Monitoring Anything and Everything with Nagios. Chris Burgess
|
|
|
- Ronald Tyler
- 8 years ago
- Views:
Transcription
1 Monitoring Anything and Everything with Nagios Chris Burgess
2 What We Will Cover What is Nagios? The variety of things Nagios can monitor Why monitoring is important for security Nagios as a security tool? How Nagios works Types of checks Live demonstration Extending Nagios with security tools Where to find more information
3 Bah, Nagios Shmagios! Well, you might be interested, even if: you use another monitoring product you are working outside a security focus
4 What is Nagios? Nagios is an Open Source monitoring application written by Ethan Galstad Nagios is easily obtained using your OS package system (apt-get, rpm, Ports etc.) or source Nagios is easily extensible Nagios is incredibly useful as source of system documentation There are several popular monitoring applications. In my travels, Nagios is the most commonly used. Nagios has a healthy community following There are dozens of third party apps that leverage off of Nagios (hint: search SourceForge)
5 The Variety of things Nagios can Monitor Hosts Services Interactions Logs Connectivity Environment (HVAC) We can monitor anything!
6 Why Monitoring is Important for Security We can automate system interrogation We can automate anomaly detection We can set sensors on high risk systems The best security tools in the world are useless without someone/something monitoring (and acting on) the results It can improve intrusion detection and incident response It can greatly improve forensics We can get a good real-time view of a network
7 Is Nagios a Security Tool? Yes, I think it is. Even if you wouldn t classify Nagios as a security tool per se, you can easily integrate your security tools of choice into a Nagios framework.
8 How Nagios Works You create a list of hosts and services You choose what you want to check, Nagios supports both Active and Passive checks Hosts can have hierarchical relationships Nagios runs (and talks to) plugins that do all sorts of checks. We will cover what sorts of checks a little later. You can view status information at any time and configure notifications, typically and SMS Nagios uses an object and template based configuration system This is really the tip or the iceberg, Nagios epitomises flexibility.
9 Viewing Status Information
10 Viewing Status Information Visually
11 Viewing Status Information in 3D VRML
12 Alerts SMS
13 Other Types of Alerts Pager Voice IM Popup Windows Plus lots more
14 Standard Types of Checks check_mysql.c check_nagios.c check_nt.c check_nwstat.c check_overcr.c check_pgsql.c check_ping.c check_procs.c check_radius.c check_real.c check_smtp.c check_snmp.c check_ssh.c check_swap.c check_tcp.c check_time.c check_udp.c check_by_ssh.c check_dhcp.c check_dig.c check_disk.c check_dns.c check_dummy.c check_fping.c check_game.c check_hpjd.c check_http.c check_icmp.c check_ide_smart.c check_ldap.c check_load.c check_mrtg.c check_mrtgtraf.c check_ups.c check_users.c check_breeze.pl check_disk_smb.pl check_file_age.pl check_flexlm.pl check_ifoperstatus.pl check_ifstatus.pl check_ircd.pl check_log.sh check_mailq.pl check_ntp.pl check_oracle.sh check_rpc.pl check_sensors.sh check_wave.pl
15 More Checks check_apache.pl check_apc_ups.pl check_appletalk.pl check_arping.pl check_asterisk.pl check_axis.sh check_backup.pl check_bgpstate.pl check_breeze.pl check_cluster.c check_cluster2.c check_compaq_insight.pl check_cpqarray.c check_digitemp.pl check_disk_snmp.pl check_dlswcircuit.pl check_dns_random.pl check_ _loop.pl check_fan_cpq_present check_fan_fsc_present check_flexlm.pl check_frontpage check_hltherm.c check_hprsc.pl check_http-with-client-certificate.c check_hw.sh check_ica_master_browser.pl check_ica_metaframe_pub_apps.pl check_ica_program_neigbourhood.pl check_inodes-freebsd.pl check_inodes.pl check_ipxping.c check_javaproc.pl check_joy.sh check_linux_raid.pl check_lmmon.pl check_log2.pl check_lotus.pl check_maxchannels.pl check_maxwanstate.pl check_mem.pl check_ms_spooler.pl check_mssql.sh check_nagios.pl check_nagios_db.pl check_nagios_db_pg.pl check_netapp.pl check_nmap.py check_ora_table_space.pl check_oracle_instance.pl check_oracle_tbs check_pcpmetric.py check_pfstate check_qmailq.pl check_rbl.c check_remote_nagios_status.pl check_rrd_data.pl check_sap.sh check_smart.pl check_smb.sh check_snmp_disk_monitor.pl check_snmp_printer.pl check_snmp_process_monitor.pl check_snmp_procs.pl check_sockets.pl check_sybase check_temp_cpq check_temp_fsc check_timeout.c check_traceroute-pure_perl.pl check_traceroute.pl check_uptime.c check_vcs.pl check_wave.pl check_wins.pl checkciscotemp.pl mrtgext.pl nagios_sendim.pl packet_utils.pm rblcheck-dns rblcheck-web
