Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.
Companies combine security intelligence with geolocation technology to enhance threat identification, response
May 23, 2009
4 Min Read
LAS VEGAS, May 22 /PRNewswire/ -- INTEROP 2009 -- RSA, The Security Division of EMC (NYSE: EMC), today announced it has integrated the RSA enVision(R) security information and event management (SIEM) solution with the Cisco(R) Mobility Services Engine (MSE) platform. This integration can help organizations to enhance IT operations, enforce security policy and accelerate response to security threats by providing IT professionals with actionable event information that is designed to include the real-time, physical location of users, hosts and devices connected to wired and wireless networks.
"With today's increasingly mobile workforce, keeping data safe can be a challenge. Knowing end-user location is a critical piece of information for determining security policy and has been a missing component in many SIEM solutions," says Andrew Braunberg, Research Director, Current Analysis. "The ability to set consistent and centralized security policy across mobile services is further enabled with the inclusion of location data."
Improve Wireless Policies
Pulling data from the Cisco Mobility Services Engine, the RSA enVision platform is engineered to provide customers with data on the physical location of stationary and mobile users and how they are using computing and network resources inside and outside the workplace. This means that IT professionals can formulate wireless policies that properly reflect business requirements and avoid putting in place controls that impede legitimate business traffic.
Reducing Security Risk -- Driving Security Efficiency
When integrated with the Cisco Mobility Services Engine, the RSA enVision platform allows customers to shorten the time-to-resolution for security investigations by providing the physical location of users and hosts along with the security alert. This can help IT security teams identify and respond to threats faster with even more targeted information that includes physical location.
Providing the physical location to pinpoint security incidents eliminates manual steps cross-referencing IT assets with threat data. The ability to prioritize different events quickly and how they relate to each other through a single view cuts overall costs and enhances security operations.
RSA's enVision platform is designed to capture thousands to millions of event and audit log data entries from hundreds to thousands of network, security, host, application and storage devices within the enterprise and quickly transforms this information into valuable intelligence which security and IT professionals can use to pinpoint potential problems and make informed decisions to help reduce overall security risk. From a security operations perspective, this information can be used to create a closed-loop incident handling process that starts with real-time alerting of security threats and policy violations.
"More than 1700 customers worldwide use RSA enVision SIEM to enhance security operations, streamline compliance and optimize network operations. This integration with the Cisco Mobility Services Engine allows us to offer customers a smarter, more powerful way to evaluate risk and further enhance security," said Chris Young, Senior Vice President of Products at RSA, The Security Division of EMC. "Alongside our parent company EMC, we look forward to continuing this kind of inventive collaboration with Cisco, by combining our products to create innovative solutions designed to help protect our customers while helping fortify the IT security ecosystem against a constantly changing threat landscape."
Cisco and EMC have a long-standing strategic alliance, combining the strength of two global industry leaders in networking and storage solutions and management. The alliance is focused on helping customers consolidate, virtualize and automate their data centers to provide improved business responsiveness, increased efficiency, ease of management, protection and security.
The RSA enVision and Cisco Mobility Services Engine integration is generally available worldwide now via the RSA enVision platform.
RSA, The Security Division of EMC, is the premier provider of security solutions for business acceleration, helping the world's leading organizations succeed by solving their most complex and sensitive security challenges. RSA's information-centric approach to security guards the integrity and confidentiality of information throughout its lifecycle - no matter where it moves, who accesses it or how it is used.
RSA offers industry-leading solutions in identity assurance & access control, data loss prevention, encryption & key management, compliance & security information management and fraud protection. These solutions bring trust to millions of user identities, the transactions that they perform, and the data that is generated. For more information, please visit www.RSA.com and www.EMC.com.
RSA and enVision are either registered trademarks or trademarks of RSA Security Inc. in the United States and/or other countries. EMC is a registered trademark of EMC Corporation. All other products and/or services are trademarks of their respective owners.
You May Also Like
A screen displaying many different types of charts and graphs to show what data is being analyzed.Cybersecurity Analytics