Product: Consul InSight 6.0
Family: Consul InSight ™ Security Manager

Product Description: InSight Suite is one of the industry’s first solutions addressing the intersection of audit and policy compliance efforts with information security and operational risk. InSight Suite helps hundreds of organizations worldwide automatically monitor, report on and investigate malicious and accidental violations, in order to demonstrate compliance to regulations and company policy. InSight Suite uses a patent-pending W7 ( Who, did What, When, Where, Where from, Where to and on What) methodology to consolidate and analyze vast amounts of user and system activity; delivering instant alerts and reports on who touched what information and how those actions may violate external regulations or internal security policies.

Performance: Tens of thousands events per second.

Key Features & Benefits:

• Automated Policy Generator― Leverages existing logs in order to baseline acceptable use policies. InSight greatly reduces the time it takes to generate baseline policies by examining existing patterns of user behavior on the network, enabling organizations to start measuring and monitoring behavior on an accelerated basis.
• Consul InSight™ Correlation Engine: The output from over 50 platforms and devices is correlated using the patent-pending W7 methodology, facilitating investigation.
• W7Log SDK─ Allows users to enable logging, and the subsequent archiving, auditing and reporting for applications that lack this capability.
• Architecture Enhancements― Architecture updates supporting the collection, storage, archive, and query of massive volumes of log data offer increased scalability, faster throughput, and world-class security for log data.
• Consul InSight™ Reporting Wizard: Offers robust reporting capabilities that enable easy demonstration of policy compliance and efficient documentation of security events.
• InSight SEM 6.0 Real Time Alerts― Optional workflow integration with InSight 6.0 provides the first solution allowing security and network operations to monitor user behavior on a real time basis.
  

Highlights:

Recent studies confirm that unauthorized activities by privileged users, such as administrators who have unrestricted access across applications and platforms, are the main cause of insider security breaches. According to the USSS/CERT Insider Threat Survey 2005, 86 percent of all “insider attacks” can be attributed to the privileged user. Left unchecked, privileged user activities can violate segregation of duties policies and lead to incidents of identity theft.

Consul’s unique differentiation remains its user-centric approach to monitoring those presenting the highest risk to the organization – privileged users such as administrators, super-users, and root-user logins. InSight enables organizations to reduce the risk that activities of privileged and other users will result in costly security breaches, reputational or financial losses.

InSight enables organizations to monitor, report, and investigate user behavior in comparison to corporate policies, industry standards and government regulations without limiting business productivity.

End-Users: Consul is focused on companies often facing regulatory issues. Specifically, industries like financial services, health care, manufacturing and retail that are heavily regulated and have security and privacy as top concerns.

Consul Risk Management, Inc.
Suite 250
2121 cooperative Way
Herndon , VA 20171 USA
Tel: 1-703-547-4100