1
2
Presentation outline
» IT pain points
» The product
» Testimonials
» Kudos
» Conclusion
3
IT PAIN POINTS
4
IT pain points (1/2)
» Protecting business entails prompt detection of security incidents
» This requires log data analysis – a very tedious process if
performed manually
» Almost 50% of organizations have experienced a security breach
– CSI Computer Crime and Security Survey 2010
» More than 83% of the UK companies experienced a security breach in
2009, with each security incident costing up to £690,000
– Information Security Breaches Survey 2010
5
IT pain points (2/2)
» Meeting regulatory compliance requirements is almost
impossible without an automated log management solution
» Automating IT management processes is a must in order to reduce costs
and maintain business continuity
» Businesses can also suffer from system downtimes and other IT incidents;
it is critical that these are detected and solved quickly to minimize
business loss
» Forensic investigation of IT incidents can be very costly unless event log
data is centralized in a database and proper analysis tools are available
» IT systems usually generate large volumes of log data which cannot be
reviewed in an efficient manner without a log management tool
6
THE PRODUCT
7
Log data analysis and IT management
» Award-winning log data management and analysis solution
» Supports a wide range of log types
» Real-time, check-based monitoring engine enables active monitoring
» Monitors an extended range of hardware products
» Powerful built-in intelligence
» Large number of predefined and easy-to-customize reports
» Unique combination of active monitoring with log data analysis not only
detects IT problems, but also gives insights on their cause
8
Product snapshot (1/4)
GFI EventsManager Management Console
9
Product snapshot (2/4)
GFI EventsManager Dashboard
10
Product snapshot (3/4)
GFI EventsManager Active Monitoring checks
11
Product snapshot (4/4)
GFI EventsManager Quick Launch Console
12
Product benefits (1/2)
» Cut costs on IT staff and increase network uptime and productivity
by automating the IT management process from incident detection to
incident remediation
» Boost security by detecting security incidents and monitoring security
relevant activities, policies, mechanisms and applications
» Listen to your network – assess risk and get insight on how to mitigate it
by knowing what is going on in your network. Proactively detect potential
points of failure before issues occur
» Increase productivity and ensure compliance with company’s policies by
monitoring user activity and the usage of the entire IT environment
(services, applications, endpoints, servers and network)
13
Product benefits (2/2)
» Cover the log management requirements of regulations and standards
(PCI DSS, HIPAA, SOX and more) by collecting, normalizing, analyzing
and consolidating log data
» Provide reliable data sources and powerful analysis for
forensic investigations, in case of litigations or internal/external audits
» Process and integrate results from GFI LanGuard® and
GFI EndPointSecurity™ to get a more compelling picture on the
security status of your network and consolidate your compliance reports
» Excellent pricing!
14
Top features (1/2)
» Fast and cost-effective IT monitoring and management
» Log data collecting, normalization, analysis and consolidation with wide
support for various log types
» Safe storage of log data featuring three consolidation levels
» Check-based active monitoring engine
» Proactive monitoring based on log data
» Unique combination of active monitoring and log data analysis
15
Top features (2/2)
» Works in highly distributed environments
» Excellent log data scanning performance and multiple alerting options
» Excellent scalability with support for centralization of log data
» Built-in processing rules provide for effective log data classification
» Supports all Windows operating systems and their variants starting from
Windows XP
□ Windows XP, Windows Server 2003, Windows Vista,
Windows Server 2008 (R2), Windows 7, Windows 8, Windows Server 2012
16
What’s new in GFI EventsManager 2013? (1/4)
Check-based active monitoring engine powered by GFI
NetworkServerMonitor
» Enables real-time monitoring of the entire IT environment
» Not only detects the problem but gives insight into the cause as
well – all from the same console.
Enhanced console security system
» Helps comply with best practices recommendations that imply access
to data on a “need to know” basis
» Each GFI EventsManager user can be assigned a subset of
computers to manage and the console will only allow usage of the
data coming from those configured computers for that user.
17
What’s new in GFI EventsManager 2013? (2/4)
New parsing schemas
» Enables collection and analysis of XML logs, DHCP logs and log data
coming from certain POS devices
More flexible storage
» The database engine supports multiple EventsManager instances
writing to the same database which now can be remote;
Hashing of log data to prevent tampering with the physical files
holding the logs
Export log data to an SQL Server database
18
What’s new in GFI EventsManager 2013? (3/4)
New licensing model
» The “Active Monitoring” license offers check-based, active monitoring
of servers, workstations and network devices and adds value by
offering log data management and analysis for workstations (Windows
logs and text logs)
» The “Complete” license offers check-base, active monitoring of
servers, workstations and network devices together with complete log
data management and analysis functionality (for servers, workstations
and network devices)
19
What’s new in GFI EventsManager 2013? (4/4)
20
TESTIMONIALS
21
Product testimonials
“We have been using GFI EventsManager for six months now and from a
compliance perspective – particularly with regard to PCI DSS – we are
currently getting closer to compliancy with the help of GFI’s team.
From a technology perspective, we are satisfied with the product.”
– Mark-Oliver Horst, Chief Technical Officer, Quipu Gmbh, Frankfurt, Germany
Click here for more testimonials!
22
Product kudos
» Thousands of customers worldwide use GFI EventsManager
» Validated for the HP Converged Infrastructure
» Numerous product awards, a few listed below:
23
GFI product complements
Best incorporated with GFI’s on-premise network security suite of products:
» GFI LanGuard
for security scanning, vulnerability management and patch management
» GFI EndPointSecurity
for network-wide control of portable storage
media and consumer electronic devices
24
Conclusion (1/2)
» Fast and cost-effective monitoring and management of the entire network
» Invaluable regulatory compliance companion through built-in dedicated
reports, alerts and views
» Increase network uptime and identify network health and security
problems through real-time alerting
» Monitor security-critical activities, policies, mechanisms and applications
» Assess security risks and know how to mitigate it
» Centralize, normalize, consolidate, review and analyze Windows, Syslog,
W3C, plain text, SQL Server and Oracle audit logs and SNMP traps
generated by firewalls, servers, routers, sensors, switches, phone
systems, PCs and more
25
Conclusion (2/2)
» Built-in intelligence to automatically detect, alert and report on
the most important events generated by systems and devices in
the network
» Excellent performance and scalability
» Flexible, drill-down views and dashboards with powerful filtering
capabilities for quick review and analysis of the most important events
» Large number of predefined and easy-to-customize reports
» Extended and fully customizable reporting capabilities
» Works with third-party tools to scan specific logs like SharePoint
» Excellent pricing
26
Corporate overview
» Offices located around the globe: USA (North Carolina, California and
Florida), UK (London and Dundee), Australia, Austria, Romania,
and Malta
» Hundreds of thousands of installations worldwide
» Trusted by thousands of companies around the world
» GFI products are sold by a global network of thousands of partners
All product and company names herein may be trademarks of their respective owners.
27
More info and downloads
» Click here to learn more about the product
» Check out our competitive pricing
» Download your FREE trial of GFI EventsManager
» Email: sales@gfi.com
» Visit: www.gfi.com/eventsmanager