GFI LANguard Security
Event Log Monitor (S.E.L.M.) 5, released today,
raises the bar for Windows event log management: GFI
LANguard S.E.L.M. can now scan for critical Internet
Information Server (IIS), Exchange Server, SQL Server
and ISA Server events, in addition to important
security events. GFI LANguard S.E.L.M. enables
administrators to automatically monitor critical
servers in real time as it immediately notifies
them of problems, permitting them to take instant
corrective action.
How GFI LANguard S.E.L.M. works
GFI LANguard S.E.L.M. continuously scans the event
logs of all Windows NT/2000/XP/2003 machines on a
network, consolidating them into a central log for
fast analysis and generating detailed activity reports.
When it identifies critical events – such as network
users attempting to access shares or secured files,
email queues becoming too big, bad hard disk blocks,
etc. – GFI LANguard S.E.L.M. 5 sends the administrator
real-time alerts, thereby permitting immediate action
against potential attacks and problems as they occur.
GFI LANguard S.E.L.M. detects insider hacking
GFI LANguard S.E.L.M. ships with a security event
analysis engine, which allows administrators to
quickly catch internal hackers.
“Internal security breaches and backdoors cost US
business over $1 billion annually in damages.
Firewalls cannot help against this. GFI LANguard
S.E.L.M. combats insider hacking by continually
auditing all machines on the network and alerting
administrators immediately when high security events
occur,” said Nick Galea, GFI CEO. “With GFI LANguard
S.E.L.M. 5, administrators have a major tool in
their network security arsenal and considerably
more peace of mind.”
New features
Other new features in GFI LANguard S.E.L.M. 5
include:
- Windows 2003 Server compatibility (both scanning
and installation – installation of MSMQ 3) - Event analysis intelligence for SQL Server, IIS,
ISA Server and Exchange Server - Redesigned and simplified user interface
- Ability to run a command when a particular event
is triggered - Ability to send short notifications for transmission
by SMS or pager - Configuration usability enhancements, such as groups
of custom rules and filter nodes grouping in the
Event Viewer - More information in event descriptions and links to
GFI’s KnowledgeBase for further details - Addition of custom rules to reduce spamming and
“noise events” - New object access report – allows administrators to
monitor access to particular critical files.Specifications, pricing and availability
GFI LANguard S.E.L.M. requires no agents or client
software, has no impact on network traffic, and
can be scaled to networks of thousands of servers
and workstations. It is available from distributors
around the world or online at the GFI site. Pricing
starts at US$350 for a 2 server/25-workstation
package. Administrators can check whether they need
GFI LANguard S.E.L.M. at
http://www.gfi.com/lanselm/whylanselm.htm. More
product information and a free starter pack are
available at http://www.gfi.com/lanselm.
