configurability compares with typical Asset Monitoring systems Able to install collectors on remote sites rather than pull all data

Transcription

1 Software Comparison Sheet OpViewTM from Software leverages a completely new database architecture to deliver the most flexible monitoring system available on the market today. This award-winning solution can collect, correlate and report on all data types in a single system. The tables below show how this configurability compares with typical systems Comparison of General Features Key Benefits Definable Queries Enables users to collect any data type from any device on any network. Correlation Rules Can be configured by users to correlate disparate data types. Edit Mode Enables each user to define their own tabs, dashboards, charts and graphs. Incident Management Enables users to track issues with all i nform at i on at t hei r fingertips. Forensic Search Enables users to search through all data at lightning speeds. Report Builder Enables users to create comprehensive and meaningful reports automatically. Key Features Simple to deploy Firewall friendly Agentless Supports any Device Commands & Queries Encrypted data transit Never drops a Log Incredibly scalable Completely customizable Able to install collectors on remote sites rather than pull all data Distributed across the WAN Architecture So;ware Delivery Ability to deliver all components as Software Ability to deliver all components on an Appliance Appliance Ability to deliver all components on a Virtual Appliance Virtual Appliance Web- based User Product is usable via a browser with no need to install client software or Java Applets Interface Agentless No need for additional software installed on end-point devices Collec2on is encrypted between system components in the database is encrypted Complete Encryp2on is Integrity Checked Encryption levels 256bit Central Administration of ALL components can be performed through the Central Server UI Administra2on Ability to create and download encrypted archives of the database Archiving data through the UI can be removed from the system through the UI Removal Resource The Central Server UI provides resource reports for CPU, Memory, System & Disk Space Management No knowledge of No Administrators need no specialist knowledge of SQL, or other database languages SQL required can be backed up using standard backup software with no Standard Back Up database administration Restrict user access by Device Restrict user access by Dashboard and/or Report Role- based Access Restrict user access by Compliance Policy Control (RBAC) Restrict user access by Organizational Unit Restrict user access to UI Themes Please see below for comparisons of more func2onality with other available systems 128bit Informa2on provided by So;ware Ltd, of Castle Court, 6 Cathedral Road, Cardiff, UK CF11 9LJ Tel: info@pervade- so;ware.com

2 Software Comparison Sheet Comparison of Features Regularly Snapshot Hardware & So;ware s Automa2cally Analyse Snapshots Customize Queries Collect Switches Routers Firewalls IDS devices Servers Worksta3ons The system can automa2cally analyse asset snapshots to search for a specific asset feature The system can automa2cally analyse asset snapshots to iden2fy differences between the results from previous snapshots The system allows administrators to define custom asset related queries to run on devices using SSH The system allows administrators to define custom asset related queries to run on devices using WMI The system allows administrators to define custom asset related queries to run on devices using Flat- files via FTP, Windows File Share and HTTP Requests The system allows administrators to define custom asset related queries to run on devices using Custom base Queries (to any MS- SQL, MySQL or Oracle DB) The system is able to collect data on Server Opera2ng System (including Version) The system is able to collect data on Server Opera2ng System Security Updates The system is able to collect data on Server CPU (quan2ty, speed, clockspeed etc ) The system is able to collect data on Server Memory (quan2ty, size, physical, virtual etc ) The system is able to collect data on Server Disks (quan2ty, size, free space, status etc ) The system is able to collect data on Server User Groups The system is able to collect data on Server Users (local and domain, lockout status, password expiry, password length etc ) The system is able to collect data on Server Services (running, stopped, owner etc ) The system is able to collect data on Server Plug & Play Devices (name, type, etc ) The system is able to collect data on Device Firmware Version The system is able to collect data on Device Interfaces (quan2ty, speed etc ) The system is able to collect data on Device DAV/IPS/IDS base Version The system is able to collect data on General Owner Info on a Device (Descrip2on etc ) Report The system can show asset changes by Time (Hour/Day/Month/Quarter/ Year) The system can show asset changes by Device The system can show asset changes by Compliance Policy Informa2on provided by So;ware Ltd, of Castle Court, 6 Cathedral Road, Cardiff, UK CF11 9LJ Tel: info@pervade- so;ware.com

