NetIQ Security Manager
Event Manager
-
Click to Enlarge
NetIQ Security Manager presents meaningful and real-time security information that represents the true state of your organization’s security by differentiating real incidents from event noise and false positive alerts, and facilitating a prioritized and tracked response. These capabilities manage the flow of information from across the organization into the central, organized and tracked monitoring and analysis infrastructure provided by NetIQ Security Manager.
The benefits of this capability include:
- Maximizes the value of your security infrastructure by optimizing your defenses and countermeasures through a centralized security operations center that securely collects, correlates, analyzes and responds to events from key assets, security point products and network devices.
- Reduces event noise and false positives using a powerful real-time correlation engine. This feature minimizes irrelevant information, removing the need to sort through the deluge of security events and allowing security teams to see and focus on the real incidents. A correlation wizard enables new correlation rules to be quickly created and take immediate effect.
- Assures that security incidents are not lost or forgotten with an internal incident tracking workflow allows organizations to immediately prioritize incidents and track their status at any time. Response activity information can be added to provide an audit trail of how incidents are handled.
- Ensures that the latest updates are available and provides an easy-to-use, dynamic mechanism to receive update notifications to product functionality and knowledge. It also facilitate painless delivery and installation of those updates, using NetIQ’s AutoSync technology.
