operations, maintain compliance and ensure uptime and availability across Unix, Linux, Windows and VMware environments.”

That tool is a set of built-in reports to automatically identify under-utilized storage resources, tracking utilization within database files and mapping that to disks and RAID groups in storage arrays.

http://www.computerworld.com/s/article/9190458/Symantec_adds_service_level_templates_to_Storage_Foundation?source=CTWNLE_nlt_dailyam_2010-10-12

“Virtualization is a reality for many businesses that are looking to drive efficiencies throughout their organizations, or that have space-constrained or widely-distributed IT environments,” said LogLogic CEO Guy Churchward.

With the release of LogLogic’s MX Virtual, we enable companies to lower their operational costs, while leveraging the full power of our IT data management technology anywhere in the world.” The MX Virtual also lowers the cost of entry for the smaller companies, those with security or PCI compliance needs but have very few servers or monitoring points.

It is also perfectly suited for cloud providers who wish to offer logging-as-a-service, or PCI-as-a-Service in the cloud.

In June 2010, LogLogic released a Tech Preview of its virtual appliance, which was downloaded by thousands of users from across the world.

http://newsblaze.com/story/2010101206463400001.bw/topstory.html

“The Universal Collection Framework lets us pull in all the IT data within an infrastructure, and a key part of that is the Universal Log Data Protocol (ULDP) that we’ve created,” LogLogic CTO Stephen Manley told InternetNews.com. Manley added that the ULDP subset of the Universal Collection Framework, in its first release with LogLogic 5, is all about enabling WAN awareness of log data.

He said that encryption and compression are part of the protocol, as is reliable acknowledgment that log data has been received and committed to stable storage.

Manley added that in its first release of ULDP, LogLogic is not supporting the IF-MAP standard, which is being used by security vendors to pass log event data across devices for access control.

“The idea of a standardized protocol for transporting and storing log data sounds good in theory, but it’s unrealistic given the hundreds of different types of log sources and vendors,” Mike Reagan, vice president of marketing at LogRhythm, told InternetNews.com. “Standardization would make it easier for the log management or SIEM vendor, but the positive impact on the end customer is hard to see given the widespread collection and transportation capabilities that exist today.”

The LogLogic 5 solution which is scheduled to be available at the end of the third quarter, will also mark a shift in the underlying operating system technology used by LogLogic.

The LogLogic solution is a hardware appliance that to date has used a Linux base — actually a custom derivative of the CentOS Red Hat Enterprise Linux clone, Manley said.

http://www.enterprisenetworkingplanet.com/netsp/article.php/3899826/WAN+Log+File+Data+Collection+Heads+for+Standardization.htm