GFI EventsManager

Networking & Security



Event Log Monitoring, Management and Archiving

Overview

Event Log Monitoring, Management and Archiving Made Easy

Certified for Windows 7The enormous volume of system events generated daily is of growing importance to organizations whose business is required to record information for forensic purposes and the ever-growing reach of regulatory compliance. Increased threats to business continuity call for an approach that includes real-time monitoring of the network; and you also need the ability to analyze and report event data to address any incidents or security concerns.

Certified for Windows Server 2008This is an overwhelming task. However, GFI EventsManager helps you meet legal and regulatory compliance including SOX, PCI DSS, Code of Connection and HIPAA. This award-winning solution automatically processes and archives logs, collecting the information you need to know about the most important events occurring in your network. It supports a wide range of event types such as W3C, Windows events, Syslog, SQL Server audit logs and SNMP traps generated by devices such as firewalls, routers and sensors as well as by custom devices.

Providing support for devices from the top manufacturers as well as for custom devices, GFI EventsManager monitors an extended range of hardware products, reports on the health and operational status of each one.

GFI EventsManager Helps Your Organization:

  • Information System and Network Security: Detect intruders and security breaches
  • Legal and Regulatory Compliance: An aid to meet regulatory compliance
  • Monitor System Health: Proactively monitor your systems
  • Forensic Investigation: The main reference point when something goes wrong

Why use GFI EventsManager?

  • Centralizes Syslog, W3C, Windows events, SQL Server audits and SNMP Traps generated by firewalls, servers, routers, SQL Server systems, switches, phone systems, PCs and more
  • Increase network uptime and identify problems through real-time alerts and dashboard
  • Get fast and cost-effective monitoring and management of the entire network
  • It offers excellent event scanning performance scalable to over six million events per hour
  • It offers GFI LANguard and GFI EndPointSecurity event data integration
  • It is certified for Windows Server 2008; Supports Windows Vista and Windows 7

Features

Features

VM supportHighly Refined Compliance Reports on Key Security Events of Your Network
Often there is some confusion among users as to which event reports are needed for meeting the requirements of different compliance acts. GFI EventsManager solves this problem by providing you with specific reports for some of the major compliance acts as well as other standard reports, including:

  • Payment Card Industry (PCI DSS) reports
  • Code Of Connection reports
  • HIPAA reports
  • SOX reports
  • Account Usage Reports including users who deleted files report
  • Account Management reports
  • Policy Changes reports
  • Object Access reports
  • Application Management reports
  • Print Server reports
  • Windows Event Log System reports
  • HTTP traffic monitoring report
  • Events Trend and Service Status reports
  • Deleted files report
  • Service Status report

GFI EndPointSecurity Data Integration
GFI EventsManager offers dedicated processing rules, available out-of-the-box, that allow users to automatically categorize, report and alert on the events generated by GFI EndPointSecurity. These events are also present in different reports which are useful both for network monitoring and regulatory compliance purposes.

For those who also have GFI LANguard, GFI EventsManager can also process that product’s results to offer an enhanced compliance reporting experience by providing the necessary compliance information in a single location.

Centralized Event Logging
Event logs are constantly and automatically generated by a user or by an automatic or background process. Logs are often stored in disparate locations. GFI EventsManager stores all captured event logs into one SQL database that may even reside remotely. Through GFI EventsManager you can configure scheduled backups of your event logs.

Analysis of Event Logs including SNMP Traps, Windows Event logs, W3C logs, SQL Server Audit Logs and Syslog
As a network administrator, you have experienced the cryptic and voluminous logs that make log analysis a daunting process. GFI EventsManager is a log processing solution that provides network-wide control and management of Windows event logs, W3C logs, SQL Server audit logs and Syslog events generated by your network sources. GFI EventsManager supports Simple Network Management Protocol, the language spoken by low level devices such as routers, sensors, firewalls, etc. Through SNMP users can monitor a whole range of hardware devices on their infrastructure and gain the ability to report on the health and operational status of each device.

