Enhancing cyberdefense: Log360 enables Chugach Government Solutions to meet security requirements

Challenges

Chugach was in search of a SIEM solution that would not only help the company spot threats and mitigate them but also help detect existing cybersecurity gaps. Since Chugach provides cybersecurity expertise for federal government agencies, it needed a comprehensive solution that would protect its data and infrastructure. Chugach also needed to make sure it was adhering to complex compliance mandates from FISMA and NIST.

The ideal SIEM solution would centralize and track security events from multiple sources in a single console while meeting the company's specific requirements.

The solution: Log360

Before deploying ManageEngine Log360, Chugach encountered many security threats like account compromise, failed logons, and web security threats including phishing and worm activity. With Log360, Chugach was able to monitor all security events that took place in its network and detect and resolve these security threats.

Jeffrey Tucker, a senior network administrator at Chugach, was impressed by Log360's comprehensive dashboard view of network traffic, security events, recent alerts, and intuitive graphical reports, which simplified the detection of suspicious behaviors or threats. Another notable feature was Log360's robust search engine, which helped his team investigate any security incident across the network using log data that was periodically archived from the moment of solution's deployment. Tucker was also able to customize alerts and reports for Chugach's needs.

Impact

Tucker was extremely satisfied with Log360 and found the product to be convenient to use for all of Chugach's cybersecurity requirements.

One such requirement was the ability to block user access to prohibited websites. This was achieved with the DataSecurity Plus component, which offers web filtering functionality that provides in-depth visibility into an organization's internet traffic and restricts users from accessing unproductive and harmful online content.

Tucker was also pleased with Log360's technical support team and said he would definitely recommend Log360 to others.

Other highlights of Log360

• Monitor and audit all changes in an AD environment in real time.
• Report on critical events in Azure AD, Exchange Online, and Microsoft Exchange Server in real time.
• Identify insider threats and compromised accounts with user and entity behavior analytics (UEBA). Powered by ML, UEBA establishes user and entity baselines and detects any deviations in regular behavioral patters, ensuring robust and precise threat detection.

About Log360

Log360 is a unified SIEM solution with integrated DLP and CASB capabilities that detects, prioritizes, investigates, and responds to security threats. It combines threat intelligence, machine learning-based anomaly detection, and rule-based attack detection techniques to detect sophisticated attacks, and offers an incident management console for effectively remediating detected threats. Log360 provides holistic security visibility across on-premises, cloud, and hybrid networks with its intuitive and advanced security analytics and monitoring capabilities. For more information about Log360, visit manageengine.com/log-management.