Close
 |
NS One Bâtiment Oslo - Les Fjords 19, avenue de Norvège - ZA Courtaboeuf 1 91140 Villebon sur Yvette - FRANCE Tél. : +33 (0)1 69 59 12 00 Fax : +33 (0)1 69 59 12 05 Contact form > |
Today more than ever, the multiplication of security equipments, the increase of data exchanges volume and the new regulations on management of the data or transactions impose on the companies the installation of traceability means, complementary to the security equipments. The problem being : how to effectively treat the whole of the generated logs?
To facilitate the administration of the logs generated and to determine the degree of confi dence and the reliability of the security policy, it is essential to centralize the information collected in a single solution.
The LOG One solution
- Customizable approach
- Analysis in real time
- Evolutives and
automatic reports
- Modular architecture
- Powerful data base
LOG One is a software solution for the centralization, analysis and correlation of security equipments, network and servers logs. It simplifi es the work of administrators by centralizing the events coming from the various equipments or applications.
The collected events are correlated in real time to produce relevant and recorded alarms in parallel to a later analysis. An expert system permanently studies the history of the events collected to supplement the analysis in real time with reports.
The solution covers the complete methodological cycle for the management of incidents: prevent, detect, confi ne, inquire, correct and document.
Informations collect
The logs are collected by non-intrusive remote and local agents, installed in dedicated boxes next to the security equipment or directly on servers.
They are then transferred to a universal collector of events which repatriates them under the standard formats (LEA, File, OCBC, Syslog,...). Nonintrusive, it adapts to each equipment and does not require any update nor particular confi guration.
The solution supports daily volumes of collection of several Tera bytes and data bases of several hundreds of Giga bytes in order to preserve an on line history of the security logs over several months.
Gathering, filtering, correlation and storage
The LOG One solution embarks the module LOG Manager. It ensures:
- The filtering of all the events considered as useless.
- The events correlation of several equipments to allow the release of alarms and skeletal
actions.
- The automatic generation of analysis reports and transmission by e-mail.
- The emission of SNMP alarms for the administration and supervision platforms.
- The realization of thorough analysis (skeletal requests editor).
Development of detailed reports
LOG One assists the security administrators in the defi nition and the generation of reports in order to simplify the implementation of a procedure of regular monitoring and alarms, adapted to the security policy of each company.
The defi nite reports are automatically distributed to the security administrators when alarms are set off by prohibited behaviors or attacks.
LOG One gives sights on the security state, according to the needs of the company.
A very complete page-setting and report presentation tool is also integrated. The reports, generated with format PDF, are sent in the e-mails intended for the users.
The user interface
Organized by trade, it simplifi es navigation and accelerate the access to information. It is thus possible to provide to the applicatif managers,
to the data-processing managers and all the not-experts an information portal brought up to date permanently on the security state.
Monitoring in real time of the total state of collection and logs analysis infrastructure of the logs as of the security increases the level of control of the tool and facilitates the decision-making.
LOG One performs analysis of all data-processing infrastructure’s logs: security equipments (firewall, antivirus, etc), measurement equipments (IDS probes), protected resources (servers, applications, etc) and if needed all the end users desktops available on the network.
Such logs can be admissible in the court of Law. They are therefore saved ‘as is’ for the purpose of providing a proof in case of fraud or more broadly in case of a trial.
LOG One supports several hundreds of Giga octets databases.