021

IT Security & Compliance Software

Fully featured, yet easy to use, our security monitoring and change detection software is particularly effective in managing your IT security and compliance requirements such as PCI DSS or ISO 27000. By combining Device Hardening, Change & Configuration Management, File Integrity Monitoring, Device Policy Management and SIEM in one integrated solution, we make it straightforward, cost effective and affordable for organizations of any size to ensure their IT systems remain healthy, secure and compliant at all times.

Let us show you how straightforward it can be to secure your IT infrastructure – request a demo or download the trial – no obligations and no pushy sales calls, so give it a try and see how quick and easily you can improve system integrity, security and compliance.

Change Tracker

Change Tracker Enterprise provides continuous protection against known and emerging cyber security threats in an easy to use solution. Unlike traditional scanning solutions, Change Tracker Enterprise uses automated File Integrity Monitoring agents to provide continuous, real-time detection of vulnerabilities, reporting who made the change.

And, if the unthinkable does happen, immediate notification is provided when malware is introduced to your systems.

Operating at a forensic level within the IT infrastructure, Change Tracker works across all popular platforms

Request a demo or Download the trial

Log Tracker

Log Tracker Enterprise™ is a complete Security Information & Event Management (SIEM) solution.

Containing out-of-the-box correlation and pattern matching technology, Log Tracker provides a comprehensive and secure solution to any compliance mandate and a vital weapon in the fight against cyber-attacks. Our Log Track self learns the normal and healthy activity within your IT infrastructure enabling better and quicker identification of unusual and potentially harmful activity on a continuous basis. Integration with Our Change enhances this log management solution providing further context to each event as it relates to your secure and compliant state.

Request a demo or Download the trial

Please feel free to contact us to schedule meeting with you and evaluate your requirements.

If you don’t understand what data you have, how can you know what to do with it? Most information has a certain amount of value – but how much is it really worth to you, your customers or partners? Data classification can help you make sense of your Big Data, without busting your budget.

Data classification empowers user communities who create and handle data to assign value to it, in a language they understand, so that informed decisions can be taken about how it is managed, protected and shared. These values are then stored as visual & metadata labels (protective markings) on messages and documents, and can range from as simple as ‘Confidential’ labels to complex national security driven data classifications.

Putting data classification at the heart of your business allows you to reduce the business risk of valued and sensitive information ending up in the wrong hands, whilst increasing efficiency, enhancing decision making and reducing archiving and other administrative costs throughout the organization.

Data Classification Benefits

Our data classification solutions can benefit organizations by:

• Increasing user and organizational awareness of the value & sensitivity of data
• Empowering users to take ownership & control of data
• Educating users on, and supports adherence to, corporate governance & data security policies
• Helping organizations comply with industry compliance & regulations
• Streamlining business processes – increasing operational efficiency & effectiveness
• Reducing cost of management, archiving & storage of data
• Preventing internal and external data leakage – reducing reputational & business risk

We provide a full suite of data classification products, allowing all types of organizations to manage their data across many different applications;

• Email Classifier – for Microsoft Outlook
• OWA Classifier – for Microsoft Outlook Web App
• Notes Classifier – for Lotus Notes® Messaging
• Office Classifier – for Microsoft Office Applications
• File Classifier – for Microsoft Windows Explorer
• Power Classifier – Metadata Marking for Mass Labelling of Files and Documents
• SharePoint Classifier – for Microsoft SharePoint
• Mobile Filter – Data Loss Prevention for Mobile Email
• CAD Classifier – Protect Design Documents And CAD Applications

Please contact us to know more about the solutions.

The FireEye Threat Prevention Platform combats today’s advanced cyber-attacks. The FireEye platform is designed from the ground up to stop advanced malware used by cybercriminals and advanced persistent threat (APT) actors. Each FireEye platform features the patented Multi-Vector Virtual Execution (MVX) engine that provides state-of-the-art, signature-less analysis along with proprietary virtual machines within its core to identify and block cyber-attacks that may leverage one or more threat vectors to infect a client (e.g., targeted emails with embedded URLs or malicious documents).

The FireEye platform supplements traditional security defenses, such as traditional and next-generation firewalls, IPS, AV, and gateways, which can’t stop advanced malware, thus leaving significant security holes in the majority of corporate networks.

FireEye Platform Supplements Traditional Security Defenses

The FireEye product portfolio is comprised of the FireEye NX series, FireEye EX series, FireEye FX series, FireEye AX series, and the FireEye CM series. Each FireEye platform can connect directly, or via a FireEye CM platform, into the FireEye Dynamic Threat Intelligence (DTI) cloud, which offers global threat intelligence sharing to stop advanced persistent threats and zero-day attacks.

The FireEye NX is designed to identify and block attacks delivered via the Web such as drive-by downloads. The FireEye EX protects against attacks delivered via emails such as malicious attachments. The FireEye FX extends the portfolio with detection and blocking of malware discovered in content, which can be obtained via the Web, email, or out-of-band methods. The FireEye AX is primarily used for deeper, hands-on analysis and investigation of today’s advanced cyber attacks. It builds a 360-degree, stage-by-stage analysis of an advanced attack, from system exploitation to data exfiltration, in order to most effectively stop would be APT attackers.

The FireEye CM simplifies centralized management of all FireEye platforms enabling the aggregation and correlation of events by clearly identifying blended attacks. By correlating the multi-vector dynamic threat intelligence for a particular enterprise, organizations can block attacks, respond to validated infected systems, and automatically share the indicators of compromise throughout the entire FireEye deployment and partner ecosystem technologies.

The FireEye DTI cloud efficiently shares auto-generated threat intelligence, such as covert callback channels, as well as new threat findings from FireEye Labs. This technology uses the information from a confirmed attack observed locally, to generate dynamic and anonymized threat intelligence of the attack and distributes it through the cloud to other FireEye platforms. Unlike reputation and risk-based threat intelligence networks, which make assumptions about potentially risky code and broadcast signatures that may either falsely block or falsely allow traffic, FireEye confirms malicious activity.

Dynamic Threat Intelligence Sharing

This entire product portfolio fits seamlessly within an enterprise or a small to medium-sized customer premise. The figure below shows a high-level simplified deployment topology. In this topology the FireEye NX is configured to sit at the perimeter to protect the customer’s network assets. The FireEye EX is placed in the organization’s public network, i.e., DMZ, where the email servers most often reside. The FireEye FX is placed within the data center along with other internal application and file servers and the FireEye CM is also placed within this private domain. The FireEye AX is placed within the forensics department in the data center ideally isolated from the rest of the enterprise network for safe testing of suspected malware samples. In cases where a FireEye CM is deployed, it also acts as the primary channel of communication with the FireEye DTI cloud. Where a FireEye CM is not deployed, each FireEye platform has the ability to communicate with the FireEye DTI cloud.

FireEye Deployment Topology Example

The FireEye Threat Prevention Platform is used by leading enterprises, government agencies, and higher-education organizations around the world to stop today’s advanced cyber-attacks that breach traditional defenses, extract proprietary information, and damage corporate resources.

Please feel free to contact us to know more…

Why Organizations Invest in Managed File Transfer

IT professionals tell us all the time: File transfer is becoming increasingly difficult. It’s now painfully clear to most IT departments that the status quo of file transfer is no longer acceptable. When you’re looking at file transfer solutions, here are some challenges organizations face and the questions you should be asking yourself:

	Complex Manual Systems When organizations use multiple systems and custom scripts to manage file transfer, they needlessly increase complexity for employees, customers and partners. How chaotic is your environment?
	Lack of Visibility & Control Due to the importance of security and compliance, it’s critical that companies have complete visibility and control over their file transfer process. Do you have the visibility you need into file transfer?
	Employees Circumventing IT-sanctioned File Transfer Processes Security is critical when it comes to file transfers. Unfortunately, because the systems are often difficult to use, employees will use their own solutions – putting the company (and its data) at risk. How compliant are your file transfers?
	Need to Ensure Security Data and file security requires more than just securing infrastructure. You need the right tools to respond to security and compliance incidents. How secure are your systems?
	Insufficient Resources Companies of all sizes and industries are quickly realizing their file transfer requirements are growing well beyond the growth of their IT-teams. How well will your systems scale with your business?

Sound familiar? There was a time when simple FTP was sufficient, but today’s IT departments require a much broader set of capabilities and much easier setup and management capabilities.

What Is Managed File Transfer?

As the latest evolution of file transfer technology, Managed File Transfer (MFT) enables the reliable transfer of files between business parties using secure protocols and easy-to-understand models of exchange. In layman’s terms, it means you will always know where your files are with predictable, secure delivery and extensive reporting.

The core Managed File Transfer capabilities of connectivity, automation, reporting and administration are built on a foundation of secure file
transfer. Because of this, MFT reduces the need for IT hands-on involvement and allows for user self-service as needed. Unlike traditional file transfer options, MFT incorporates much higher levels of security, scalability, integration, reporting and other features.

The result is that IT departments can deliver a more sophisticated, controlled file-transfer solution without slipping into the custom-code abyss. In short, an MFT system brings order, predictability, and security to file movement – improving business performance and reducing risk.

Our Secure Managed File Transfer products:

1. MOVEit System
2. WSFTP Server
3. WSFTP Professional
4. Messageway

Please contact us to know more about the solution.

Web applications lie at the core of your business. Theyunderpin all services across the enterprise, from Financeto Sales and Marketing, Purchases to R&D and HumanResources.As they have now also become a primary target for hackers,it is crucial to keep Web applications from being jeopardized.Application downtime can severely impact your image,disrupt user access to internal services and adversely affectyour revenue.

Protecting your Web applications and ensuring continuityof service at all times have consequently become majorbusiness imperatives.

UNIFIED WEB SECURITY MANAGEMENT

• Web Services / XML Firewall and a Web Application Firewall and vulnerability scanner on the same platform.
• Protection against SQL Injection and all web attacks.
• Web Application and Services Protection
• Alert on abnormal Web Application behaviors
• Web Application Access Control and Web Traffic Analysis
• Web Services protection, SOAP/XML, REST, JSON
• Brute Force Attacks Mitigation
• Fast XML Parameter Tampering and XML Intrusion Prevention & full XML firewalling capabilities or XML schema validation.
• Web Application structure discovery and analysis
• Attack and application reporting and traffic replay
• User and authentication discovery and analysis
• Automatic Security Polices Generation and Deployment
• Full Graphical traffic and application security management
• Agent-less Web-SSO and identity bridge
• Integration with Anti-Virus tools
• Quality of Service management and control

Please contact us to know more…

Data Leakage Prevention

Our solutions allow you to protect data and information assets that are critically important to your business. The loss of such data could cause irreparable financial and reputational damage.

DATA PROTECTION AND GOVERNANCE

• Enables to be proactive about data protection.
• Helps to understand data use in your organization.
• Accurate identification of sensitive data.
• Compliance with internal policies & standards, external rules and regulations, industry standards (for example PCI DSS, SOX, GLBA, HIPAA) and customer security requirements.
• Minimization of financial, legal and reputational risks, associated with data loss.
• Corporate culture improvements by employee education regarding security policies implementation.
• Content filtering analysis.
• Pre-defined Data Templates.
• Linguistic and Transliteration analysis.
• Digital Fingerprint Analysis
• Weighted confidentially detection
• Supported Protocols

1. HTTP, HTTPS, FTP over HTTP, FTPS
2. SMTP, ESMTP, POP3, POP3S, IMAP4, IMAP4S
3. Gtalk, MSN Messenger, Skype, others

Please contact us to know more details…

Having trouble staying compliant across your IT deployments? Simplify the difficult task of maintaining, measuring and monitoring security and compliance. Our Security Information & Event Management (SIEM) software is designed to provide automation, relief and strong situational awareness without the complexity of competing solutions.

We have tools to manage your INFORMATION Security & EVENT logs with:

• Log & Event Manager
• Firewall Security Manager

Network Management

Are network performance and bandwidth issues haunting you? Effectively ensure delivery of business critical network services through a unified view of fault, performance, availability, traffic, configurations, and more. Our network performance management software gives you the power to monitor and manage your network infrastructure.

We have tools to manage your network including:

• Network Performance Monitor
• NetFlow Traffic Analyzer
• Bandwidth Analyzer Pack
• Network Configuration Manager
• IP Address Manager
• User Device Tracker
• VoIP & Network Quality Manager
• Engineer’s Toolset
• Network Topology Mapper

System Management

Are you wondering why your app is slow? Prevent this question from coming up again and again by understanding the app, storage, virtualization, and more. Our system management software gives you instant visibility across all resources that can impact application performance.

Manage your system performance with:

• Server & Application Monitor
• Virtualization Manager
• Storage Manager
• Web Performance Monitor
• Web Help Desk
• Patch Manager
• DameWare Remote Support
• DameWare Mini Remote Control
• Kiwi Syslog Server
• Kiwi Log Viewer
• Mobile Admin

Database Management

Need to know why your database is slow? Pinpoint the root cause of performance problems in just four clicks. Our Database Performance Analyzer (formerly Confio Ignite) monitors SQL Server, Oracle, Sybase and DB2 on both physical and VMware servers.

