| The name of the base system (platform): | IBM Proventia Management SiteProtector |
| Developers: | IBM |
| Technology: | Firewall |
The system of centralized operation SiteProtector is issued in the form of a software package and in the form of the SiteProtector Management Appliance SP1001 hardware device with the preset software including the system of protection against the attacks of the management system. It is intended for the solution of the following tasks:
Management of means of protecting. SiteProtector allows to manage all range of the products IBM ISS. In addition, there is an ability to manage information security tools of the third firms (through Third Party Module).
Collecting and display of events in a real mode of time. Each device of the Proventia family or the agent of a system of protection announces the SiteProtector system all detected events. Besides, the systems of protection of the third firms can be connected (through Third Party Module).
Filtering and the analysis of events on the management console. In the SiteProtector system filters of events for reduction of mass of the data displayed on the console are used. Also there is a grouping of resources that as a result allows to draw the attention of the operator of a system only to really critical and serious attacks and vulnerabilities.
There is both a set of the "built-in" filters, and a possibility of creation of the user filters.
The predetermined filters allow to find out the following data quickly:
- Who attacks the selected resources?
- What resources are sources of the attacks?
- What nodes are vulnerable?
- What nodes are attacked?
- What vulnerabilities on the selected resources?
Management of requests (Ticketing system). Using this mechanism process of tracking and response to incidents of security became simpler and clear. In addition to own system of tracking of requests for analysis of incidents, use of separate external systems, such as Remedy is possible.
System of reports generation. SiteProtector includes a set of the preset categories of reports. Reports can be displayed as in graphic, and in text form. Different formats of data view are supported: HTML, CSV, RTF.
