Configurating the Axent Enterprise Security Manager

Configurating the Axent Enterprise Security Manager

Can the Axent Enterprise Security Manager be configured to report superuser activity or activities performed (i.e., what commands issued and which files or directories accessed) under selected user accounts considered to be sensitive? Can a record of these activities be "piped" to another server in realtime? Do you know of any other security auditing and monitoring software that can do this?


    Requires Free Membership to View

    Login

    SearchSecurity.com members gain immediate and unlimited access to breaking industry news, virus alerts, new hacker threats, highly focused security newsletters, and more -- all at no cost. Join me on SearchSecurity.com today!

    Michael S. Mimoso, Editorial Director

    By submitting your registration information to SearchSecurity.com you agree to receive email communications from TechTarget and TechTarget partners. We encourage you to read our Privacy Policy which contains important disclosures about how we collect and use your registration and other information. If you reside outside of the United States, by submitting this registration information you consent to having your personal data transferred to and processed in the United States. Your use of SearchSecurity.com is governed by our Terms of Use. You may contact us at webmaster@TechTarget.com.

Yes, the Axent Enterprise Security Manager can do much of what you are looking for. It works on Windows, Novell, several UNIXes (AIX, HP/UX, Compaq True64, Irix and Solaris) and OpenVMS. The exact details of what it does vary from system to system. It can also send records of its alerts to other systems in realtime.

There are also other products and programs that can do similar things, depending on what you're looking for. All the major UNIX manufacturers have their own security auditing and logging systems. Products like Cybersafe's Centrax and Clicknet's Entercept work for NT. Cybersafe's Centrax will also work with a number of other operating systems. These also have the capability to forward audit information to other hosts.

There are also open source solutions. The "sudo" program runs on many, many UNIXes and can control and audit superuser access. Standard UNIX syslog can send audit information to other systems.


This was first published in April 2001

Back to top