3 Software Comparison Sheet Comparison of SIEM & Log Management Features Collect/Receive Log Universal Parser Store Raw Collect/Receive Log from a range of Device Types Collect/Receive Log from a range of Applica2ons Forensic Search Func2on Report on Log/SIEM related The system can collect/receive log data by SYSLOG The system can collect/receive log data from Windows Event Logs The system can collect/receive log data from Flat- file via FTP, Windows File Sahe and HTTP Requests The system can collect/receive log data by custom database queries (to any MS- SQL, MySQL or Oracle DB) The system can collect/receive log data by SSH Screengrab The system NEVER drops any log events collected/received from any device (even if no parser exists for the log received) Administrators can define, within the Central Server UI, whether to upload and store raw (unparsed/non- normalized) log data, for regulatory and/or compliance dictated reten2on purposes The system can collect/receive log data from Switches made by a range of The system can collect/receive log data from Routers made by a range of The system can collect/receive log data from Firewalls made by a range of The system can collect/receive log data from IDS devices made by a range of The system can collect/receive log data from Servers made by a range of The system can collect/receive log data from Worksta3ons made by a range of The system can collect/receive log data from Microso: Exchange The system can collect/receive log data from Ac3ve Directory The system can collect/receive log data from Microso: ISA Server The system can collect/receive log data from MS- SQL The system can collect/receive log data from Oracle The system can provide a forensic search func2onality The system can provide a forensic search func2onality with a search speed greater than 20,000 records per second The system can provide a forensic search func2onality which can search on ANY log field (even logs with no parsers) The system can provide a forensic search func2onality which can produce graphical reports with forensic search data The system can provide a forensic search func2onality with clickable results to refine filters The system can produce Log/SIEM related reports on Anacks The system can produce Log/SIEM related reports on Denied Events The system can produce Log/SIEM related reports on Allowed Events The system can produce Log/SIEM related reports on Failed Logons The system can produce Log/SIEM related reports on Successful Logons The system can produce Log/SIEM related reports on Privileged Logons The system can produce Log/SIEM related reports on VPN Usage The system can produce Log/SIEM related reports on Web Usage The system can produce Log/SIEM related reports on FTP Usage The system can produce Log/SIEM related reports on Usage The system can produce Log/SIEM related reports on ALL Security Events The system can show events by Time (Hour/Day/Month/Quarter/Year) The system can show events by Severity The system can show events by User The system can show events by Host/Device The system can show events by Port The system can show events by Protocol The system can show events by Source The system can show events by Des2na2on Informa2on provided by So;ware Ltd, of Castle Court, 6 Cathedral Road, Cardiff, UK CF11 9LJ Tel: info@pervade- so;ware.com

4 Software Comparison Sheet Comparison of Configura3on Management Features The system can take regular snapshots of the of Switches The system can take regular snapshots of the of Routers made by a range of Regularly Snapshot The system can take regular snapshots of the of Firewalls The system can take regular snapshots of the of IDS devices The system can take regular snapshots of the of Servers made by a range of The system can take regular snapshots of the of Worksta3ons Automa2cally Analyse Snapshots The system can automa2cally analyse configura2on snapshots to search for a specific configura2on seongs The system can automa2cally analyse configura2on snapshots to iden2fy differences between the results from previous snapshots The system allows administrators to define custom configura2on related queries to run on devices using SSH Customize Queries The system allows administrators to define custom configura2on related queries to run on devices using WMI The system allows administrators to define custom configura2on related queries to run on devices using Flat- files via FTP, Windows File Share and HTTP Requests The system allows administrators to define custom configura2on related queries to run on devices using Custom base Queries (to any MS- SQL, MySQL or Oracle DB) The system is able to recognise changes to Security Seongs on Servers The system is able to recognise changes to General Device of Servers Recognise Changes The system is able to recognise changes to Access Control Lists on Devices The system is able to recognise changes to User Accounts on Devices The system is able to recognise changes to SNMP Communi2es on Devices The system can show configura2on changes by Time (Hour/Day/Month/ Quarter/Year) Report The system can show configura2on changes by Device The system can show configura2on changes by Compliance Policy Informa2on provided by So;ware Ltd, of Castle Court, 6 Cathedral Road, Cardiff, UK CF11 9LJ Tel: info@pervade- so;ware.com

