Embed Size (px)
Citation preview
VULNERABILITY & COMPLIANCEMANAGEMENT SYSTEM
Securing the integrity of corporate information systems has never been more important. Each successive media report about a new security breach underlines the massive potential for damage to an organisation’s finances, operations and reputation when confidential information is compromised. Protecting your company from outside attack can be a costly, complex business, especially when you need to comply with the growing range of legal and regulatory standards brought in to counter these threats. But the penalties for failure are even higher.
Many large organisations struggle to meet this challenge with a fragmented approach, selecting different tools for each system, division or country and employing expensive specialists to carry out manual testing and configuration. The cost effective alternative is to centralize and automate the process with MaxPatrol, a fully-integrated, best-in-class vulnerability and technical compliance management solution from Positive Technologies.
REDUCE COSTS. IMPROVE EFFICIENCY. MANAGE RISK.
MaxPatrol from Positive Technologies provides visibility and control of security compliance across your entire corporate IT infrastructure in a single solution.
2
With MaxPatrol, you can unite all your systems under one compli-ance solution: network and system infrastructure, servers, VOIP and wireless networks, databases and applications, ERP-systems and web applications.
MaxPatrol can meet the security needs of your entire business, from IT engineers to the CEO. Its automated processes can save your company time and money as well as increasing the accuracy of
your regulatory and compliance data and reducing the risk of human error.
MaxPatrol is the only enterprise product on the global market that combines auditing, penetration testing and compliance-management in a single solution. It is already used by over 1,000 successful companies of all sizes to maintain security across many operating systems, databases, business management systems and web-applications.
MAXPATROL: ONE SOLUTIONFOR ALL YOUR SYSTEMS, ALL YOUR NEEDS
3
PCI, SOX, ISO etc
ManagenentTeam
ManagenentTeam
Vulnerability and RiskManagement Team
Vulnerability and RiskManagement Team
Compliance/Audit Team
Compliance/Audit Team
IT RemedyTeam
IT RemedyTeam
Corporate Policies
• IS and IT cost reduction• High-level business reporting / KPIs• Corporate Compliance • Real-time security overview
• Vulnerability management • Compliance management• Policy compliance• Vulnerability elimination control
• Easy implementation• IT resources inventory• Recommendations on vulnerability elimination • Reporting on updates
• Comprehensive tool for security assessment• Major international standards support• Custom reporting system
Databases Applications
ERP-Systems
WebApplications
Networkand SystemInfrastructure
VOIPan WirelessNetwork
VulnerabilityManagement
ComplianceManagement
PenetrationTesting
Application andDatabase Audit
VULNERABILITY & COMPLIANCE MANAGEMENT SYSTEM
Knowledge Base
Consolidation for Consistency: Combine the security of your entire organization under a single solution and a unified approach. Gain visibility and control of configurations on more than 70 platforms and applications, including wireless and VOIP equipment, infrastructure and business applications and ERP systems.
Automation for Efficiency: Cut your staffing costs whilst increasing the frequency of system checks. MaxPatrol’s configuration & vulnerability assessment engine is agentless, low-privileged and non-intrusive – reducing disruption to your systems and staff. It has the industry’s lowest false positive rate.
Reporting for Transparency – Obtain reporting that is relevant for each management level to support informed management decisions.
Pre-Configured for Speedy Compliance – Rapidly deploy MaxPatrol’s wide range of pre-defined security policies to
quickly measure your compliance with industry regulations including: ISO 27001/27002, SOX, PCI DSS, NSA, NIST and CIS. Easily configure bespoke policies to enforce your own, in-house security guidelines.
Flexible for Scale and Change – Take advantage of MaxPatrol’s scalability and flexible deployment models to configure the ideal solution for your specific infrastructure.
Maintained by Experts – Enjoy peace of mind by putting your security in the hands of acknowledged industry experts. MaxPatrol is updated daily by our team of engineers as they track new threats, policy requirements and vulnerabilities. The Positive Research innovation group works closely with the industry’s foremost research teams; technology partners such as Cisco, Oracle, HP, IBM, Microsoft and others; and vendors of anti-virus, firewall and intrusion detection systems.
Vulnerability Assessment – agentless, low-privileged, non-intrusive, black-box configuration and vulnerability assessment. PCI DSS ASV-compliant. Supports penetration testing, assesses applications, network inventory and network perimeter
Cross-Platform Compatibility – works across: • Network equipment from
Cisco, Juniper, Check Point, Arbor, Huawei, Nortel, Alcatel etc.
