Real World Performance

NG-Screener is a Security Information and Events Management (SIEM) appliance that enables medium-sized organizations to harness their log data resources.

The NG-Screener collects and analyzes the constant stream of heterogeneous automated log data to provide a comprehensive overview of security and service level performance. Its built-in "Forensics on Demand" investigative tool provides in-depth troubleshooting as well as precise trend and statistical analysis.

Developed in collaboration with Security Officers and IT Administrators, this bottom-up approach results in a solution that meets real world operating requirements:

Easy integration & minimal maintenance

A Plug & Play, turnkey appliance with broad event log source support of syslog and SNMP network application layer protocols; 100% compatible with Cisco, Windows, Checkpoint etc. with fast, two-day turnaround for new Plugin libraries.

The NG-Screener prioritizes unobtrusive agentless collection methods to drastically reduce the time and cost of implementation and maintenance.

Back to top 

User-friendly interface

Java Rich Client GUI (Graphic User Interface) with drill down functionalities, fully customizable reports and ITIL overview. By clearly presenting all information, operators are able to quickly obtain an overview of infrastructure performance and identify and investigate any hardware, service level or security issues.

Back to top 

Real-Time monitoring

Unobtrusive, real-time audit event collection enables proactive detection, identification, and tracking based on user-defined parameters. troubleshooting and trend identification.

NG-Screener pioneers the use of alerts triggered by behavioural rather than theoretical modelling. Saves time and resources by eliminating the need to create and map “use case scenarios”. Alerts based on actual event parameters are also better able to identify issues that may not have been anticipated in a theoretical model.

Back to top 

"Forensics on Demand"

NG-Screener has a Normalization engine installed with the appropriate plug-ins to convert an infrastructure’s heterogeneous log data into a standard IDMEF – RFC format (Intrusion Detection Message Exchange Format).

Eliminates the time-consuming task of governing different log languages, and enables uniform correlation, search and analysis to form a high level service abstraction.

Back to top