Security Management Strategies for the CIOAccess "Risk Policy: Elemental Security Platform product review"
This article is part of the March 2007 issue of Compliance vs. security: Prevent an either-or mentality
RISK/POLICY MANAGEMENT Elemental Security Platform REVIEWED BY BRENT HUSTON Elemental Security Price: Management server, $35,000; desktop agent, $60; server agent, $600 @exb @exe The Elemental Security Platform (ESP) is a powerful tool for monitoring and enforcing system compliance, and provides effective asset management, asset-centric access controls and risk management. Since we reviewed Ele-mental Security's version 1.1, then called Elemen-tal Compliance System (August 2005), the product has matured and extended its capabilities, with support for new client OSes, risk management, support for ticketing systems and better LDAP integration. Setup B+ Our ESP server was preconfigured, but Elemental typically sends an engineer on-site to install the device and provide a rundown on features and usage. We were impressed with the ease of client agent installation, and getting the clients/servers running. Agent installation simply requires giving it the address of the ESP server and answering one or two other questions, depending on the platform. The client ... Access >>>
Access TechTarget
Premium Content for Free.
What's Inside
Features
-
-
DigitalPersona Workstation Pro and Server for Biometric Authentication
This review evaluates DigitalPersona Pro, a single sign-on (SSO) software suite that allows an enterprise to replace passwords with biometric fingerprint readers or provide dual-factor authentication.
-
Security product and tools news and releases: Trend Micro, Citrix
Get the latest news and releases on security tools and products for intrusion detection and protection, email and USB security. Get info on price, setup and installation.
-
Enterprise UTM products differ from all-in-one SMB appliances
UTM appliance struggle to find their niche in the enterprise as large companies prefer best-in-breed security products.
- Events: Information security conferences for March 2007
-
Risk Policy: Elemental Security Platform product review
In this review, get information and advice on Elemental Security Plaform (ESM) products, such as expenses and setup, configuration and compliance features.
-
Prioritizing compliance and information security
Have compliance demands refocused and weakened information security efforts?
-
DigitalPersona Workstation Pro and Server for Biometric Authentication
-
- Viewpoint: Creative patch management workarounds
-
Product review: e-DMZ Security's eGuardPost
This product review examines e-DMZ eGuardPost's capabilities that allow security managers to apply granular access controls to remote connections. The appliance also comes bundled with Security's Password Auto Repository (PAR), e-DMZ's flagship product, which securely stores and manages administrative passwords
-
Thin clients a malware-free desktop option
A Maine health care provider sheds its spyware-ridden, burdensome PCs for a safer, more manageable thin client environment.
-
Sun Microsystems' Sun Java System Identity Manager 7.0 Product Review
Product review of Sun Microsystems' Sun Java System Identity Manager 7.0 tool security features, configuration, setup and installation.
-
Product review: Six removable device control security products
Six removable device control security products that provide centrally managed granular control over ports, interfaces and storage devices are reviewed. This review evaluates: DeviceLock 6.0 from SmartLine, Sanctuary Device Con-trol 4.0 from SecureWave, Endpoint Access Manager 3.0 from ControlGuard, Device-Wall 4.5 from Centennial Software, Safend Protector 3.1 from Safend and Protect Mobile from Workshare.
-
Columns
-
Bruce Schneier and Marcus Ranum debate the necessity of penetration tests
Pen tests identify your organization's weaknesses. Bruce Schneier and Marcus Ranum debate whether organizations really want to document all the ways networks are insecure.
-
Ping: Mark Odiorne
Mark Odiorne
-
CISO priorities focused on compliance over security
Regulatory demands have forced CISOs to prioritize compliance over data and intellectual property protection.
-
Secure software development needs to be treated as other engineering disciplines
Almost no university teaches quality or security as part of their software engineering or computer science majors, a major reason for today's application security problems.
-
Bruce Schneier and Marcus Ranum debate the necessity of penetration tests
More Premium Content Accessible For Free
Unlock new pathways to network security architecture
E-Zine
Network security architecture is showing its age at many organizations. With new technology, different data types, and use of multi-generations of ...
Emerging threat detection techniques and products
E-Handbook
Advanced persistent threat (APT) has been a used and abused term in the security industry, but security experts say targeted attacks are a growing ...
The rapid evolution of MDM solutions
E-Zine
Mobile device management (MDM) continues to grow at a feverish pace, both in terms of adoption and mobile security features. BYOD policies, and the ...