SIEM and OS Configuration Management

bamuhrez

Hi,

We have Orion NPM installed in our organization.

What does orion provide in the area of Security information and event management?

Does it have features that cover this area?

Will the configuration management and compliance support  operating systems such as Windows and Unix variants?

 

Abdullah

chris.lapoint

Orion NPM includes a Syslog and SNMP Trap server which can be used to collect logs from firewalls and security devices and you can certainly setup alerts based on these events.  However, NPM does not provide any specific features geared towards analyzing security events.   It's primary focus is on the operations side - network fault and performance management.

NCM provides configuration management and compliance for network devices.  We have considered expansion to server-based config management, but this isn't an area of focus for this year.