16 Acting on Events We can act on events by using Event Handlers Event handlers can do anything you want, some examples could be: shut down services, restart failed services, start applications, restart failed applications, run custom scripts
17 Reporting Useful for uptime reports Useful for SLA s Useful for giving clients or managers pretty pictures
18 Performance Data The standard plugins can be used to record useful performance data There are several extensions that enable Nagios to record very detailed performance statistics
19 Live Demonstration
20 Integrating Security Tools with Nagios Network Intrusion Detection Systems Malware Detection Integrity Checking New Host or Service Detection Watching Logs Your_Custom_Tool
21 Network Intrusion Detection Systems Snort PortSentry
22 Malware Detection Anti Virus Applications (Clam, Trend, etc.) AMaViS chkrootkit
23 Integrity Checking Tripwire Package Tools Osiris Samhain
24 On the Lookout for New Hosts or Services Nmap Check to make sure that no new hosts have appeared on your subnet Check to make sure that no new services have appeared on particular hosts
25 Watching Logs It should go without saying that logging (ideally centralised logging) is critical in maintaining a secure infrastructure Syslog Syslog-NG Logwatch Swatch Logmuncher Can be logs from anything (backup app, transaction logs etc.)
26 Tales from the Trenches Logchecks on Honeypot Daemons Non-network Connected Servers Cacti/RRD Integration SNMP Java Application Monitoring WMI
27 More Information
28 Recommended Reading Nagios Documentation by Ethan Galstad Extremely thorough, a must read
29 Recommended Reading Mastering FreeBSD and OpenBSD Security (O'Reilly) by Yanek Korff, Paco Hope, Bruce Potter A great book covering both big picture and practical security
30 Recommended Reading Network Security Tools (O'Reilly) by Nitesh Dhanjani, Justin Clarke Nagios isn t covered in this title, but great for building security tools
31 Technical Reviewers A huge thank you to the following technical reviewers, both from the OSDC Team and the Nagios-Users mailing list. Russell Adams Mark Limburg David Field Don Alfredo
32 Thanks and Questions! Chris Burgess
By Jascha Wanger (jaschawanger@bse-inc.com) (jascha@localareasecurity.com)
Managing Data Center Functions with Open Source Tools By Jascha Wanger (jaschawanger@bse-inc.com) (jascha@localareasecurity.com) Outline Firewalls IDS (Intrusion Detection) Monitoring/Administration Auditing
Tk20 Network Infrastructure
Tk20 Network Infrastructure Tk20 Network Infrastructure Table of Contents Overview... 4 Physical Layout... 4 Air Conditioning:... 4 Backup Power:... 4 Personnel Security:... 4 Fire Prevention and Suppression:...
Network Monitoring With Nagios. Abstract
Network Monitoring With Nagios Adam Spencer Garside Abstract This article discusses how Nagios, an Open Source monitoring framework, can be used to react to potential system failures and proactively forsee
EXPERT STRATEGIES FOR LOG COLLECTION, ROOT CAUSE ANALYSIS, AND COMPLIANCE
EXPERT STRATEGIES FOR LOG COLLECTION, ROOT CAUSE ANALYSIS, AND COMPLIANCE A reliable, high-performance network is critical to your IT infrastructure and organization. Equally important to network performance
The new services in nagios: network bandwidth utility, email notification and sms alert in improving the network performance
The new services in nagios: network bandwidth utility, email notification and sms alert in improving the network performance Mohammad Ali Arsyad bin Mohd Shuhaimi Hang Tuah Jaya, 76100 Durian Tunggal,
TPAf KTl Pen source. System Monitoring. Zenoss Core 3.x Network and
Zenoss Core 3.x Network and System Monitoring A step-by-step guide to configuring, using, and adapting this free Open Source network monitoring system Michael Badger TPAf KTl Pen source I I flli\ I I community
Linux Server Security
Linux Server Security Fernando Duran CTO WaterlooSecurity Inc. www.fduran.com www.watsec.com Internet Server Security Plan 1. Risk analysis 1. Legal, cost of the asset, time to recover 2. What are the
PRTG NETWORK MONITOR. Installed in Seconds. Configured in Minutes. Master Your Network for Years to Come.