Auto-archive All Events into Files
Due to the relatively large number of events that must be kept for investigation and compliance purposes, it takes no time for the events database to reach its maximum capacity. To alleviate this issue, GFI EventsManager allows administrators to auto-archive all events into files in parallel with processing the events through rules with important events only being saved into the database. Moreover, GFI EventsManager features the rollover backup databases which automatically trigger and manage the backup process.

Powerful Dashboard
The GFI EventsManager dashboard includes a number of filtering-enabled charts to provide administrators with fast and easy access to the data they need as they go about their day. These include the top critical and high importance rules triggered within a certain period of time, the top 10 users who fail to log on or who log on during and outside working hours, service status across network, how many events are stored in the database per log type and a comprehensive graph based on Windows events that shows network connections at application and user level (available for Vista and newer Windows OSs only). The dashboard is highly customizable and can be zoomed individually in separate windows that can be automatically arranged on the desktop to show real time data about the most important events.

One-click Rule and Filter Creation
You can create processing rules and filters for Windows events by simply right-clicking on event details in the Events Browser Tool. New rules are automatically saved into a new rule set called User Rules and will have the least priority by default.

Real-time Alerts, SNMPv2 Traps Alerting Included
GFI EventsManagerTM has improved alert level for key events or intrusions that are detected on the network. GFI EventsManager allows you to trigger actions such as scripts or to send an alert to one or more people by email, network messages, SMS notifications sent through an email-to-SMS gateway or service and includes SNMPv2 traps. The generation of SNMP alerts will also allow administrators to integrate GFI EventsManager with pre-existing or generic monitoring mechanisms.

Password Recovery
GFI EventsManager enables a password reminder email to be sent to the administrator’s registration email address should they lose or forget it.

Detection of Windows Events that Refer to Administrators
GFI EventsManager can detect if a Windows event refers a user who is an administrator user, a feature that is required by certain regulations. GFI EventsManager checks the details of events and probes whether the user names or SIDs in question correspond to administrator users. The product can also track changes in rights assignment (through Windows Events) so that if a user becomes or stops being an administrator by the time an event has been generated, GFI EventsManager will report accordingly. To use this feature in domains, one must scan the domain controller before scanning other machine members.

Certified for Windows Server 2008; Supports Windows 7
GFI EventsManager has achieved ‘Certified for Windows Server 2008 and Windows Server 2008 R2 status and can be installed on, and collect events from Windows 7, Vista and 2008. Although these new platforms use a different log format, GFI EventsManager presents events from various operating systems in the same manner, thus allowing the user to see a common structure, regardless of the platform being monitored. GFI EventsManager also supports Windows 2000, Windows XP, Windows 2003 and Windows 7.

GFI EventsManager Audit for Windows
GFI EventsManager offers an audit system for Windows machines. It works through a scanning system based on checks which are pre-programmed. When a regular log scan is started on a Windows computer, EventsManager Audit, when enabled, will execute all the selected checks. Once checks are done, their results will be written as events in the Windows application log of that machine or the local machine. After the audit, the usual log scanning will start and the new audit events will be available for processing too. Event processing rules can be defined to process the result of the checks. For instance, users can be alerted when a certain check has failed. These results can also be displayed on the dashboard showing the ‘high importance’ events.

Through the GFI EventsManager Audit one can discover if there are:

  • Inactive users (users who haven’t logged on during the last 30 days)
  • Inactive machine members in a domain (machines not used during the last 30 days)
  • IPSec policies not active
  • Microsoft firewall products installed and not active
  • Slow responses to PING
  • Disk volumes running out of space

Deeper Granular Control of Events
GFI EventsManager helps you monitor a wider range of systems and devices through the centralized logging and analysis of various log types including Windows events, Syslog, W3C and SNMP traps that are generated by network resources. Administrators can gather information from Windows machines and third-party devices at a greater level of granularity and process information at extended tags level, basing the decision of what to do with that information on the spot, without further information management.

