gfi languard security event log monitor 5

LANguard Security Event Log Monitor is a network wide event log monitor that retrieves logs from all NT/2000 servers and workstations and immediately alerts the administrator of possible intrusions for immediate host based intrusion detection. Using the LANguard event viewer you can also create network wide reports and identify machines being targeted as well as local users trying to hack internal company information. Because LANguard analyses the system event logs, rather than sniffing network traffic like traditional IDS products do, LANguard S.E.L.M. is not impaired by switches, IP traffic encryption or high speed data transfer.

Event Log Explorer description
A free software for viewing, monitoring and analyzing events in the Event Log. Event Log Explorer is a free software for viewing, monitoring and analyzing events recorded in Security, System, Application and another logs of Microsoft Windows NT/2000/XP/2003/Vista operating systems.

Thanks to Event Log Explorer, monitoring and analysis of events recorded in Security, System, Application and other logs of Windows operating systems gets much faster and really effective.

Event Log Explorer helps you to quickly browse, find and report on problems, security warnings and all other events that are generated within Windows.

Thanks to Event Log Explorer, monitoring and analysis of events recorded in Security, System, Application and other logs of Windows operating systems gets much faster and really effective.

Here are some key features of "Event Log Explorer":

Multiple-document or tabbed-document user interface depending on user preferences

Event Log Explorer provides you with 2 user interface types. Multiple-document interface (MDI) allows you to open unlimited number of event logs and place them all inside the main window of Event Log Explorer. Tabbed-document interface (TDI) allows you to open unlimited number of event logs and features the best way of navigation between logs.

Favorites computers and their logs are grouped into a tree

With Event Log Explorer you can view event logs on different computers. For your convenience you can group your computers in a tree. Then you can simply select the desired event log from the desired computer , and it will be opened immediately.

Viewing event logs and event logs files

With Event Log Explorer you can open event logs as event log files. To open an event log file, just select File -> Open Log File.

Archiving event logs

Archiving event logs is very important task. Very large event logs affect system performance, but administrators must be ale to analyze past events. The appropriate solution is to limit the size of event logs, and backup event logs on regular basis. Event Log Explorer allows you to save opened event log as an event log file manually or automatically.

Event descriptions and binary data are in the log window

Unlike standard Event Viewer, Event Log Explorer allows you to view the description and binary data of each event without additional commands. All descriptions are displayed in the Event Description box of log window. You can close this box if you dont need to read event descriptions. You can also display event descriptions in the event list as a column.

Event list can be sorted by any column and in any direction

Event Log Explorer allows you to sort event list by any column - just click on the column header, and event list will be re-sorted immediately. If you click on the column twice - the event list will be resorted in the backward direction.

Advanced filtering by any criteria including event description text

You can easily filters events in the list by any criteria. The criteria are reusable - you can save them as a file and apply for another event logs.

Quick Filter feature allows you to filter event log in a couple of mouse clicks

It is very easy to filter event log by a single column value. Simply click right mouse button on a cell that will be considered as a filter criteria and you will be prompted to filter on this criteria. E.g. if you click in column "Type" on a cell "Information", you can set a quick filter on Type="Information" criteria.

Log loading options to pre-filter event logs

You can pre-filter event log when its opening. This will reduce memory consumption, increase performance and make log view clear.

Fast search by any criteria

With Event Log Explorer you can easily search for event that meets a certain criteria. Just use View ->Find command to start search. To find a next event that meets this criteria, please use View ->Find Next command.

Fast navigation with bookmarks

Bookmarks allow you to mark an event in Log View and then you can easily return to this event.

Compatibility with well-known event knowledgebases

You can get more information about event in the public event knowledgebases. Event Log Explorer supports EventID.net and Microsoft knowlegebases.

Sending Event Log to printer

Unlike standard Windows Event Viewer, Event Log Explorer can print event logs. Print options let you select from several styles of print.

Export log to different formats

You can export your event logs to other formats. At the time, Event Log Explorer supports export to HTML, tab-separated and Excel documents.


Note: Free for personal use only.

GFI LANguard Network Security Scanner (N.S.S.) is a complete patch management solution.

After it has scanned your network and determined missing patches and service packs - both in the operating system (OS) and in Microsoft applications - GFI LANguard N.S.S. can deploy those service packs and patches network-wide, without user intervention.