Improve your database performance with:

• Database Performance Analyzer for SQL Server
• Database Performance Analyzer for Oracle
• Database Performance Analyzer for DB2
• Database Performance Analyzer for Sybase

Please contact us to request a demo.

Multi-factor authentication ensures that a user is who they claim to be. The more factors used to determine a person’s identity, the greater the trust of authenticity.

It can be achieved using a combination of the following factors:

• Something You Know – password or PIN
• Something You Have – token or smart card (two-factor authentication)
• Something You Are – biometrics, such as a fingerprint (three-factor authentication)

Because multi-factor authentication security requires multiple means of identification at login, it is widely recognized as the most secure method for authenticating access to data and applications.

Multi-factor authentication serves a vital function within any organization -securing access to corporate networks, protecting the identities of users, and ensuring that a user is who he claims to be.

Evolving business needs around cloud applications and mobile devices, combined with rising threats, and the need to reduce costs, require entirely new considerations for access control.

The Need for Multi-Factor Authentication:

New threats, risks, and vulnerabilities as well as evolving business requirements underscore to the need for a strong authentication approach based on simple service delivery, choice, and future-forward scalability.

Today, organizations are asking:

• Can I address new demands of my business — like cloud and mobile devices?
• How do I map access control methods to business risk and the needs of my users?
• Can I centrally manage, control and administer all my users and endpoints?
• Who controls my user data?
• How can I incorporate additional security layers to help me further fortify against threats?
• And how do I keep it all practical and cost-effective?

More than ever, customers are looking for identity and access management solutions that deliver simplicity, automation, reduced TCO and choice.

Considerations for Selecting a Multi-Factor Authentication Solution

With the plethora of access control offerings available today, it is important for organizations to carefully evaluate the available solutions before making a decision on which solution to implement. When choosing a solution, organizations should take a number of factors into account. The following are some questions to consider:

• Do I want to protect my internal network from unauthorized access?
  If so, consider two-factor authentication (2FA) solutions that enable flexible and comprehensive secure network access, both in the office and remotely if needed.
• Do my users need to connect from remote locations?If so, consider portable solutions that enable secure VPN and web access for remote users, and that enable employees to secure their laptops and data while on the road.
• Do my users need to access many password-protected applications?
  If so, consider solutions that provide single sign-on functionality, either by storing user credentials on the token or by integrating with external single sign-on systems.
• I want my users to digitally sign and encrypt sensitive data or transactions?
  If so, consider smart card-based solutions that provide secure onboard PKI key generation and cryptographic operations, as well as mobility for users.
• How sensitive is my business data?
  The more sensitive the data, the higher the priority on the robustness and security of the solution.
• Do I want to firmly protect data that sits on my users’ PCs and laptops?
  If so, consider token solutions that integrate with PC security products such as boot protection and disk encryption applications that require the use of a token to boot a computer or decrypt protected data.
• Have I or do I want to implement a secure physical access solution?
  If so, consider token solutions that enable integration with physical access systems.

Contact us to evaluate your exact requirement and recommend the best suitable solution.

Encryption is a technique for transforming information on a computer in such a way that it becomes unreadable. So, even if someone is able to gain access to a computer with personal data on it, they likely won’t be able to do anything with the data unless they have complicated, expensive software or the original data key.

The basic function of encryption is essentially to translate normal text into cipher text. Encryption can help ensure that data doesn’t get read by the wrong people, but can also ensure that data isn’t altered in transit, and verify the identity of the sender.

What to encrypt?

• Database Encryption
• Application Encryption
• File and Server encryption
• Drive Encryption
• Email Encryption

The two most common methods of data encryption are:

Software Based Encryption – This type of encryption will typically consist of a standard storage device (Hard Drive, Flash Drive, Digital Media Card, etc.) and a software program to facilitate the encryptions.

Hardware Based Encryption – The only significant difference with Hardware Based Encryption is that all data intensive encryption tasks are done onboard the storage device, rather than relying on system resources to do the work. With this method of encryption, file transfer speeds will remain more stable during the encryption process. Also, most hardware encrypted drives are built with more robust materials and are typically highly resistant to physical damage and are likely to be water resistant.

Contact us to know more and find out exactly what type of encryption will work for your organization to suit your business needs.