Computer Discovery and Domain Synchronization
It is possible to configure GFI EventsManager by automatically detecting computers from the network or by automatically synchronizing computer groups with computers from domains.

Support for New Devices
Managing SNMP Trap for myriad devices requires the ability to understand the language each manufacturer uses to define events. These definitions and the device information are contained in Management Information Base (MIB) definition files, provided by the manufacturers. GFI EventsManager ships with MIB definitions for the following vendors: Cisco, 3Com, IBM, HP, Check Point, Alcatel, Dell, Netgear, SonicWall, Juniper Networks, Arbor Networks, Oracle, Symantec, Allied Telesis and others. GFI EventsManager is capable of importing the MIB files.

SQL Server Auditing
GFI EventsManager supports SQL server auditing for all commercial and free versions of SQL Server including 2000, 2005, 2008, MSDE and SQL Express. Auditing allows the user to track and report on SQL server activity such as: Running of SQL statements, altering DB tables, attempts to access data without necessary privileges, etc. This can ensure data in SQL servers is authentic and thus reliable.

New! Oracle Audit Support
Many companies use Oracle database servers and the activity on these servers need to be monitored for security or regulatory compliance purposes. GFI EventsManager can process Oracle audit records for versions 9i, 10g, and 11g.

Translates Cryptic Windows Events
Cryptic logs make log analysis a painful and lengthy process. GFI EventsManager translates those event descriptions to clear, concise explanations and suggestions for action.

High Performance Scanning Engine
GFI EventsManager incorporates a totally redesigned event scanning engine that is fine-tuned for maximum scanning performance. Tests demonstrate that our engine is able to scan and collect up to six million events per hour. Its plug-in based methodology allows additional features and modules to be integrated without interfering with existing code.

Collect Events Data Distributed Over a WAN into One Central Database
You can collect events data from GFI EventsManager installations on multiple sites and locations across your network into one central database using the Database Operations functionality. This enables you to easily monitor thousands of workstations and servers across the network without impacting bandwidth and storage use. It integrates and centralizes events collected and processed and allows you to backup and restore events on demand. Through database operations you can manage the size of the database – without the need for manual intervention – not only by centralization but by also being able to export events and back them up as needed.

New! Export Events into Customizable HTML files
GFI EventsManager can export events from the event browsers into HTML format, based on templates which can be customized. These templates make it possible to choose the columns for reporting and perform column mappings. The layout of the HTML template can also be customized by editing the corresponding .css file.

Rule-based Event Log Management
GFI EventsManager ships with a pre-configured set of log processing rules that allow you to filter and classify events that satisfy particular conditions. You can either run these default rules without performing any configuration, or you can choose to customize these rules and create tailored ones that suite your network infrastructure.

Advanced Event Filtering Features
GFI EventsManager’s powerful filtering sifts through recorded event logs allowing you to browse without deleting any records from your database backend. You may also selectively highlight specific events using a color or the integrated event finder tool.

Event Log Scanning Profiles
Scanning profiles allow you to configure the set of event log monitoring rules that will be applied to a specific computer or to a group of computers. Profiles provide a centralized way of tuning event log processing rules. You can, for example, set up a set of rules that only apply to workstations in a particular department. Or you might create separate complementary profiles that provide additional and more specialized event log rules on a computer by computer basis.

Helps You to Comply with PCI DSS and Other Regulations
Data logging is key to meeting the requirements of different compliance regulations like: Payment Cards Industry (PCI DSS) Standard, HIPAA, FISMA, GLBA and others. All businesses handling cardholder data, regardless of size, must be fully compliant with strict security standards drawn up by the world’s major credit card companies. Logs provide audit trails of all activities in a credit card holder data environment and hence, a comprehensive log management system, such as GFI EventsManager, is what you need to be PCI DSS compliant. The GFI EventsManager ReportPack also contains reports specific to PCI DSS.

