Homepage Attachmate newsroom

NetIQ advances change detection and user monitoring to reduce corporate data loss

Announcement posted by Attachmate 22 Apr 2009

 To help organisations protect critical systems, files and data, NetIQ Corporation has announced the NetIQ Change Guardian family of products. Previously an integrated feature set of NetIQ Security Manager, Change Guardian solutions are now available worldwide as individual offerings.

As a vendor agnostic product set, NetIQ Change Guardian completes major security information and event management (SIEM) solutions offered by both NetIQ and third parties. With enhanced real-time monitoring of file and privileged user activity, and powerful change detection features, NetIQ Change Guardian greatly reduces the risk of malicious activity and supports comprehensive data protection initiatives.

NetIQ’s regional director, Asia Pacific, Boris Ivancic, said that the number of high profile security incidents happening over seas has brought change detection and user monitoring into focus for local businesses. “The availability of NetIQ Change Guardian as a standalone product group is a brand new concept for us.  It’s a direct response to an increased concern from local customers about how best to manage threats from hackers and internal attacks. Mergers, acquisitions and layoffs are becoming more common in today’s economic situation, and many organisations are unsure how to best protect their data during these turbulent times.

“We’re offering a solution that can integrate with and supplement what is available from the industry’s leading SIEM solutions. It provides real-time change detection and reporting, so that security and compliance teams can detect changes that threaten data or vital infrastructure services as they occur.” said Mr Ivancic.

A failure to achieve comprehensive data protection is caused by insufficient visibility into system configuration changes, and improperly managed administrator access rights to key IT systems and applications. NetIQ Change Guardian detects what changes are made and by whom, and whether or not those changes are authorised. By integrating with SIEM software, this solution enables correlation of events and visibility into threats across the entire enterprise.

NetIQ Change Guardian offerings now include:
NetIQ Change Guardian for Group Policy – determines and documents all changes to Group Policy Objects to prevent modifications from adversely impacting security postures
NetIQ Change Guardian for Active Directory – assures changes to Active Directory are authorised, monitored, verified and audited
NetIQ Change Guardian for Windows – monitors user activity and changes across Windows environments to provide file integrity monitoring and reduce the risk of insider attack

Geoff Webb, senior manager of product marketing at NetIQ, noted that, “Traditional SIEM is just not enough to achieve comprehensive data protection, given the reality of today’s internal and external threats. Now, organisations can leverage NetIQ Change Guardian products to complement SIEM with much-needed privileged user activity monitoring and powerful change detection to significantly limit the risk of corporate data loss while continuing to improve the TCO of existing security investments.”
NetIQ Change Guardian solutions are currently available worldwide. For more details, visit www.netiq.com or call NetIQ at +61 3 9825 2300.