ArcSight Express

ArcSight Express
The Network is Still Under Attack
Network security threats continue to rise. Recent studies indicate a 300% growth in malware in 2008 alone. Unfortunately, organizations with smaller security teams and smaller security budgets do not face smaller risks. As a result, most organizations are vulnerable to hackers, viruses, malware, data breaches and identity fraud. Even worse, these firms often do not have a dedicated security team or much security expertise at all. Malware is increasing, breaches are increasing, regulations are increasing, and yet headcount to deal with these issues is shrinking at many firms.
For organizations that face growing threats to their network and their critical information, yet have limited resources and expertise to address these threats, ArcSight Express provides a simple, automated, cost-effective solution.
ArcSight Express brings the power of world-class event correlation and log management to a new range of customers. ArcSight Express analyzes logs from any device or system on your network, determines if a
potentially risky incident is occurring and notifies administrators in time to take action.
ArcSight Express does the heavy lifting of a dedicated security expert, providing meaning to network security events by placing them within context of what, where, when and why each event occurred and its impact on the organization. Real-time alerts show administrators the most critical security and compliance events occurring in the business, along with the context necessary to further analyze and mitigate a breach. ArcSight Express also addresses compliance requirements with the ability to store audit quality logs and provide meaningful compliance reports for fast, easy audits.
Security Expertise, Built Into the Box
ArcSight Express includes the rules, alerts and reports that matter in the protection of the mid-sized organizations. All are pre-built and ready to be used without custom development. Any rule or report can be extended easily using the ArcSight graphical console and rule builder. This expertise addresses the most critical issues faced by customers.
Security Expert “In a Box”
ArcSight Express protects your business with built-in solutions for the security and compliance problems that matter.
Highlights:

• Comprehensive monitoring of perimeter, network and server security
• Automated security operations
• Easy-to-deploy and maintain appliance solution

• Top Infected Systems
• All AV Configuration Changes and Errors

• Top Bandwidth Users
• Configuration Changes
• Successful and Failed Logins
• Password Changes
• Top Attackers and Internal Targets

• Database Errors and Warnings
• Database Access and Configuration

• User Authentication, Administration

• Top Connections
• Network Device Errors and Status
• Access and Configuration Changes
• VPN Sneak Attacks
• VPN Authentication Errors
• VPN Configuration Changes
• Connection Activity
• Server and Desktop Monitoring
• Privileged User Administration
• Access and Configuration Changes
• Denied Connections
• IPS/IDS Alerts and Bandwidth Usage
• Successful/Failed Login Activity