PRTG NETWORK MONITOR Installed in Seconds. Configured in Minutes. Master Your Network for Years to Come. PRTG Network Monitor is... NETWORK MONITORING Network monitoring continuously collects current status
Network Monitoring. Sebastian Büttrich, sebastian@less.dk NSRC / IT University of Copenhagen Last edit: February 2012, ICTP Trieste
Network Monitoring Sebastian Büttrich, sebastian@less.dk NSRC / IT University of Copenhagen Last edit: February 2012, ICTP Trieste http://creativecommons.org/licenses/by-nc-sa/3.0/ Agenda What is network
PRTG NETWORK MONITOR. Installed in Seconds. Configured in Minutes. Masters Your Network for Years to Come.
PRTG NETWORK MONITOR Installed in Seconds. Configured in Minutes. Masters Your Network for Years to Come. PRTG Network Monitor is... NETWORK MONITORING Network monitoring continuously collects current
PRTG NETWORK MONITOR. Installed in Seconds. Configured in Minutes. Masters Your Network for Years to Come.
PRTG NETWORK MONITOR Installed in Seconds. Configured in Minutes. Masters Your Network for Years to Come. PRTG Network Monitor is... NETWORK MONITORING Network monitoring continuously collects current
WhatsUp Gold vs. Orion
Gold vs. Building the network management solution that will work for you is very easy with the Gold family just mix-and-match the Gold plug-ins that you need (WhatsVirtual, WhatsConnected, Flow Monitor,
IBM Security QRadar SIEM & Fortinet FortiGate / FortiAnalyzer
IBM Security QRadar SIEM & Fortinet / FortiAnalyzer Introducing new functionality for IBM QRadar Security Intelligence Platform: integration with Fortinet s firewalls and logs forwarded by FortiAnalyzer.
Next Level. Elevated to the. 22 nd Chaos Communication Congress. Alien8 - Matthias Petermann
Intrusion Detection Systems Elevated to the Next Level Alien8 - Matthias Petermann 22 nd Chaos Communication Congress Agenda Attacks and Intrusion Methods Why Intrusion Detection? IDS Technologies Basic
HPCC Monitoring and Reporting (Technical Preview) Boca Raton Documentation Team
HPCC Monitoring and Reporting (Technical Preview) Boca Raton Documentation Team HPCC Monitoring and Reporting (Technical Preview) Boca Raton Documentation Team Copyright 2015 HPCC Systems. All rights reserved
OpenITSM - IT Service Management with Open Source Software
OpenITSM - IT Service Management with Open Source Software 03.02.2011 CloudExpo London Speaker: Julian Hein NETWAYS Founded 1995 26 full time employees Headquarter Nuremberg, Germany Focus on Open Source
Network Monitoring. Review of Software
Network Monitoring Review of Software Components Network Discovery Availability monitoring Alerting system Service Monitoring Network Performance Asset Control Version Control Configuration Management
FUNCTIONAL OVERVIEW www.amdosoft.com
Business Process Protectors Business Service Management Active Error Identification Event Driven Automation Error Handling and Escalation Intelligent Notification Process Reporting IT Management Business
OpenITSM - IT Service Management with Open Source Software
OpenITSM - IT Service Management with Open Source Software März 2011 CeBIT Speaker: Julian Hein NETWAYS Founded 1995 26 full time employees Headquarter Nuremberg, Germany Focus on Open Source in Systems
Enterprise Application Monitoring with
Enterprise Application Monitoring with 11/10/2007 Presented by James Peel james.peel@altinity.com / www.altinity.com 1 Who am I? James Peel - james.peel@altinity.com Job: Managing Director of Altinity
How To Monitor Your Computer With Nagiostee.Org (Nagios)
Host and Service Monitoring at SLAC Alf Wachsmann Stanford Linear Accelerator Center alfw@slac.stanford.edu DESY Zeuthen, May 17, 2005 Monitoring at SLAC Alf Wachsmann 1 Monitoring at SLAC: Does not really
Four Star Network Management. Jeff Allen (jra@corp.webtv.net) WebTV Networks David Williamson (davidw@gnac.com) Global Networking and Computing
Four Star Network Management Jeff Allen (jra@corp.webtv.net) WebTV Networks David Williamson (davidw@gnac.com) Global Networking and Computing Where this is going Who we think you are Who we know we are
[Document Title] SolarWinds Server & Application Monitor (SAM) [Document Subtitle] Angi Gahler. Share: Author: Manish Chacko
![[Document Title] SolarWinds Server & Application Monitor (SAM) [Document Subtitle] Angi Gahler. Share: Author: Manish Chacko](/thumbs/26/8141783.jpg "[Document Title] SolarWinds Server & Application Monitor (SAM) [Document Subtitle] Angi Gahler. Share: Author: Manish Chacko")
[Document Title] [Document Subtitle] SolarWinds Server & Application Monitor (SAM) Author: Manish Chacko Angi Gahler Table of Contents The Case for Application & Server Monitoring.. 3 Complete Visibility
Enterprise IT Monitoring for Networks, Applications, Servers and Virtual Infrastructure - 2 -
June 2014 Enterprise IT Monitoring for Networks, Applications, Servers and Virtual Infrastructure - 2 - 1 WHAT IS PANDORA FMS? WHAT IS PANDORA FMS? Pandora FMS is a monitoring system able to adapt to almost
E- SPIN's IPSwitch WhatsUp Gold Network Management System System Administration Advanced Training (5 Day)
Class Schedule E- SPIN's IPSwitch WhatsUp Gold Network Management System System Administration Advanced Training (5 Day) Date: Specific Pre- Agreed Upon Date Time: 9.00am - 5.00pm Venue: Pre- Agreed Upon
Managed Intrusion, Detection, & Prevention Services (MIDPS) Why E-mail Sorting Solutions? Why ProtectPoint?
Managed Intrusion, Detection, & Prevention Services (MIDPS) Why E-mail Sorting Solutions? Why ProtectPoint? Why? Focused on Managed Intrusion Security Superior-Architected Hardened Technology Security
Using Actions and Alerts
Using Actions and Alerts Depending on the responses received from polling, or the types of messages received, WhatsUp Gold can be set up to fire actions to notify you of any change on your network. Actions
A SURVEY ON AUTOMATED SERVER MONITORING
A SURVEY ON AUTOMATED SERVER MONITORING S.Priscilla Florence Persis B.Tech IT III year SNS College of Engineering,Coimbatore. priscillapersis@gmail.com Abstract This paper covers the automatic way of server
Sharing Intelligence is our Best Defense: Cyber Security Today Is a bit Like the Keystone Cops
Sharing Intelligence is our Best Defense: Incentives That Work versus Disincentives That Can Be Solved William Yurcik* Adam Slagell Jun Wang NCSA Security Research (NCSA) University of Illinois at Urbana-Champaign
Intrusion Detection Systems (IDS)
Intrusion Detection Systems (IDS) What are They and How do They Work? By Wayne T Work Security Gauntlet Consulting 56 Applewood Lane Naugatuck, CT 06770 203.217.5004 Page 1 6/12/2003 1. Introduction Intrusion
CARENET-SE. NOC Tools Review. Communication System Design Summer 2010. Project team. Champion Björn Pehrson Coach Hans Eriksson
NOC Tools Review CARENET-SE Communication System Design Summer 2010 Project team IK2207 Alin Pastrama pastrama@kth.se Champion Björn Pehrson Coach Hans Eriksson IK2207 Annika Holmgren annika.holmgren@gmail.com
Open Source Security Tool Overview
Open Source Security Tool Overview Presented by Kitch Spicer & Douglas Couch Security Engineers for ITaP 1 Introduction Vulnerability Testing Network Security Passive Network Detection Firewalls Anti-virus/Anti-malware
Intrusion Detection Systems
Intrusion Detection Systems Intrusion Detection Systems Intrusion Detection Systems: Overview IDS Acronyms & Definition Components Recognition & Response Security Interoperability & Cooperation HIDS NIDS
Best Practices for Building a Security Operations Center
OPERATIONS SECURITY Best Practices for Building a Security Operations Center Diana Kelley and Ron Moritz If one cannot effectively manage the growing volume of security events flooding the enterprise,
Netwatch Installation For Windows
Netwatch Installation For Windows Netwatch is a program designed to monitor a Powerware UPS unit using the ConnectUPS-Web or Bestlink-Web interfaces and MGE UPS unit using the Network Management Card over
Log Analysis: Overall Issues p. 1 Introduction p. 2 IT Budgets and Results: Leveraging OSS Solutions at Little Cost p. 2 Reporting Security
Foreword p. xvii Log Analysis: Overall Issues p. 1 Introduction p. 2 IT Budgets and Results: Leveraging OSS Solutions at Little Cost p. 2 Reporting Security Information to Management p. 5 Example of an
Using New Relic to Monitor Your Servers
TUTORIAL Using New Relic to Monitor Your Servers by Alan Skorkin Contents Introduction 3 Why Do I Need a Service to Monitor Boxes at All? 4 It Works in Real Life 4 Installing the New Relic Server Monitoring
