XYPRO Technology Corporation Compliance, Auditing and Alerts Sean Bicknell XYPRO XYGATE and XYPRO are registered trademarks of XYPRO Technology Corporation. All other brand or product names, trademarks, or registered trademarks are acknowledged as the property of their respective owners. 1
Agenda • XYPRO Overview • XYGATE Audit Pro – NonStop Audit to the Enterprise • XYGATE Compliance Pro – So you think your compliant, prove it! 2
ABOUT XYPRO • Proven Performers & Business Partners – Founded in 1983 – HP NonStop server security since 1990 • Fast Response Team – 24 x 7 Support service – Quality driven, growing company • HP / XYPRO Relationship – Long-term relationship between XYPRO and HP (Tandem/Compaq) – HP helped publish XYPRO security handbooks – Used to secure HP internal systems (20+ nodes) 3
4
5
XYGATE Security Suite Safeguard Access Audit Compliance Encryption PRO PRO PRO PRO PRO Consolidate audit Simplify & enhance Grant privileges Develop & monitor Protect business data across Safeguard according to security policy data: at rest many nodes environments job function compliance and in transit •Multi-node view •User, alias, globals, •Access control •Multi-node data •Full crypto library •Multi-source object ACL mgmt •Process control collection & view •Multi-platform •CMON logon audits: XYGATE, •Best practice •Dynamic object support Safeguard . . . security control & load analysis •ESDK to crypto- •Single repository •Password quality balancing •Anomaly & enable via APIs for all audit data & updating •Spooler & print exception mgmt •File encryption •Automatic alerts •User authentication job management •System integrity •Static key mgmt checks •Session security Multi-platform NonStop Server Platform Security Encryption XYGATE Software GUI 6
Typical Safeguard Audit Audit Safeguard Safeart Report Audit 7
XYGATE Merged Audit Safeguard – Single Node XYGATE MA Audit Safeguard Report Audit Email Alert Mover EMS/SNMP Message SYSLOG Filter Custom SQL Audit Table GUI Monitor 8
XYGATE Merged Audit Multi-Audit – Single Node Audit XYGATE MA Safeguard Report Audit Email XYGATE Alert Mover Audit EMS/SNMP Message EMS Audit SYSLOG Filter ODBC/MX Custom Audit JDBC/MX SQL Audit Audit Table GUI Monitor BASE24 Audit 9
XYGATE Merged Audit Multi-Audit – Multi-Node RSA HP Log Logic enVision CLW \NODE-C \NODE-B \NODE-A XYGATE MA Audit Safeguard Safeguard Safeguard Report Audit Audit Audit Email Alert XYGATE XYGATE XYGATE Mover Audit Audit Audit EMS/SNMP Message EMS EMS EMS Audit Audit Audit SYSLOG Filter ODBC/MX ODBC/MX ODBC/MX Custom Audit Audit Audit JDBC/MX JDBC/MX JDBC/MX SQL Audit Audit Audit Audit Table GUI Monitor BASE24 BASE24 BASE24 Audit Audit Audit 10
N onStop and CL W Basic architecture From HP NonStop System (S-series, NS-Integrity & NS Blade Systems) HP CLW The CLW comes with XYGATE a Log Adapter that CLW Log Adapter for EMS Merged Audit XYGATE EVEN TS can process NonStop events passed by the SAFEGUARD AUDIT TR AIL XYGATE Merged Audit product from EVENT DATABASE XYPRO XYGATE Component Component EVEN TS from from XYPRO XYPRO Base24 EVEN TS Compliance Audit Reports R eport Engine ODBC/ MX EVEN TS Future product plans, dates, and functionality are subject to change w ithout notice. 11
XSW XSW Security Compliance Wizard Security Compliance Wizard 12
XSW Security Compliance Screen showing collection options; batched or immediate Select entities to collect Select nodes and disks 13
XSW Security Compliance Screen showing policy results Instantly Visible! Green ruler passed! Red ruler failed! 14
XSW Security Compliance Screen showing policy results 15
Access Mapping 16
XSW Security Compliance • HP NonStop Security Handbooks • Alphabetic listing of system processes • Nuts and bolts of securing each object • Hundreds of programs and subsystems • Includes risks and Best Practice recommendations • Guardian and OSS 17
Best Practice Best Practice Report Report 18
XYPRO Technology Corporation XYPRO Europe Tel: +44 (0) 1384 850133 Sean.Bicknell@XYPRO.co.uk WWW.XYPRO.COM 19
Recommend
More recommend
