 |
Forensics and Troubleshooting
Intelligent Switching makes it simple.
An intelligent switch ties together user identity, device, role, application, and destination, providing IT with a level of business context not possible with the legacy switch architecture. This business context dramatically improves tracking of all activity on the LAN, so IT gets better forensics, when they’re sifting through historical data, and simplified troubleshooting, with current activities displayed in easy-to-understand summary and detail views.
Summary Dashboards – by User, Role, or Application
All LANShield devices send tracking information to the ConSentry InSight Command Center, with provides both aggregated and detailed views of historical and real-time data. For example, this user-based view shows all activity for a given username.
| |
|
The LANShield platform shows you all your users on your LAN
|
click to enlarge |
|
This role-based view aggregates all resources a single role is accessing, enabling IT to formulate appropriate access control policies and detect anomalous behavior.
| |
|
From this roles view you can view users by role and set-up and conifgure polices for each role.
|
click to enlarge |
|
IT can even take a per-application view, to identify a problematic user running that application or to identify the users, roles, and destinations involved in that application.
| |
|
This shot details all applications that are on the network. From here you can see all users by application.
|
click to enlarge |
|
Drill-down Information for Detailed Forensics
When IT needs to track more detailed data around what a user was doing on the LAN or which users accessed a given server or file, for example, the ConSentry InSight Command Center also provides that information.
This screenshot, for example, highlights the detailed forensics associated with detailing an Instant message transaction from user Alice
| |
|
This shot details user Alice sending a ppt file to AIM user Bobcs on Aug 22, 2007 at 11:23am
|
click to enlarge |
|
Intelligent Switching – user and application control made simple.
ConSentry – Intelligent Switching
|
|
»
