Intrusion detection for network devices
1 April 2005 | 0
Tripwire, the intrusion detection system, is now available for network devices, having previously only been available for the Check Point range of security software.
Tripwire for Network Devices allows IT administrators to control, manage and monitor large numbers of client systems on a network. Changes to any of an organisation’s critical devices can be quickly detected and acted upon.
The tool minimises downtime, as network administrators can use it to investigate and isolate changes and restore changed configuration files within minutes of an alert.
Typically, the tool is used to monitor, detect and manage changes in configuration files such those found in routers, switchers, firewalls and Unix file walls.
Privilege levels within the software can be used to enforce user accountability for changes to network devices, and complement existing security policies.
Tripwire for Network Devices runs on either a Solaris or Windows workstation. All configuration files monitored by the software are securely extracted over the network via the software using SSH and SCP. No agent software needs to be installed on the devices that are monitored. The software is compatible with Cisco, Nokia and HP environments.
Espion: +353 (0)1-663 6326