LogLogic Simplifies Security Change Management

PRESS RELEASE

SAN JOSE, Calif. — September 1, 2009 — LogLogic', the log and security management leader, today announced general availability of the latest release of its LogLogic Security Change Manager appliance that integrates easily with SEM solutions from LogLogic or other vendors as well as third-party CRM and ticketing solutions. LogLogic's unique multi-vendor solution leads the industry's move towards consolidating security event and change management giving customers better security through improved IT infrastructure visibility and control across collaborating teams.

LogLogic's Security Change Manager is designed to benefit medium to large enterprises, MSSP, ISP and service providers who need to automate security policy management and change management across large or complex networks of routers, firewalls, switches, VPNs and IPSs in homogenous or heterogeneous vendor environments, including Checkpoint, Cisco, Fortinet and Juniper. A single console can automate the design and implementation of rules for large networks or small networks with complex policies and frequent changes.

"While it is good to identify security incidents using correlation of LogLogic Security Event Manager, it is even better to respond to security incidents and prevent future attacks by rolling out firewall policy changes through pre-defined response plans with LogLogic Security Change Manager," said Dominique Levin, EVP of Marketing and Strategy, LogLogic. " We're focused on giving our customers better visibility and control. Research shows that organizations experience more security breaches because of manual errors in routine daily networking management tasks than from any external threat. Automation not only saves time and money, but also eliminates manual errors."

LogLogic Security Change Manager automates the often time-consuming and error-prone manual process of designing and generating network security rule changes. It takes advantage of a unique high-level, policy-based approach with an advanced drag-and-drop topology interface that automatically orders, optimizes and pushes the rules to the devices affected by the rule change.

According to Forrester Research's July 2009 report titled "TechRadar For Security & Risk Professionals: Network Threat Mitigation, Q3 2009": "PCI DSS Requirement 1.1.6 mandates that firewall and router configurations be reviewed at least every six months. Many companies are unable to meet this compliance requirement without automating the task.

Companies dinged by auditors will provide the first push in the acceptance of these tools. Ultimately, Forrester anticipates a nearly ubiquitous adoption of this technology in some form, as nearly every organization has firewalls that will need to be audited."

The latest release of LogLogic Security Change Manager simplifies and improves email notification integration with any third party CRM or ticketing solution, enabling visibility to multi-tiered approval, change request approval and deployment status. According to Forrester Research's July 2009 report titled "Market Overview: Firewall Auditing Tools": "With its acquisition of Exaprotect, LogLogic is the first vendor to directly tie firewall auditing capability into its SIM technology. LogLogic has fully integrated LogLogic [Security] Change Manager (formerly Exaprotect's Solsoft ChangeManager) with LogLogic Open Log Management Platform to provide an overall network and security device management tool."

For example, customers can create pre-built response plans that would allow them with a single click to deploy new firewall rules when a threat such as unauthorized FTP traffic is detected. LogLogic customers use Security Change Manager to automate configurations on networks large and small: