Lumension Endpoint Management Platform Strategy to Reduce Complexity, Enhance Security & Compliance, and Expand Visibility Across IT Operations and Security Functions

Lumension, a global leader in endpoint management and security, announced its comprehensive Lumension® Endpoint Management Platform (LEMP) strategy that will deliver tighter integrations and workflows across IT security and operations to help organizations optimize security and compliance posture, reduce technology complexity and decrease TCO. As part of this platform launch, Lumension will be releasing its Lumension® Endpoint Management and Security Suite (LEMSS), which includes initial product capabilities across integrated vulnerability management and security configuration management to deliver greater agility, security and compliance. According to a recent Ponemon Institute survey commissioned by Lumension, titled Worldwide State of the Endpoint 2010, collaboration between security and operations is considered poor or non-existent by 53 percent of IT security and 38 percent of IT operations practitioners. Further, a majority of IT security and IT operations executives said they feel less secure today than a year ago as a result of complexities in disparate technologies. According to the survey findings, the top three challenges in endpoint management are improving security posture, reducing costs and decreasing complexity. Current challenges are compounded by the growing gaps within IT operations and security groups that have been slow to adapt to the evolving endpoint security risks and approaches, adding to the inflexible and high-risk IT environments that exist today.

Read Full Article

Access Control and Audit Solution for Mainframe and virtual environments

Xceedium have extended their groundbreaking unique access control, policy enforcement and audit capabilities to mainframe and virtualized environments with the release of their award-winning Gatekeeper solution.

Featuring full support for mainframe and virtual environments, Gatekeeper Version 5 reflects the need for access control and audit for centralized computing models. Now companies can apply its patented technologies to contain users to authorized areas, track, record and deliver targeted reports and more easily and cost effectively meet compliance requirements. This solution allows organizations to remain agile enough to quickly adapt to changes in their business, regulatory and computing environments.

Key components includes:

• Restrictive Zero Footprint Access - reverse port forwarding provides a virtual abstraction layer further enhancing security when accessing infrastructure resources including mainframe and virtualized systems ensuring no IP address is ever granted to the client and the user has no visibility to unauthorized resources.

• Clientless Compartmentalization - secure, compartmentalized access to mainframe and virtual systems without requiring any local client installation. All connections can be restricted to a single originating IP while allowing authorized users to connect to the full extent of their authorized roles, regardless of physical location.

• Containment to Authorized Areas and Command Restriction - For mainframe environments, the Command Line Interface (CLI) Java Applet allows for command filtering functionality which can be used to intercept unauthorized commands and keystrokes. Users can effectively be contained to their authorized systems or resources when accessing authorized mainframe systems, servers or network appliances.

• Real-Time Remediation - provide corrective actions such as termination of access or account deactivation based on thresholds set by the organization.

• Audit and Compliance (Full Session Recording) - allows users to access and interact with CLI, mainframe, graphical and virtual environments while providing the ability to enforce full session recording of all user activities within these interactive sessions. For easier auditing of these user sessions, Xceedium GateKeeper allows administrators and auditors to search for information and playback the sessions from any point in time.

Read Full Article