Rostelecom will spend more than 1.36 billion rubles to replace the IP monitoring system from HP with a domestic solution

Rostelecom is ready to invest more than 1.36 billion rubles in the import substitution of an incident detection system in information security (IS). In February 2022, the company announced a tender^[1] for the purchase of domestic software - MaxPatrol SIEM, developed by Positive Technologies. Previously, HP ArcSight software was used for these purposes. [1]

As told TAdviser in the press service of Rostelecom, the purchase was initiated as part of the implementation of the directive of the Ministry of Digital Goods on import substitution, to ensure the security of the internal IT infrastructure and information systems processing personal data. The MaxPatrol SIEM product meets all the requirements of the regulator and is capable of solving operator class problems.

Rostelecom replaces the foreign monitoring system of IP HP ArcSight with the domestic MaxPatrol SIEM. Photo - RBC

Under the terms of the tender, licenses for use ON MaxPatrol SIEM are acquired for creation of subsystems of registration and accounting of events of a system of protection of personal data of the corporate center and all regional divisions of Rostelecom - MRF "Center", MRF "Northwest", MRF "South", MRF "Ural", MRF "Siberia", MRF "Volga" and MRF "Far East".

In total, Rostelecom plans to purchase 191 licenses for various modifications of MaxPatrol Security Information and Event Management (MaxPatrol SIEM), as well as work on the creation of subsystems for recording and recording system events in regional divisions. The system was entered in the Unified Register of Russian programs for electronic computers and databases in October 2021.

Licenses to use the SIEM MaxPatrol are purchased for a year. The contract, in addition to the delivery of the SOFTWARE, includes its support and maintenance. The contract expires on December 31, 2024.

Positive Technologies told TAdviser that the SIEM MaxPatrol system is in maximum demand in the domestic IS market. At the same time, the company does not directly supply its software to customers, but works through partners. The partner who will supply the software to Rostelecom and will serve it will be determined in April 2022.

According to an informed source, HP ArcSight licenses have already expired. At the same time, according to the Kontur.Focus service, in March 2018, two tenders for the supply of SIEM MaxPatrol - for 303.1 billion and 261 billion rubles - were won by DialogNauka. An informed source told TAdviser that the SIEM MaxPatrol system was introduced in separate branches, and now the process of scaling it to all regional Rostelecom structures is taking place.

Notes