MC SHOWCASE BUYER'S GUIDE

PowerTech Interact sends security events in real time to Security Information Management (SIM) solutions such as ArcSight, ISS, TriGeo, OpenService, High Tower Software, Symantec, RSA, LogLogic, LogRhythm, and SecureWorks. Interact parses and simplifies messages before exporting them via syslog. Over 500 security events are harvested from a number of sources including the audit journal, operating system messages, and network activity (exit points). Unlike solutions based on batch transfer of logs through ftp, events can be filtered and prioritized before they leave the AS/400 system, saving valuable bandwidth. SIM solutions can then correlate and aggregate the AS/400 events with logs from many different sources.