Support for Virtual Environments
Organizations that are currently using or plan to use virtualization on their network can still install and use a range of GFI products with confidence. GFI EventsManager supports and runs on the most common virtualization technologies in use, namely VMware, Microsoft Virtual Server and Microsoft Hyper-V.

Other Features:

  • Remove “noise” or trivial events that make up a large ratio of all security events
  • Real-time 24 x 7 x 365 day monitoring and alerting
  • Report scheduling and automated distribution via email
  • Auto-refresh option for browsing events

You're in Great Company...
Thousands of companies have chosen GFI EventsManager.

Videos

GFI EventsManagerTM - Videos

Dim lights Embed Embed this video on your site

GFI EventsManager (3x3) Custom Processing Rules
Duration: 3:21

In this video, we share 3 tips on how to use the Events Browser to identify fields, how to create custom rules and how to change the order of processing rules.

 

 

esm powerpointGFI EventsManager PowerPoint Presentation

Click here to view this presentation.

Awards & Reviews

2010

Infoworld Logo

InfoWorld reviews GFI EventsManager

"GFI EventsManager Report Pack comes with dozens of predefined reports (mostly Windows-related), each of which can be edited or used to make new reports." - InfoWorld, August 2010

DragosLunguLogo

GFI EventsManager 2010 - 'built the right way for the right job at the right time'

GFI EventManager 2010 is a very efficient and effective log and event management tool which covers most of the daily security monitoring activities - Dragos Lungu, June 2010

2009

Windows IT Pro 2009 Community Choice Awards - Silver

GFI EventsManager awarded 2009 Community Choice Award

GFI EventsManager and GFI Network ServerMonitor were named winners of the "2009 Community Choice Awards", and GFI EndPointSecurity was awarded Best Security Product – Community Choice by Penton Media's Windows IT Pro magazine - Windows IT Pro, December 2009

2008

PC Win 5 Star

GFI EventsManager receives a 5 Star PC WIN download center rating

In a test review of GFI EventsManager™, the editorial team at PCWin, a software download site, gave the product a five-star award. - PCwin, March 2008

2007 and before

EventID Logo

A smart and inexpensive tool

In his article “Event Log Management”, Adrian Grigorof presents a list of the GFI LANguard S.E.L.M. (now GFI EventsManager™) features that he likes, and there are many! The reviewer finds GFI LANguard S.E.L.M to be “highly specialised” because it offers “right-to-the-point information about what you are interested in” and “no-nonsense statistics and reports”. Furthermore, he writes that GFI EventsManager is “easy to install”, it integrates with Microsoft tools and the design does not require the network administrator “to learn yet another type of configuration interface”. The reviewer describes GFI EventsManager as being cost-effective and views it to be ideal for the small or medium company which “should get tools that are smart and inexpensive”. Grigorof also mentions the product's “properly organised support web page” and the highly responsive and knowledgeable support staff. - EventID.Net

networldfusion_logo.gif

CIRT management: Rapid alerts

In a column for Network World Fusion, M.E. Kabay, reviews three important aspects of early warnings in CIRT (computer incident response team) management: notification of vulnerabilities, notification of threats and notification of incidents. When speaking of incidents, the reviewer stresses that “intrusion detection systems should be configured to alert network management personnel at once when there are successful intrusions, disturbances of network performance, equipment malfunctions and other incidents". The reviewer describes GFI LANguard S.E.L.M. (now GFI EventsManager™) as a solution to the above - "an available system to coordinate output from network and security systems for rapid notification". - NetworkWorldFusion

cert_logo.gif

An ounce of prevention is worth a pound of cure

In a detailed article in Certification Magazine, Douglas Schweitzer stressed on the importance of network intrusion detection and prevention systems - "software programs designed to detect unauthorized attacks on a computer network system". He describes GFI LANguard S.E.L.M. (now GFI EventsManager™) as a product that helps "make intrusion detection systems more efficient". The reviewer also states that GFI LANguard S.E.L.M. is a "valuable" tool in enterprise networks. - Certification Magazine

filetransit.gif

5-star score

Top software distribution site, File Transit Inc., has given GFI LANguard S.E.L.M. 5 (now GFI EventsManager™) a five-star rating for being a high quality network-wide event log management solution. - FileTransit.com

allinternetsec_logo.gif

High score for GFI LANguard S.E.L.M.