• VOIP, wireless and telecom equipment
• Operating Systems including Windows, Mac OS X, Linux, IBM AIX, HP-UX and Oracle Solaris
• Databases including Microsoft SQL, Oracle, IBM DB2, PostgreSQL, MySQL and Sybase
• Desktop applications: Web Browsers, Office, IM apps
• Infrastructure applications including Active Directory, Microsoft Exchange, IBM Lotus, Microsoft IIS & Apache
• Virtualization and Terminal Platforms: WMware
vSphere/ESX, Microsoft Hyper-V, Citrix XenApp etc.
• Security Systems: Personal IPS, Firewalls, Antivirus etc.
• Business critical systems: ERP, Banking & Billing Systems including SAP R/3 and SAP NetWeaver
Web-Application Security – assesses Web 2.0 applications written in technologies including AJAX, JSON, Flash and Java
ERP System Security Analysis – based on vendor/industry guidelines: SAP Security Guides, ISACA (ITAF) etc.
Password Policy Audit – black-box and white-box mode auditing for systems including: • Remote access and VPN (RDP,
VNC, Telnet, SSH, RCP, etc.)• File and folder Shares• Application protocols: SAP,
Oracle, SQL, Web, Email etc.• Desktop application such as
IM & Browsers
Malware Detection – agentless technologies to detect insecure code, Malware and Trojans across all systems
Agentless Integrity Monitoring – built-in database of each system’s components helps detect incidents/unwanted changes
Sensitive Data Detection – powerful search engine identifies data such as credit card, PIN and CVV numbers in files/databases
Flexible Reporting System – supports automation of processes including inventory and change management, compliance and IT performance management
XML-Based Integration API – supports creation of unified IS frameworks across systems including: Asset Management, Help Desk Ticketing, Risk Management, Patch Manage-ment, SIM/SIEM, IPS and WAF Penetration Testing, NAC/NAP
More than a thousand companies already rely on MaxPatrol to secure their systems. These customers range from SMEs to government departments, international banks and major telecom-munications companies. One of the biggest installations to date monitors security levels across the customer’s 8 subsidiaries, which operate in 26 countries. MaxPatrol continues to grow with the customer’s business, expanding into new territories in a rolling programme that has so far seen the deployment of 36 MaxPatrol components to control in excess of 100,000 nodes in the customer’s infrastructure.MaxPatrol is commonly used to:
• Manage security control and compli-ance processes within an integrated Global Security Operational Center • Audit IT and IS performance and
service quality achieved by internal teams as well as outsourced staff provided by third parties. • Provide managed security services for corporate clients as part of outsourcing/out-staffing business models • Provide penetration testing and security audits for external and internal auditors and regulators
For more information about how MaxPatrol brings value to our custom-ers, please see our case studies at www.ptsecurity.com/success
For more detail on MaxPatrol’s specifi-cations, please see our technical product description at www.ptsecurity.com/maxpatrol
4
MAXPATROL: BUSINESS BENEFITS MAXPATROL IN ACTION
MAXPATROL: KEY FEATURESMAXPATROL: KEY FEATURES MAXPATROL IN FIGURESMAXPATROL IN FIGURESThe number of checks for known vulnerabilities MaxPatrol is pre-configured to carry out. This increases daily as new vulnerabilities are identified by our research team and added to the MaxPatrol knowledge base
30,000+
The range of systems MaxPatrol is proven to work across
1,000+
The number of corporate customers already relying on MaxPatrol to enable their IT&IS processes
1,000+
The number of configuration parameters that MaxPatrol can detect across more than 70 different platforms and applications
5,000+
The array of pre-prepared compliance mapping rules with each deployment of MaxPatrol, linked to major IT and IS regulatory standards and frameworks
300+
VULNERABILITY & COMPLIANCE MANAGEMENT SYSTEM
VULNERABILITY & COMPLIANCEMANAGEMENT SYSTEM
Positive Technologies is at the cutting edge of IT Security. A specialist developer of IT Security products, Positive Technologies has over a decade of experience in detecting and managing vulnerabilities in IT systems. Positive Technologies has more than 200 employees at its offices and research centres in London and Moscow. Its technology partners include IBM, Oracle, Cisco, Microsoft and HP.
Positive Technologies’ innovation division, Positive Research, is one of the largest security research facilities in Europe. Our experts work alongside industry bodies, regulators and universities to advance knowledge in the field of information security and to apply this analysis to improving the company’s products and services. The centre carries out research, design and analytical works, threat and vulnerability analysis and error elimination.
Since 2004, Positive Research has helped global manufacturers including Micro-soft, Cisco, Google, Avaya, Citrix, VmWare and Trend Micro to eliminate hundreds of vulnerabilities and defects that threatened the safety of their systems.
ABOUT POSITIVE TECHNOLOGIES
POSITIVE TECHNOLOGIES – OUR EXPERIENCE, YOUR SECURITY