5 Software Comparison Sheet Comparison of Vulnerability Analy3cs Features The system can take regular snapshots of the Vulnerabili2es of Switches The system can take regular snapshots of the Vulnerabili2es of Routers made by a range of Regularly Snapshot Vulnerabili2es The system can take regular snapshots of the Vulnerabili2es of Firewalls The system can take regular snapshots of the Vulnerabili2es of IDS devices The system can take regular snapshots of the Vulnerabili2es of Servers made by a range of The system can take regular snapshots of the Vulnerabili2es of Worksta3ons Automa2cally Analyse Vulnerability Scans The system can automa2cally analyse vulnerability scans to search for a specific vulnerability The system can automa2cally analyse vulnerability scans to iden2fy differences between the results from previous scans The system can pull/receive vulnerability informa2on from Nessus Integrate with Vulnerability Technologies The system can pull/receive vulnerability informa2on from Qualys The system can pull/receive vulnerability informa2on from NMAP The system is able to collect data on current vulnerable ports Collect Vulnerability The system is able to collect data on Severity of a vulnerability The system is able to collect data on CVE ID The system can show vulnerability changes by Time (Hour/Day/Month/ Quarter/Year) Report Vulnerability The system can show vulnerability changes by Device The system can show vulnerability changes by Compliance Policy Informa2on provided by So;ware Ltd, of Castle Court, 6 Cathedral Road, Cardiff, UK CF11 9LJ Tel: info@pervade- so;ware.com

6 Software Comparison Sheet Comparison of Performance Features Collect Performance Customize Performance Queries The system can collect Performance data from Switches made by a wide range of The system can collect Performance data from Routers made by a wide range of The system can collect Performance data from Firewalls made by a wide range of The system can collect Performance data from IDS devices made by a wide range of The system can collect Performance data from Servers made by a wide range of The system can collect Performance data from Worksta3ons made by a wide range of The system can collect Performance data from Hypervisors made by a wide range of (i.e. Vmware, Citrix Xen etc.) Par2al The system allows administrators to define custom performance related queries to run on devices using SNMP The system allows administrators to define custom performance related queries to run on devices using WMI The system allows administrators to define custom performance related queries to run on devices using HTTP Request Timer The system allows administrators to define custom performance related queries to run on devices using Linux/Xen Top No Trending The system is able to show Performance trends over 2me The system produces reports on Server CPU The system produces reports on Server Memory The system produces reports on Server Network U2lisa2on The system produces reports on Server Des2na2ons (Internal & External) The system produces reports on Server Disk Read/Writes The system produces reports on the list of Running Services on a Server Produce Performance Reports The system produces reports on the list of Running Processes on a Server Par2al The system produces reports on Device Processor The system produces reports on Device Memory The system produces reports on Device Interface U2lisa2on (as a percentage) The system produces reports on Inbound/Outbound Traffic on a Device The system produces reports on Inbound/Outbound Errors on a Device The system produces reports on the list of Running So;ware on a Device Comparison of Availability Features TCP Availability The system provides Availability repor2ng based on TCP Port checks ICMP Availability The system provides Availability repor2ng based on ICMP Ping checks Service Availability The system can monitor mul2ple services/applica3ons per device Informa2on provided by So;ware Ltd, of Castle Court, 6 Cathedral Road, Cardiff, UK CF11 9LJ Tel: info@pervade- so;ware.com