All-Internet-Security.com, one of the most comprehensive and trusted sources of information on the web for Internet security, has awarded GFI LANguard S.E.L.M. (now GFI EventsManager™) 4 points out of 5. GFI LANguard S.E.L.M. also placed among the top 5 in the site's top 10 intrusion detection systems for 2004. The ability to alert administrators to security issues in real time earned the product a top spot. - All-Internet-Security.com

CRN_TCR_2004

GFI LANguard S.E.L.M identifies and prevents network intrusions

CRN technology editor Frank J. Ohlhorst was impressed with GFI EventsManager™, referring to it as "a comprehensive security package" that can help administrators detect and respond immediately to internal and external attacks. Describing the product's key benefits, the reviewer highlighted the tool's straightforward installation process and said that GFI LANguard S.E.L.M. (now GFI EventsManager) is a security must-have for any company. The product scored 4 out of 5 for technical merit as well as for GFI's channel program and was awarded the CRN Test Center Recommended logo. - CRN

MS_Prod_You_Love_2003

MCP Magazine readers choose GFI LANguard S.E.L.M.

Readers of Microsoft Certified Professional Magazine have named GFI LANguard S.E.L.M. (now GFI EventsManager™) as the best product for "Determining Who's Accessing What" category in the publication's "Products You Love" Awards. MCP Magazine reported that "GFI LANguard S.E.L.M. beat out software from the multi-billion dollar behemoth Computer Associates to win the security auditing category": Readers were impressed by GFI LANguard S.E.L.M.'s real time reporting capabilities and the fact that it "protects networks from creeps inside...the firewall - you know, the hacker-wanna-be in the mailroom or the disgruntled IT employee who'll stop at nothing to get revenge". - Microsoft Certified Professional Magazine

softforall5_logo.gif

5 stars awarded to GFI LANguard S.E.L.M.

Softforall.com, a site providing high quality shareware and freeware, awarded GFI LANguard S.E.L.M. (now GFI EventsManager™) the highest possible rating of five stars. - Softforall.com

shareup_logo.gif

GFI LANguard S.E.L.M. awarded

GFI LANguard S.E.L.M. (now GFI EventsManager™) was awarded the top five-star rating by Shareup.com, a resource center for top rated shareware and freeware. - Shareup.com

filehungry.gif

Top rating for GFI LANguard S.E.L.M.

GFI LANguard S.E.L.M. (now GFI EventsManager™) was awarded the top five star rating by FileHungry.com, the resource center for top rated shareware and freeware. - FileHungry.com

montools.gif

GFI LANguard S.E.L.M. named Editor's Pick

MonitorTools.com, a network-related site for IT professionals, awarded GFI LANguard S.E.L.M. (now GFI EventsManager™) five stars and named it Editor's Pick. A review on the site says: "GFI LANguard S.E.L.M.'s intelligent analysis means you do not need to be an 'Event Guru' to be able to monitor users attempting to access secured shares and confidential files" and "monitor critical servers and create alerts for specific events and conditions occurring on your network." - MonitorTools.com

webattacklogo_stars.gif

5 stars for GFI LANguard S.E.L.M.