Security Event Management. February 7, 2007 (Revision 5)
Security Event Management February 7, 2007 (Revision 5) Table of Contents TABLE OF CONTENTS... 2 INTRODUCTION... 3 CRITICAL EVENT DETECTION... 3 LOG ANALYSIS, REPORTING AND STORAGE... 7 LOWER TOTAL COST
Using AppMetrics to Handle Hung Components and Applications
Using AppMetrics to Handle Hung Components and Applications AppMetrics has the ability to detect hung COM+ components and applications, providing a means of alerting staff to situations where critical
Fight the Noise with SIEM
Fight the Noise with SIEM An Incident Response System Classified: Public An Indiana Bankers Association Preferred Service Provider! elmdemo.infotex.com Managed Security Services by infotex! Page 2 Incident
How To Protect A Network From Attack From A Hacker (Hbss)
Leveraging Network Vulnerability Assessment with Incident Response Processes and Procedures DAVID COLE, DIRECTOR IS AUDITS, U.S. HOUSE OF REPRESENTATIVES Assessment Planning Assessment Execution Assessment
Intrusion Detection System
Intrusion Detection System Amir Hossein Payberah payberah@yahoo.com 1 Contents Intrusion Detection Systems Tripwire Snort 2 IDS (Definition) Intrusion Detection is the process of monitoring the events
URL: http://crosswire.org/~jmarsden/talks/hardening-ubuntu/hardening-ubuntu.html
Hardening Ubuntu Date: 12 Mar 2011 Author: Jonathan Marsden jmarsden@fastmail.fm URL: http://crosswire.org/~jmarsden/talks/hardening-ubuntu/hardening-ubuntu.html Contents Introduction The BASICS (the bare
White Paper Integrating The CorreLog Security Correlation Server with BMC Software
orrelogtm White Paper Integrating The CorreLog Security Correlation Server with BMC Software This white paper describes how the CorreLog Security Correlation Server easily integrates with BMC Performance
Monitor Solution Best Practice v3.2 part of Symantec Server Management Suite
Summary When implementing Monitoring and Alerting part of Server Management suite. The following items are areas that should be reviewed. It is important to start to monitor what you need and add/build
The Bro Network Intrusion Detection System
The Bro Network Intrusion Detection System Robin Sommer International Computer Science Institute, & Lawrence Berkeley National Laboratory robin@icsi.berkeley.edu http://www.icir.org System Philosophy Bro
Passive Logging. Intrusion Detection System (IDS): Software that automates this process
Passive Logging Intrusion Detection: Monitor events, analyze for signs of incidents Look for violations or imminent violations of security policies accepted use policies standard security practices Intrusion
Network Management Deployment Guide
Smart Business Architecture Borderless Networks for Midsized organizations Network Management Deployment Guide Revision: H1CY10 Cisco Smart Business Architecture Borderless Networks for Midsized organizations
Workflow Templates Library
Workflow s Library Table of Contents Intro... 2 Active Directory... 3 Application... 5 Cisco... 7 Database... 8 Excel Automation... 9 Files and Folders... 10 FTP Tasks... 13 Incident Management... 14 Security
ITSM Service Monitoring Using Open Source Tools
ITSM Service Monitoring Using Open Source Tools Presented to University of Utah I.T. Managers Monthly Meeting August 3, 2011 ITSM and Service Monitoring INFORMATION TECHNOLOGY SERVICE MANAGEMENT IT Service
Robust & Reliable DNS Operations Logging & Monitoring
Robust & Reliable DNS Operations Logging & Monitoring These materials are licensed under the Creative Commons Attribution-Noncommercial 3.0 Unported license (http://creativecommons.org/licenses/by-nc/3.0/)
Monitoring Windows Servers and Applications with GroundWork Monitor Enterprise 6.7. Product Application Guide October 8, 2012
Monitoring Windows Servers and Applications with GroundWork Monitor Enterprise 6.7 Product Application Guide October 8, 2012 Table of Contents Introduction...3 Definitions and Abbreviations...3 GroundWork
Whitepaper. Business Service monitoring approach
Whitepaper on Business Service monitoring approach - Harish Jadhav Page 1 of 15 Copyright Copyright 2013 Tecknodreams Software Consulting Pvt. Ltd. All Rights Reserved. Restricted Rights Legend This document
