RealSecure Server Sensor- Computing System Innovations

		INTRUSION MANAGEMENT
		ActiveScout Intelligent Intrusion Prevention™ Management Console High performance data management and threat response Network Sensors State-of-the-art network monitoring Proventia Block malicious attacks in real-time. QualysGuard Enterprise Vulnerability management for large distributed organizations QualysGuard Express Vulnerability management for small to medium sized organizations or enterprise business units QualysGuard Intranet Scanner Appliance designed to assess network vulnerabilities inside the firwall Real-time Network Awareness Proactive passive network discovery and analysis RealSecure Desktop Analyzes application, network and virtual private network (VPN) behavior on desktops RealSecure Server Sensor Analyzes events, host logs, and inbound and outbound network activity on servers RealSecure® Network 10/100 Network intrusion detection response monitoring for 10/100 network segments RealSecure® Network Gigabit Network intrusion detection response monitoring for Gigabit network segments

	PRODUCT VENDORS
		• Aladdin • Check Point • Cisco • Citrix • Fluke • ForeScout • Intel • ISS • Microsoft • NetIQ • Nokia • Postini • Qualys • Sourcefire • Veritas • VMware • vpnMD • Websense • Zone Labs

ISS: RealSecure Server Sensor

RealSecure® Server Sensor provides automated, real-time intrusion protection and detection by analyzing events, host logs, and inbound and outbound network activity on critical enterprise servers to block malicious activity from damaging critical assets. RealSecure Server Sensor applies built-in signatures and sophisticated protocol analysis with behavioral pattern sets and automated event correlation to prevent both known and unknown attacks. RealSecure Server dramatically reduces network security costs while protecting enterprise server environments and reducing down-time.

Features & Benefits:

Server Protection – Protects the underlying operating system by preventing attackers from exploiting operating system and application vulnerabilities.

Web Application Protection – Provides Secure Sockets Layer (SSL) encrypted application layer intrusion monitoring, analysis, and response capability for both Apache and IIS web servers.

Advanced Intrusion Prevention/Blocking – Monitors all traffic to and from the server or network to detect and prevent inbound attacks as well as block new and unknown outbound attacks such as buffer overflows, Trojans, brute force attacks, unauthorized access and network worms.

Console and Network-Based Intrusion Protection – Provides the flexibility to detect and prevent both console and network-based attacks through log monitoring capabilities that detect malicious activity before it causes any damage.

Broad Platform Coverage – Provides organizations with the flexibility to grow their server protection strategy regardless of the environment – Windows, Solaris, HP-UX, AIX, Linux.

Windows Server 2003 and Windows 2000 Server Certified – This rigorous test is endorsed for business-critical applications by analysts and enterprise customers alike because it verifies features and functionality that make applications more robust and manageable.

Audit policy management – Centralized management of operating system audit policy ensures that all critical servers have consistent and effective audit policy and allows for the management of true kernel-level auditing.

SiteProtector™ Centralized Management – Customers can control, monitor and analyze their security protection systems from one central site with a minimum of staff and operational costs. This integrated system enables monitoring of intrusion activity, vulnerability assessment, event prioritization and correlation of ongoing security activity, as well as multi-site management capabilities. No other solution provides the real-time end-to-end visibility into and across the enterprise-wide security program while capitalizing on resource investments.

Advanced Event Correlation and Analysis – Provides built-in X-Force® security knowledge to dynamically escalate threatening security incidents and reduce false alarms. The module instantly correlates security data from multiple sources to escalate serious threats, such as an attack on a vulnerable asset or a covert, multi-step attack.

	Call (407) 598-1860 or email support@csisoft.com to get technical support for CSI products