7 Software Comparison Sheet Comparison of Compliance Management Features The system allows users to track technical compliance controls including, but not limited to, Log,, and Vulnerability data Track Technical Controls The system can automa2cally audit technical data collected The system provides flexible audit features to audit data based on Equal to, Not Equal to, Greater than, Less than, Contains and Does Not Contain expressions Contains and Does Not Contain audits allow regular expression values in order to perform complex audi2ng The system can audit data from ANY of the data types described above including correla2on rule results The system allows users to enter Anesta2ons of Compliance The system allows senior managers to validate Anesta2ons of Compliance The system allows users to upload compliance related documenta2on Track Logical Controls The system provides version control for all uploaded documenta2on The system provides Risk Weigh2ng for each Control The system allows users to enter remedia2on ac2ons and all associated remedia2on costs The system allows users to enter detailed Compensa2ng Controls The system displays Charts, Tables and/or Diagrams as evidence of anesta2ons The system can be pre- configured with PCI- DSS (ALL Controls) The system can be pre- configured with ISO27001 (ALL Controls) The system can be pre- configured with CESG (ALL Policies) Compliance Policies Integrity Checks Unified Control Framework Administrators can create new Policies through the Central Server UI Administrators can customize pre- configured and new Policies through the Central Server UI The system provides compliance tracking at an Organiza2on level to track mul2ple companies, business units, loca2ons or departments etc against a single Policy The system allows each Organiza2on to track compliance with mul2ple Policies The system quaran2nes documents and alerts administrators if any compliance related documents are changed without authoriza2on Anesta2ons, statements and evidence (Logical Controls) as well as logs, queries and data audi2ng (Technical Controls), once entered into the system are automa2cally anributed to mul2ple Policies Compliance Reports cover Compliance Score Compliance Reports cover Answered vs Unanswered Ques2ons Compliance Repor2ng Compliance Reports cover Validated vs Non- validated Answers Compliance Reports cover Controls with missing Evidence Compliance Reports cover Remedia2on Costs by Policy, Sec2on and/or Organiza2on Compliance Reports cover Risk Weigh2ng by Policy, Sec2on and/or Organiza2on Informa2on provided by So;ware Ltd, of Castle Court, 6 Cathedral Road, Cardiff, UK CF11 9LJ Tel: info@pervade- so;ware.com

8 Software Comparison Sheet Comparison of Configurability & Customiza3on Features Customize Queries Customize Correla2on Rules Customize Charts Customize the Structure of the UI Customize UI Themes Customize Reports Customizable Timescales Administrators can define exactly what Queries are or are not used on each Device Every Query used by the system is customizable All crea2on and customiza2on of Queries is done through the Central Server UI Administrators can correlate and alert on every Property/Field of all data collected/received by the system All correla2on rules and alerts can be created and customized through the Central Server UI The system can send alerts with Source, Des2na2on, Message and Subject fields customizable on a per- alert basis Administrators can create Charts, Diagrams and Tables on every Property/Field of all data collected/received by the system All Charts, Tables and Diagrams can be created and customized through the Central Server UI Administrators can customize every Chart & Report available in the system Charts are available in mul2ple graphical formats including, but not limited to, Area & Line Graphs as well as Pie, Ver2cal Bar, Horizontal Bar and Stacked Bar Charts Table formats are customizable The system can produce diagrams with customizable icons that change colour based on ANY Property/Field of any data collected/received by the system or combina2on, including triggered rules Administrators are able to create Tabs to appear within the Central Server UI, with any name they choose Administrators can create Dashboards within any Tab that contains any Chart, Table and/or Diagram in the system All Tabs and Dashboards can be created & customized through the Central Server UI The order that Charts appear on every Dashboards in every Tab can be customized by every User of the system The system offers mul2ple Themes for the UI that Users can choose from on a per- user bases Administrators can create Reports to export data from the system on a scheduled and/or one- off basis All Reports can be created and customized through the Central Server UI Reports can be scheduled on a daily, weekly and monthly basis Administrators can create Reports that contain any Chart, Table, and/or Diagram in the system Reports are available in a variety of formats including, but not limited to, PDF, HTML and XML Par2al Users can define what 2me period is shown within ALL Charts, Tables and/or Diagrams The above comparisons are by no means defini2ve, so please contact for any others. About Software Software is the UK-based creator of OpViewTM and OpAuditTM. The company is a privately funded and cash positive software vendor with strong roots in the capital of Wales. Thanks to award-winning new architecture, OpViewTM can collect, correlate and display every data type and OpAuditTM can track both technical and manual compliance evidence, all in a single configurable system. The products are used by a wide range of private and public sector clients across all verticals operating in more than 80 countries. Resale partners range from independent consultants to global managed security service providers. Software Castle Court, 6 Cathedral Road, Cardiff, CF11 9LJ, Tel: