OVERLAND PARK, KS--(Marketwire - July 15, 2010) - Secure Passage, the leading provider of firewall and network device management solutions, today announced the integration of FireMon security event knowledge with leading Security Information and Event Management (SIEM) solutions. For the first time, SIEM solutions such as ArcSight's ESM and RSA's enVision will be sent not only critical and timely security events but also full knowledge of firewall configurations.
Although SIEM solutions already receive thousands of events, including events from firewalls, these events are received and evaluated without knowledge of the firewalls' configuration. With a change event, for example, it is impossible for SIEM solutions to know if the change is effective or ineffective, safe or risky, compliant or a violation. Without more knowledge, change events become noise that SIEM solutions ignore.
To understand the implications of changes to the firewalls, it is necessary to understand the behavior of the firewalls. Using FireMon's policy analysis and security framework, it is possible to understand the implications of change and identify changes that represent mistakes, increased risk or compliance violations. Including this policy-aware information in the event enables quicker response to security threats, making the SIEM solution even more valuable as a security event management solution.
"The demand for firewall management has grown significantly in recent years, driven by increased complexity and new compliance requirements. These requirements have also increased demand for the results of firewall management analysis beyond the firewall team, making it strategically important for FireMon to integrate into the enterprise security ecosystem," said Jody Brazil, co-founder and president of Secure Passage. "The Security Information and Event Management solutions on the market today provide a good window into security operations and events in the enterprise. However, SIEM solutions are only as good as the information they are provided. By combining our configuration awareness and analysis capabilities with SIEM solutions' monitoring and reporting capabilities, our customers are able to get a more complete picture of enterprise security operations."
"SIEM solutions have long suffered from a problem of data validity as it relates to the volume of events being reported and the real-time, business-critical decisions that depend on these events. Often these solutions may consider data to be bad when in reality it is good but simply incomplete, thus causing the alerting output to be incomplete. SIEM solutions have done a good job in correlating data, but they just don't have good insight into why certain events are good or bad," said Tom Schmatz, vice president of 24x7 Support and Managed Services, Fishnet Security. "The FireMon solution adds this intelligence, making the SIEM solution more effective and ultimately increasing operational efficiency both in reacting to critical events and in monitoring the enterprise's overall security posture."
About Secure Passage
Secure Passage, a customer-focused company that brings innovative solutions to security management, is the leading provider of firewall policy, risk, and compliance management solutions. FireMon, the company's flagship product, simplifies and automates the analysis of configuration and change management processes to enhance security, optimize performance, and speed compliance reporting. FireMon analyzes changes and performs audits in real time; simplifies policy management; and enforces configuration governance across firewalls, switches, routers, and other network devices. FireMon is the only solution on the market that can be customized to meet the unique audit and compliance reporting requirements for networks of all sizes while enabling IT organizations to do more with less effort. Enterprise-strength deployments of FireMon around the world support more than 35,000 security devices from vendors such as Cisco, Juniper, Check Point, McAfee, and F5. For more information, visit www.securepassage.com.
The Secure Passage logo, FireMon and the FireMon logo are registered trademarks of Secure Passage, LLC. All other products or company names mentioned herein are trademarks or registered trademarks of their respective owners.
Contact Information:
Contact:
Joe Franscella
Trainer Communications
925-271-8213