Help/Systems LLC, a leader in systems and network management, security, and business intelligence software, announced that its IBM i security event monitor, PowerTech Interact, has received HP ArcSight Common Event Format (CEF) certification. Interact allows users to monitor, capture, and send security-related events from their IBM i servers directly to the HP ArcSight platform. PowerTech Interact feeds critical IBM i system event data directly to HP ArcSight SIEM platform for additional analysis and reporting.
Robin Tatam, Director of Security Technologies for PowerTech, said the HP ArcSight CEF certification "makes events from IBM i security-related activities, such as changes to system values or user profiles, more visible by escalating them in syslog format to the HP ArcSight platform for insightful analysis and reporting."
Using PowerTech Interact, HP ArcSight users can correlate event data in real time from these additional solutions:
- IBM i security audit journal (QAUDJRN)
- Critical IBM i operating system messages
- Apache Web Logs
- Other PowerTech applications: Network Security & Authority Broker
"As the financial impact of cyber crime continues to climb, organizations can no longer afford to have blind spots in their IT security deployments," said Dan Lamorena, senior director, Product & Services Marketing, Enterprise Security Products, HP. "The HP ArcSight CEF certification of PowerTech Interact offers organizations broader visibility for more accurate prioritization and timely response to potential threats."
PowerTech Interact monitors and sends over 500 different security events from the audit journal, operating system and network. SIEM solutions, such as the HP ArcSight platform, can then correlate and aggregate the IBM i events with logs from many different sources. It also saves disk space by allowing selection and omission of events based on key characteristics.
LATEST COMMENTS
MC Press Online