NetCrunch 6. AdRem. Network Monitoring Server. Document. Monitor. Manage
AdRem NetCrunch 6 Network Monitoring Server With NetCrunch, you always know exactly what is happening with your critical applications, servers, and devices. Document Explore physical and logical network
Network Management & Monitoring Overview
Network Management & Monitoring Overview Unix & Network Management June 16-18 Papeete, French Polynesia Hervey Allen, Phil Regnauld Introduction This is a big topic... We'll try to respond to what you
Honeywell Industrial Cyber Security Overview and Managed Industrial Cyber Security Services Honeywell Process Solutions (HPS) June 4, 2014
Industrial Cyber Security Overview and Managed Industrial Cyber Security Services Process Solutions (HPS) June 4, Industrial Cyber Security Industrial Cyber Security is the leading provider of cyber security
A FAULT MANAGEMENT WHITEPAPER
ManageEngine OpManager A FAULT MANAGEMENT WHITEPAPER Fault Management Perception The common perception of fault management is identifying all the events. This, however, is not true. There is more to it
RAVEN, Network Security and Health for the Enterprise
RAVEN, Network Security and Health for the Enterprise The Promia RAVEN is a hardened Security Information and Event Management (SIEM) solution further providing network health, and interactive visualizations
ITIL A guide to Event Management
ITIL A guide to Event Management An event can be defined as any detectable or discernable occurrence that has significance for the management of the IT Infrastructure of the delivery of IT service and
Environment. Attacks against physical integrity that can modify or destroy the information, Unauthorized use of information.
Cyber Security. Environment, Solutions and Case study. Special Telecommunications Service David Gabriel, Buciu Adrian Contact: gdavid13@sts.ro adibuciu@sts.ro Environment Network/services can be damaged
Bernd Ahlers Michael Friedrich. Log Monitoring Simplified Get the best out of Graylog2 & Icinga 2
Bernd Ahlers Michael Friedrich Log Monitoring Simplified Get the best out of Graylog2 & Icinga 2 BEFORE WE START Agenda AGENDA Introduction Tools Log History Logs & Monitoring Demo The Future Resources
MICROSOFT EXCHANGE 2010 4 MAIN CHALLENGES IT MANAGER HAVE TO FACE GSX SOLUTIONS
White paper September 2011 GSX SOLUTIONS MICROSOFT EXCHANGE 2010 4 MAIN CHALLENGES IT MANAGER HAVE TO FACE Project: Exchange 2010 Monitoring an reporting Targeted Product: GSX Monitor [ A d r e s s e d
EventSentry Overview. Part I About This Guide 1. Part II Overview 2. Part III Installation & Deployment 4. Part IV Monitoring Architecture 13
Contents I Part I About This Guide 1 Part II Overview 2 Part III Installation & Deployment 4 1 Installation... with Setup 5 2 Management... Console 6 3 Configuration... 7 4 Remote... Update 10 Part IV
Best Practices for Log File Management (Compliance, Security, Troubleshooting)
Log Management: Best Practices for Security and Compliance The Essentials Series Best Practices for Log File Management (Compliance, Security, Troubleshooting) sponsored by Introduction to Realtime Publishers
BUILDING A SECURITY OPERATION CENTER (SOC) ACI-BIT Vancouver, BC. Los Angeles World Airports
BUILDING A SECURITY OPERATION CENTER (SOC) ACI-BIT Vancouver, BC. Los Angeles World Airports Building a Security Operation Center Agenda: Auditing Your Network Environment Selecting Effective Security
Network Management & Monitoring Overview
Network Management & Monitoring Overview Advanced cctld Workshop September, 2008, Holland What is network management? System & Service monitoring Reachability, availability Resource measurement/monitoring
Intrusion Detection Systems. Darren R. Davis Student Computing Labs
Intrusion Detection Systems Darren R. Davis Student Computing Labs Overview Intrusion Detection What is it? Why do I need it? How do I do it? Intrusion Detection Software Network based Host based Intrusion
Network and Server Statistics Using Cacti
Network Management & Monitoring Network and Server Statistics Using Cacti These materials are licensed under the Creative Commons Attribution-Noncommercial 3.0 Unported license (http://creativecommons.org/licenses/by-nc/3.0/)
Network Monitoring. Lance Rea. Davis & Gilbert LLP lrea@dglaw.com