WebAttack.com, the popular site for Internet and system tools, has awarded GFI LANguard S.E.L.M. (now GFI EventsManager™) five stars, the highest rating possible. - WebAttack.com

esmagazine.gif

GFI LANguard S.E.L.M. "sounds the alarm"

In a review of GFI LANguard S.E.L.M. (now GFI EventsManager™), Enterprise Server Magazine (ESM) focused on the product's capacity to "give you visual and audio alerts at the first hint of critical event", whereby "a single email can warn you of problems anywhere on the network". In the article, ESM consultant editor Kay Ewbank described GFI LANguard S.E.L.M.'s ability to "perform event-log-based intrusion detection and network-wide event log management" and noted: "GFI LANguard S.E.L.M. analyses the NT, XP and Windows 2000 event logs of all machines on your network in real time and alerts you to security issues, attacks and other critical events". - Enterprise Server Magazine

SC Magazine Best of 2002

GFI LANguard S.E.L.M. named "Best of 2002"

GFI LANguard S.E.L.M. (now GFI EventsManager™) has won SC Magazine's Best of 2002 award. - Secure Computing Magazine

softlandmark.gif

GFI LANguard S.E.L.M. named Editor's Choice

SoftLandmark, one of India's top download sites, has awarded GFI LANguard S.E.L.M. (now GFI EventsManager™) five stars and named it Editor's Pick. - SoftLandmark

swynk01.gif

GFI LANguard S.E.L.M. "a practical and cost-effective solution"

Swynk.com described GFI LANguard S.E.L.M. (now GFI EventsManager™) as being "a practical and cost-effective solution" for companies aiming to ensure a cohesive security strategy. "If you're serious about monitoring security on your network, you should take a look at GFI LANguard S.E.L.M.," writes trainer Dan DiNicolo in his review of GFI LANguard S.E.L.M. for Swynk. "Not only will the product reduce the amount of administrative effort required to manage and monitor event security, it will also give you the peace of mind of knowing that you'll be able to respond to critical incidents in a timely fashion." - Swynk.com

sc_maglogo.gif

GFI LANguard S.E.L.M. awarded 5 stars

SC Magazine awarded GFI LANguard S.E.L.M. (now GFI EventsManager™) the topmost score of 5 stars and described it as "a powerful tool". - Secure Computing Magazine, March 2002

win2kmag.gif

Real-time monitoring of all Windows NT/2000 systems in your network

An extensive lab report by Windows 2000 Magazine (Benelux) discusses how GFI LANguard S.E.L.M. (now GFI EventsManager™) "can relieve administrators of a great deal of work" as it helps keep a security watch of their network. Reviewer Henk Boot finds GFI EventsManager to be "extremely useful" as it "systematically and thoroughly monitors a large computer base in it entirety". - Windows 2000 Magazine (Benelux)

titleofthemonth.gif

GFI LANguard S.E.L.M. is a great security application

Networkingfiles.com has named GFI LANguard S.E.L.M. (now GFI EventsManager™) the Monitoring Title of the Month, after reviewing, testing and fully researching the product. Networkingfiles.com found GFI LANguard S.E.L.M. is "extremely easy to configure" and described it as " a powerful monitoring tool that an admin can just leave running in the background". The review said: "GFI LANguard has network-monitoring setup to whatever time increment you prefer and will email you with an immediate problem once it is detected. Overall a great application that an admin accessing one place can find information on security logs." - Networkingfiles.com

NSS_Approved

GFI LANguard S.E.L.M. awarded NSS Approved logo

The NSS Group has reviewed GFI LANguard S.E.L.M. (now GFI EventsManager™) and awarded it the NSS Approved logo that is granted only to products that the group is happy to recommend. In a detailed review, the NSS Group found that GFI LANguard S.E.L.M. enables administrators to perform detailed analysis of Windows security event logs, providing them with real-time security alerts. - The NSS Group

cbizlogo.gif

GFI LANguard S.E.L.M. cuts admin time

A product review on Channel Business reported that GFI LANguard S.E.L.M. (now GFI EventsManager™) can "detect intrusion and problems like full disk drives directly from the managed computer's own log files without deploying an extensive network management infrastructure..." The review recommended using GFI LANguard S.E.L.M. "to cut administrative time, while allowing the luxury of instant notification of events that could quickly bring down parts or all of a network". - Channel Business

