|
HighSecure Monitoring System
Highband’s
HighSecure Security Software monitors your network on 365*24*7 basis for suspicious activities and generates real time alerts for effective action to keep your business running smoothly. The Expert system software also correlates the logs across the appliances and gives trend analysis for proactive security posture. Highband’s Expert System Internet Security provides you with the experts you need to do business on the Internet safely.
Highband works with the client as one of its closed user group and ensures the complete safety of customer’s intellectual property. Highband’s processes and technology implemented at its premises offers complete safety to customer’s data.
|
Technical
Specifications
|
|
Software Specifications
|
Hardware Specifications |
-
Red Hat Linux
7.3
-
Snort 1.9
-
S/Wan VPN
-
Mysql Database
-
Nessus
-
Proprietary tools for secure efficient and reliable transport and passing
-
HighSecure TM system for collection &
analysis
|
-
P III 600 MHz or Higher Processor
-
256 MB sd Ram
-
10/100MB Ethernet interfaces
|
Supported Appliances
|
|
Firewalls
|
:
|
IPChains, IPTables, Checkpoint, Cisco Pix, Net screen etc
|
|
Web
|
:
|
HTTPd, Apache, IIS
|
|
Service
|
:
|
Named, Telnet, NT event log, NNTPd, xidentd, syslogd
|
|
IDS
|
:
|
Snort, Real Secure
|
Logging Specifications
|
|
Log Transfer
|
:
|
Hosts transmit copies of their logs to Hi-secure Appliance on site.Off-site consolidation occurs periodically, times adjusted per site Transmission is via a VPN tunnel
|
|
Processing
|
:
|
Reviewed for violations within 30 minutes.Database Consolidated log analysis performed daily
|
|
Archival &Forensics
|
:
|
Archives are stored at Hisecure NetworkOperations Center (NOC)
|
Click
here
to HiSecure Diagram
Strengths of HiSecure:
- Uses industry standards for log collection from network devices, viz. syslog, OPSEC, SNMP, etc. This allows minimal change to the target network.
- Has a modular architecture (log collectors specific to an application), which allows selective/customized deployment onto the target network, giving an extremely lean sensor.
- Monitors network bandwidth and adapts to the fluctuations to prevent it from being the cause of congestion. In addition it can be customized to specify the time-periods of when network usage is less so as to utilize more bandwidth.
- Instead of being dependent on only IDS for attack detection, it can detect attacks (or other interesting network condition) by combining application level information (web/mail/router/firewall) with raw IP packet information and 3rd party IDS alerts to generate alerts.
- Alert detection criteria is user-defined, so apart from standard set of detection criteria, the system can be customized to a very high degree for the target network.
- Provides all basic network usage information along with statistics of attempted attacks, thwarted attacks, successful attacks and damage reports to enable system administrators quickly pinpoint and repair damage as well as fine-tune the security devices.
- Time-based trend analysis performed at the diagnostic center allows identification of time-based attempts over periods ranging from days to weeks. Such detection can be customized to take advantage of local usage patterns so that any deviation is recorded and reported.
- Persistent storage of log information ensures that events are never missed - even if Internet connectivity becomes unavailable at your site.
Contact Highband for
undertaking monitoring for your organization.
91-22-28864593/28846243 or info@highband.net
|