Network Monitoring Presented by: Lance Rea CIO Davis & Gilbert LLP lrea@dglaw.com A Little Background info D&G 100+ Attorney firm in Midtown Manhattan Full Service firm specializing in Media and Advertising
Plan THE BEGINNER S GUIDE TO. Customize. Monitor NAGIOS XI. Alert PRESENTED BY
THE BEGINNER S GUIDE TO NAGIOS XI Monitor Alert Plan Customize PRESENTED BY THE BEGINNER S GUIDE TO NAGIOS XI // 2 MONITOR YOUR ENTIRE IT INFRASTRUCTURE WITH NAGIOS XI Nagios XI is the most powerful IT
RSA Authentication Manager
McAfee Enterprise Security Manager Data Source Configuration Guide Data Source: RSA Authentication Manager February 26, 2015 RSA Authentication Manager Page 1 of 9 Important Note: The information contained
Navigate Your Way to NERC Compliance
Navigate Your Way to NERC Compliance NERC, the North American Electric Reliability Corporation, is tasked with ensuring the reliability and safety of the bulk power system in North America. As of 2010,
How To Manage Sourcefire From A Command Console
Sourcefire TM Sourcefire Capabilities Store up to 100,000,000 security & host events, including packet data Centralized policy & sensor management Centralized audit logging of configuration & security
Introduction to Network Monitoring and Management
Introduction to Network Monitoring and Management Jonathan Brewer Network Startup Resource Center jon@nsrc.org These materials are licensed under the Creative Commons Attribution-NonCommercial 4.0 International
disect Systems Logging Snort alerts to Syslog and Splunk PRAVEEN DARSHANAM
disect Systems Logging Snort alerts to Syslog and Splunk PRAVEEN DARSHANAM INTRODUCTION Snort is an open source network Intrusion Detection and Prevention Systems (IDS/IPS) developed by Martin Roesch capable
AfNOG 2010 Network Monitoring and Management Tutorial. Introduction to Networking Monitoring and Management
AfNOG 2010 Network Monitoring and Management Tutorial Introduction to Networking Monitoring and Management Part I: Overview Core concepts presented: What is network monitoring What is network management
NETWORK SECURITY HACKS *
NETWORK SECURITY HACKS * Andrew %pckhart Ji O'REILLY* Beijing Cambridge Farnham Koln Paris Sebastopol Taipei Tokyo Contents Credits Preface ix xi Chapter 1. Unix Host Security 1 1. Secure Mount Points
Centerity Monitor Standard V3.8.4 USER GUIDE VERSION 9.15
Centerity Monitor Standard V3.8.4 USER GUIDE VERSION 9.15 2 Contents About This Guide... 4 End-User License Agreement (EULA)... 4 Before You Begin... 4 Audience... 4 Related Documentation... 4 Technical
Yahoo! Communities Architectures Ian Flint
Yahoo! Communities Architectures Ian Flint November 9, 2007 1 Agenda What makes Yahoo! Yahoo!? Hardware Infrastructure Software Infrastructure Operational Infrastructure Process Examples 2 What makes Yahoo!
Helping You Piece IT Together. Best Practices for Log Monitoring
Helping You Piece IT Together Best Practices for Log Monitoring http://www.bhconsulting.ie info@bhconsulting.ie Introduction What are logs? Why are logs important? The Challenges Recommended Best Practises
Network monitoring systems & tools
Network monitoring systems & tools Network & Service Monitoring tools Nagios server and service monitor Can monitor pretty much anything HTTP, SMTP, DNS, Disk space, CPU usage,... Easy to write new plugins
Audit and IDS Steve Grubb, Red Hat
Audit and IDS Steve Grubb, Red Hat Linux Audit and Intrusion Detection Systems Review audit system Learn a little about some threats Overview of IDMEF Introduction to prelude Audit System's Uses Watch
Topics. CIT 470: Advanced Network and System Administration. Why Monitoring? Why Monitoring? Historical Monitoring Processes. Historical Monitoring
Topics CIT 470: Advanced Network and System Administration System Monitoring 1. Why monitoring? 2. Historical monitoring 3. Real-time monitoring 4. Monitoring techniques 5. Monit 6. Web-based monitoring
New features and highlights
New features and highlights April 2012 Würth Phoenix Group 2012 System Monitoring NetEye availability monitoring by the SMS Watchdog With the newly introduced SMS Watchdog the status of NetEye is constantly
Uptime Cloud Monitor Case Study. FeedMagnet
