Net Report's Methodology & Architecture
Net Report's Methodology
Net Report's unique Methodology unifies your people, Devices and processes. We help you dynamically improve your security posture. Our proven Methodology prepares your business to defend against threats, rapidly identify, be alerted to and quickly analyze threats to determine vulnerability and risk and decisively respond to mitigate threats and eliminate risk 24/7. Net Report integrates with Network and Security devices including Firewalls, VPNS, Proxies, IDS, Web Server, Anti-Virus, please click here for the list. Net Report Configuration Wizard ensures an easy connection to most devices out-of-the box and most importantly the data from these devices can be administered centrally via Net Report.
Net Report's Architecture
Net Report automates and centralizes the following critical processes 24/7:
Step 1: Log Collection
-
From Heterogeneous Devices
- We can note that Net Report supports the following major device categories currently on the market: Firewall, Proxy, Microsoft WMI (Windows Management Instrumentation), IPS (Intrusion Prevention System), IDS (Intrusion Detection System), E-mail, Authentication, Anti-Virus, Web.
-
With a Broad Range of Log Formats
- Net Report collects disparate event data from all your heterogeneous devices. Event data is collected in the following formats: Check Point LEA, Microsoft WMI (Windows Management Instrumentation); Syslog, Radius and Flat File. Net Report collects you log data in real-time 24/7.
Step 2: Log Archival
The data collected is then stored via the Net Report Log Archive module to ensure its integrity over the long-term. The data includes a digest it is compressed and encrypted before being archived in the Log Vault.
Step 3: Log Filtering & Data Enhancement
The Net Report ULA (Universal Log Analyser) Filter Engine standardizes, filters and analyses the event data. Net Report further enhances the data. Net Report’s Filter Engine guarantees flexibility and an ease of use while preserving its ability to be a powerful and precise tool for analysis. Each Net Report Filter Engine enables you to insert several tens of millions of events in the database per day.
Step 4: Database Management
Net Report aggregates, consolidates and purges your security event data in the netreport database thanks to its automated Database management tasks. Scheduled aggregation and purge features enable Net Report to reduce the size of your database volume by 25. Intuitive drill-down to the information you need.
Step 5: Dashboard Creation
Dashboard generation is automated and can easily be scheduled. Net Reports dashboards enable real-time advanced integrated visual charting. The powerful drill-down features enable the user to go directly to the detailed information they need. The navigation features enable users to go to the sections they need and perform historical trending by navigating from day-to-day or month-to-month in a click.
Step 6: Customizing Reports
Thanks to the Net Report Tool Kit you can create Ad Hoc reports focusing on your company’s look and feel and pinpointed on the alternative view you want to study.
Step 7: Correlation and Alerting
Net Reports correlation features enable you to rapidly detect violations and identify vulnerabilities.
Net Report sends trusted alerts to your IT Staff in real-time via e-mail, pager and SNMP traps to help them quickly isolate and resolve potential threats and automate protection.
|
|