WinITPro_EditorsChoice.gif

Editor’s Choice

In a comparative review in of log management products in WindowsIT Pro, the magazine gives GFI EventsManager™ 4.5 marks out of 5 for both its ease of implementation and ease of use. The reviewer recommends GFI EventsManager for anyone “whose log management needs are limited to Windows Events logs, syslog output and W3C log file information”. - Windows IT Pro

redmond_readerschoice2007.gif

GFI EventsManager wins Redmond Magazine’s 2007 Readers' Choice Award

GFI EventsManager™ has been recognized for excellence and awarded the 2007 Readers’ Choice Award in the Best Security Auditing Product category by Redmond Magazine. The 2007 Winner and Preferred Product awards are presented to vendors in 45 different product categories, ranging from antivirus and network management to firewalls and backup utilities. - Redmond Magazine

firewallcx.gif

An excellent tool

In a review on firewall.cx, Alan Drury describes GFI EventsManager™ 7 as an excellent tool that will “make your life easier and help keep both you and your systems out of trouble” and rates it 9 of out 10. He said the product enables you to collect and archive event logs across an organisation, but “there’s so much more to it than that”. He highlights GFI EventsManager’s ability to run external scripts and adds that “customisation is one of the real keys to this product”. Although GFI EventsManager 7 may be a little on the slow side at startup, “this is a testimony to the fact that the product is doing a lot of work on your behalf and, to get the best from it, you really should give it a decent system to run on. The benefits you’ll gain will more than make up for the investment. Overall, this is an excellent tool that will.” - Firewall.cx

ITprocouk-logo.gif

Nice package with clear business benefits

GFI EventsManager™ “is a very nice package with clear business benefits” according to a review in ITpro.co.uk by Ian Murphy. Giving the product four stars out of a maximum six, the author highlights the product’s relative easy to install, well-written documentation and other features that help the administrator during the installation and configuration process. - ITpro.co.uk

Event ID 5 Star Award

5 stars awarded to GFI EventsManager

In a detailed review for EventID.net, Adrian Brigorof has awarded GFI EventsManager™ five stars, being the top score. He praised the product for being “easy to install and configure” and for “giving no false positives even with the default monitoring rules”. The reviewer noted that “SQL is used as a backend database and allows further customization of the reports and building of web-based reporting interface”. Another useful feature is the integration with www.eventid.net – which provides administrators a quick way of understanding the meaning of a particular event. Given the versatility of this product, he concluded that the “prices are just right”. - EventID.Net

processor_logo.gif

Demystifying event log management

GFI EventsManager™ is one of three products analyzed by Will Kelly in an article on event logs on Processor.com. The article looks into the approach taken by GFI Software and two other companies with regard to event logs management. Andre Muscat, Director, Network Security Products, explains how companies must first determine their requirements before choosing an appropriate event logs monitoring solution. He also encourages end users to download trial versions of the tools and evaluate them against their own environment and requirements. - Processor

redmond_readerschoice2006.gif

GFI LANguard S.E.L.M. selected as the winner

GFI LANguard S.E.L.M. (now GFI EventsManager™) took top honors in the closely contested “Best Security Auditing” category in the annual 2006 Redmond magazine Readers’ Choice Awards. - Redmond magazine

Redmond RCW

Redmond magazine readers choose GFI LANguard S.E.L.M.

Readers of Redmond magazine have named GFI LANguard S.E.L.M. (now GFI EventsManager™) as the "Best Security Auditing Product" in the publication's annual Redmond Reader Survey Awards, published in the "Best of the Best" issue. All products chosen are "solid, innovative, and essential", according to editor-in-chief, Doug Barney: "All of our winners are truly outstanding." Over 2,000 readers voted for the products that they use to help them get their jobs done. - Redmond magazine

top-icon