|
Multiple installs on secured machines connected to the server are possible, but a Web-based interface would make configuration and management easier.
The console allows navigation through the taskbar and expandable submenus, but we'd prefer to see items like reporting and alerts accessible through a click.
ESM earned top marks for the granularity and scope of security and control policies.
There are extensive policy options for wireless and wired networks, communications hardware, firewall settings for multiple locations, antivirus/spyware and Micro- soft patches. You can use advanced scripting rules for customized rule sets and set features and alerts specific to regulatory actions.
Policies are distributed via SSL through a Web services application, pulling users and groups from directory services. Policies are easily edited and instantly updated.
Alerting and reporting are tough to locate, hidden in the Management Console's Tasks menu.
Alert thresholds are adjustable. For example, we enabled an alert if data in excess of 5 GB is copied to removable storage media or device.
ESM offers 10 reporting categories--adherence, alert drill-down, endpoint activity, encryption solution, client self-defense, integrity enforcement, outbound content compliance, administrative overrides, endpoint updates and wireless enforcement. If you want to create custom reports, however, you'll have to use an ODBC-compliant app such as Crystal Reports.
|