News

AdventNet adds Security Auditing capability into its Network Change and Configuration Management solution

ManageEngine DeviceExpert now ensures your device configurations are audited for security threats, and furnishes in-depth reports on the devices' security posture

PLEASANTON, California, February 27, 2008

AdventNet Inc., the leading provider of affordable Enterprise IT Management & IT security software today announced the availability of an update (Build# 5020) to ManageEngine DeviceExpert 5. In this release, AdventNet has added the provision to generate Security Audit Reports for network devices to identify and depict any security-related issues.

ManageEngine DeviceExpert enables IT administrators to efficiently manage the configurations of network devices such as switches, routers, firewalls from multiple vendors through a single, central GUI. It helps in tracking configuration changes in real-time, preventing unauthorized changes, automating all configuration tasks and in ensuring that devices in the network stay properly configured.

With network security threats on the rise by the day, it is imperative that your network devices are well-protected to enable business continuity. Periodic tracking and parsing of device configurations to extract security-related information is one-way to identify potential security threats. Good visibility into the security specifications of the device can enable quick remedial action. However, manual procedures to parse, extract and understand security information from device configurations are tedious & inefficient, and do not yield the desired clarity. With such challenges in front of them, network administrators & IT managers face a daunting task and are always on the lookout for easier and efficient ways to audit security information to protect their network devices.

This release of DeviceExpert, by way of its Security Audit reports, automates the process of parsing device configurations and provides in-depth visibility into the security posture of a device, which is the key to mitigating risks emerging out of security threats. Security Audit reports can be generated on-demand at any time and even peridiocally with the latest configuration changes. This facilitates IT managers in making well-informed business decisions.

Some of the key security aspects captured in this Security Audit report include:

  • Potential software vulnerabilities with CVE & Bugtraq reference; helps in keeping the software patched or upgraded to the latest version
  • Weak or dictionary-based passwords or keys; on correction prevents attackers from gaining access to the device
  • A view of the ACLs to depict if their respective ACEs are sufficiently restrictive or not; on restriction prevents devices from being compromised
  • Interfaces list with complete information
  • SNMP protocol version information and vulnerabilities for other such services
  • Firewall rules and info on any unauthorized traffic getting past

"I really enjoy having a system that is easy to use and automated. I have set the backups/change notification to run and I get an email every morning telling everything is good, and if something is changed", said Steve Roman, Lead Technologist Infrastructure/Project Manager of Kelly Blue Book Co., Inc. - a leading automobile dealership company in the USA. "ManageEngine DeviceExpert's comprehensive auditing and reporting feature tells me what is changed and who made the change", he added.

"Security Auditing of device configurations plays a significant role in determining the network security status and helps safeguard corporate data", said T. Subramanian, Product Manager of DeviceExpert. "The impact analysis and security recommendations in these reports impart knowledge of what is going on and what calls for immediate attention, so that network administrators can take action and ensure complete security. Security Auditing also complements the Network Compliance Reporting capability already present in DeviceExpert 5.0, in ensuring that the device configuration is both standard compliant and secure", he added.

Availability and Pricing

The latest release of DeviceExpert can be downloaded directly from the website (http://www.deviceexpert.com). DeviceExpert offers a 30-day evaluation license of the Professional Edition. A permanent Free Edition is also available for small businesses. The annual subscription price for the Professional Edition starts at $795 for managing 25 devices, and it can be licensed for unlimited systems. Download your copy now from http://www.deviceexpert.com/download.html

About AdventNet

Enabling Management Your Way™

Founded in 1996, AdventNet is a software company with a broad portfolio of elegantly designed, affordable products and web services. AdventNet offerings span a spectrum of vertical areas, including network & systems management (ManageEngine.com), security, collaboration, CRM & office productivity applications (Zoho.com), database search and migration, and test automation tools.

AdventNet and its global network of partners provide solutions to multiple market segments including: OEM’s, global enterprises, government, education, small and medium-sized businesses and to a growing base of management service providers. www.manageengine.com, www.zoho.com

Media Contact:

Alex D Paul Rabidass
ManageEngine
alexdpaul@manageengine.com
Follow us on Twitter: @manageengine