Uptime Cloud Monitor Case Study FeedMagnet FeedMagnet uses IDERA s Uptime Cloud Monitor s server monitoring to troubleshoot issues and diagnose poor performance with the combination of real-time and historical
Vendor Audit Questionnaire
Vendor Audit Questionnaire The following questionnaire should be completed as thoroughly as possible. When information cannot be provided it should be noted why it cannot be provided. Information may be
IT Security and OT Security. Understanding the Challenges
IT Security and OT Security Understanding the Challenges Security Maturity Evolution in Industrial Control 1950s 5/4/2012 # 2 Technology Sophistication Security Maturity Evolution in Industrial Control
2B0-023 ES Advanced Dragon IDS
ES Advanced Dragon IDS Q&A DEMO Version Copyright (c) 2007 Chinatag LLC. All rights reserved. Important Note Please Read Carefully For demonstration purpose only, this free version Chinatag study guide
XpoLog Competitive Comparison Sheet
XpoLog Competitive Comparison Sheet New frontier in big log data analysis and application intelligence Technical white paper May 2015 XpoLog, a data analysis and management platform for applications' IT
Network Monitoring and Management Introduction to Networking Monitoring and Management
Network Monitoring and Management Introduction to Networking Monitoring and Management These materials are licensed under the Creative Commons Attribution-Noncommercial 3.0 Unported license (http://creativecommons.org/licenses/by-nc/3.0/)
SOURCEFIRE RNA (REAL-TIME NETWORK AWARENESS)
SOURCEFIRE RNA (REAL-TIME NETWORK AWARENESS) DEALING WITH DYNAMIC THREATS INTRODUCTION The Maginot Line is considered to be one of the greatest failures of military history. It is a line of fortifications,
BEGINNER S GUIDE to. Open Source Intrusion Detection Tools. www.alienvault.com
BEGINNER S GUIDE to Open Source Intrusion Detection Tools www.alienvault.com IDS Basics If you aren t already running network IDS, you should be. There are two types of Network IDS: Signature Detection
Network Monitoring and Management Introduction to Networking Monitoring and Management
Network Monitoring and Management Introduction to Networking Monitoring and Management These materials are licensed under the Creative Commons Attribution-Noncommercial 3.0 Unported license (http://creativecommons.org/licenses/by-nc/3.0/)
Rule 4-004M Payment Card Industry (PCI) Monitoring, Logging and Audit (proposed)
Version: Modified By: Date: Approved By: Date: 1.0 Michael Hawkins October 29, 2013 Dan Bowden November 2013 Rule 4-004M Payment Card Industry (PCI) Monitoring, Logging and Audit (proposed) 01.1 Purpose
MALAYSIAN PUBLIC SECTOR OPEN SOURCE SOFTWARE (OSS) PROGRAMME. COMPARISON REPORT ON NETWORK MONITORING SYSTEMS (Nagios and Zabbix)
MALAYSIAN PUBLIC SECTOR OPEN SOURCE SOFTWARE (OSS) PROGRAMME COMPARISON REPORT ON NETWORK MONITORING SYSTEMS (Nagios and Zabbix) JANUARY 2010 Phase II -Network Monitoring System- Copyright The government
IT Service Continuity Management PinkVERIFY
-11-G-001 General Criteria Does the tool use ITIL 2011 Edition process terms and align to ITIL 2011 Edition workflows and process integrations? -11-G-002 Does the tool have security controls in place to
CS 356 Lecture 17 and 18 Intrusion Detection. Spring 2013
CS 356 Lecture 17 and 18 Intrusion Detection Spring 2013 Review Chapter 1: Basic Concepts and Terminology Chapter 2: Basic Cryptographic Tools Chapter 3 User Authentication Chapter 4 Access Control Lists
Top 3 Issues and Questions (in Network Monitoring!) Developing a Network Monitoring Architecture! infotex. Dan Hadaway CRISC Managing Partner, infotex
Top Three Issues and Questions in Network Monitoring Dan Hadaway and Sean Waugh of Auditors now know why we can t monitor event logs, but guess what, they don t care!! So let s open the hood of the managed
LOG INTELLIGENCE FOR SECURITY AND COMPLIANCE
PRODUCT BRIEF uugiven today s environment of sophisticated security threats, big data security intelligence solutions and regulatory compliance demands, the need for a log intelligence solution has become
Centerity Monitor Standard V3.8 USER GUIDE VERSION 7.14
Centerity Monitor Standard V3.8 USER GUIDE VERSION 7.14 2 Contents About This Guide... 4 End-User License Agreement (EULA)... 4 Before You Begin... 4 Audience... 4 Related Documentation... 4 Chapter 1: