Firewall/SysLog Monitoring™ (FSM)

The Firewall/Syslog Module (FSM) provides you with real-time rules-based syslog analysis for commercially available firewalls and syslog compatible systems, applications and devices. The FSM is integrated with the Unified Enterprise Security (UES) monitoring console and reports. It allows you to:

• Captures and analyzes logs from firewalls and syslog-producing devices
• Match multiple rules based on Boolean logic, time and frequency
• Maintain 14 days of logs per logging source
• Provide back-up support for the external system
• Support up to 150 syslog devices per FSM
• Supports automatic or on-demand blocking at market leading Firewalls and/or Switches and Routers to block harmful network traffic.
• Integrated and correlated with other UES subsystem data
• Supported on the monitoring console and the ticketing system
• Supports 1.5 Terabyte NAS and/or external archival of data
• Custom reports to meet audit Requirements
• Supports most commercially available firewalls including Checkpoint, Juniper/Netscreen, Cisco IPX, and WatchGuard.