if ur entity has the budget
look into either palo alto networks firewalls
or loglogic

On May 3, 2012, at 10:56 AM, "David Gillett" <gillettdavid (at) fhda (dot) edu [email concealed]> wrote:

> Back when I was using NetScreen firewalls, before they were absorbed into
> Juniper, I got their "centralized management" tool, and was quite
> disappointed. It was handy to have one tool for administering all of the
> firewalls in our network, but it didn't really give me anything that I
> wouldn't have today with a browser window with tabs for each device.
> To really leverage centralization, you want to be able to do things like
> create a policy that can be deployed to multiple locations for consistency.
> Make sure the tool you choose offers you that kind of leverage.
>
> David Gillett, CISSP CCNP
>
> -----Original Message-----
> From: Daniel Gil [mailto:the900 (at) gmail (dot) com [email concealed]]
> Sent: Thursday, May 03, 2012 03:31
> To: security-basics (at) securityfocus (dot) com [email concealed]
> Subject: Centralized firewall management and log analysis tools
>
> Hi list!
>
> Recently I've been tasked with designing a solution for a company that has
> multiple offices, each with a database server and firewall, connected to the
> central headquarters through vpn. They administer each of these offices
> individually and would like a centralized server for firewall
> administration, log analysis and possibly IDS/vpn administration.
>
> I've been thinking about splunk+snort+a firewall that provides centralized
> management. Is there a better set of tools for the job? Or even better, a
> single tool that integrates all features?
>
> I'd love to hear from you people with experience in implementing similar
> solutions which tools worked best for you.
>
> Best regards,
> Dan
>
> ------------------------------------------------------------------------

> Securing Apache Web Server with thawte Digital Certificate In this guide we
> examine the importance of Apache-SSL and who needs an SSL certificate. We
> look at how SSL works, how it benefits your company and how your customers
> can tell if a site is secure. You will find out how to test, purchase,
> install and use a thawte Digital Certificate on your Apache web server.
> Throughout, best practices for set-up are highlighted to help you ensure
> efficient ongoing management of your encryption keys and digital
> certificates.
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442
f727
> d1
> ------------------------------------------------------------------------

>
>
> ------------------------------------------------------------------------

> Securing Apache Web Server with thawte Digital Certificate
> In this guide we examine the importance of Apache-SSL and who needs an SSL certificate. We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442
f727d1
> ------------------------------------------------------------------------

>

------------------------------------------------------------------------

Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate. We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442
f727d1
------------------------------------------------------------------------

[ reply ]