SOX News

Symantec Log Management Service Provides Server and Application Monitoring and Log Archiving Capabilities to Meet Compliance Standards

(Dec 18, 2007)-- Symantec announced the worldwide availability of Symantec Log Management Service, a new offering from its Managed Security Services group that extends real-time security monitoring to server and application log files. This service is designed to help large enterprises manage and reduce security risks and demonstrate compliance with regulatory and industry requirements, such as the Payment Card Industry (PCI) Data Security Standard, to avoid potential penalties.

"Government and industry regulations require companies to monitor and manage network traffic and events. By adding Log Management Services to their Managed Security Services portfolio, Symantec seeks to address the increased demand for a more comprehensive and integrated set of security services that address challenges such as compliance requirements and risk management," said Irida Xheneti, research analyst within IDC's Security Services program.

Through the subscription-based service, enterprise customers receive an integrated solution that includes Symantec Security Information Manager appliance provisioned in their IT environment and managed by Symantec's security experts. This version of the appliance serves as a log management system for security monitoring, compliance reporting and log archiving requirements. By outsourcing server and application log management to Symantec, enterprises receive access to Symantec's global security expertise for 24x7 threat monitoring and analysis, resulting in prioritized, actionable recommendations. Internal IT organizations will also reduce their investigation time associated with security incidents so they can focus on their core competency.

Symantec Log Management Service features:

* Security monitoring and alerting for a variety of operating systems and applications
* Pre-defined compliance reports for a variety of regulatory and industry standards, such as PCI and SOX
* Custom log archiving allows customers to define their log retention requirements according to their security and compliance policies
* Full management of the log management appliance, including configuration, fault and performance monitoring, patching, lifecycle and Return Material Authorization (RMA)
* Security event correlation with other monitored security devices enables customers to quickly modify their security posture in response to a security attack

Log Management Service exemplifies one solution within Symantec's broad portfolio of sourcing models, including on-site, outsourced or a blended approach, providing an alternative to solving security management, compliance and operational challenges for enterprise customers. Through a combination of people, process and technology, Symantec delivers custom security management solutions to align with an organization's policy changes, staffing conflicts and budgetary restrictions. Symantec's experienced security staff and proven processes help enterprises effectively mitigate risk, protect data and demonstrate compliance.

Share or bookmarklet this web page at: