|Security Monitoring|
Centralized Security Monitoring with Logalot
The Logalot architecture brings different messages from numerous security equipment and devices, such as servers, IDS, IPS, SNMP equipment and syslog capable hardware, into a single database framework. Then, it lends users a powerful correlation capability.
Specify an IP address that is causing alarms:
)
Click to enlarge
Review the results to understand what was violated by a specific attack.
)
Click to enlarge
Graph the results with the tool included with Logalot:
)
Click to enlarge
Follow the path of intruders
With Logalot, an event of interest can be followed from IP Source to destination. Then, the event can be correlated against other network traffic and data from other security devices, giving a comprehensive and realistic attack scenario in a single view.
The ability to track where a hacker entered your environment, where they went, what they touched, what was attempted, what was successful and what was not are crucial to the overall security posture.
Network Traffic Monitoring & Diagnostics Tools
Plixer International - Setting Standards in NetFlow & sFlow Analysis© 2002 - 2010 Plixer International, Inc.