GFI LANguard N.S.S. is the ideal companion to Microsoft SUS: Use GFI LANguard NSS to deploy service packs, Microsoft Office patches and patch reporting; and use Microsoft SUS for operating system patches.GFI LANguard Network Security Scanner is a patch management solution.

GFI LANguard supports service pack and application patching for English, Spanish, Italian, French and German versions of Windows NT/2000/2003/XP.

For those who do not want to use Microsoft SUS, GFI LANguard N.S.S. can deploy patches for English versions of Windows NT/2000/2003/XP. English-version Microsoft Exchange Server, Microsoft SQL Server and Microsoft ISA Server patches can also be deployed.

GFI LANguard N.S.S. includes a fast TCP/IP and UDP port-scanning engine, allowing you to scan your network for unnecessary open ports. GFI LANguard N.S.S. identifies well-known services (such as www/FTP/telnet/SMTP... ) and also supports "banner grabbing", that is, it queries the port for an application name.

Limitations:

· FULL version that becomes a limited freeware version after 30 days, unless you enter a 60-day eval key or the purchased license key.

GFI LANguard Network Security Scanner (N.S.S.) is a complete network vulnerability management solution that allows you to scan, detect, assess and remediate any security vulnerabilities on your network. This award-winning solution scans the entire network, performs over 15,000 vulnerability assessments and identifies all possible security threats. The complete and thorough vulnerability assessment database includes standards such as OVAL (2,000+ checks) and SANS Top 20. GFI LANguard N.S.S. gives you the capability to perform multi-platform scans (Windows, Mac OS, Linux) across all environments and to analyze your network s security health from a single source of data. This ensures that you are able to identify and remediate any threats in good time. When a scan is complete, GFI LANguard N.S.S. gives you all the functionality and tools you need to effectively install and manage patches on all machines across different operating system platforms and in 38 languages. GFI LANguard also allows auto-downloads of missing patches as well as patch roll-back. Custom software can also be deployed. This results in a consistently configured environment that is secure against all vulnerabilities. All this is achieved through a single console with extensive reporting functionality, effectively addressing the three pillars of vulnerability management: security scanning, patch management and network auditing. Voted the best commercial network security scanner by users of Nmap for two years running, and named the winner in the Patch Management category in TechTarget s 2006 Products of the Year awards, GFI LANguard N.S.S. is the most complete vulnerability management solution in one convenient integrated package. GFI LANguard N.S.S. 8 is an essential, cost-effective solution for businesses to safeguard their systems and networks from hacker attacks and security breaches.

Event Log Extension provides an ability to monitor Windows NT/2000/XP Application, Security, System and other event logs.

The notifications about events can be dispatched via LAN, email, SMS and ICQ (via e-mail gates).

The Event log extension supports events filtering by log type (Application, Security, System, etc.), type of event (Error, Warning, Information, etc.), selection by EVENTID, SOURCE, CATEGORY.

Event Log Extension can execute external programs using data from events as a command line parameters.

GFI LANguard System Integrity Monitor description
utility that provides intrusion detection by checking whether files have been changed, added or deleted on a Win 2k/XP system GFI LANguard System Integrity Monitor (S.I.M.) is a utility that provides intrusion detection by checking whether files have been changed, added or deleted on a Windows 2000/XP system.

If this happens, it alerts the administrator by email. Because hackers need to change certain system files to gain access, this FREEWARE utility provides a great means to identify any servers that are open to attack.

LANguard Network Scanner is a freeware security & port scanner to audit your network security. It scans entire networks and provides NETBIOS information for each computer such as hostname, shares, logged on user name.

It does OS detection, password strength testing, detects registry issues and more. Reports are outputted in HTML.

Automatically detect security vulnerabilities on your network
GFI LANguard Network Security Scanner (N.S.S.) checks your network for all potential methods that a hacker might use to attack it.

By analyzing the operating system and the applications running on your network, GFI LANguard N.S.S. identifies possible security holes. In other words, it plays the devils advocate and alerts you to weaknesses before a hacker can find them, enabling you to deal with these issues before a hacker can exploit them.

Provides in-depth information about all machines/devices
GFI LANguard N.S.S. scans your entire network, IP by IP, and provides information such as service pack level of the machine, missing security patches, open shares, open ports, services/applications active on the computer, key registry entries, weak passwords, users and groups, and more.

Scan results can easily be analyzed using filters and reports, enabling you to proactively secure your network - for example, by shutting down unnecessary ports, closing shares, installing service packs and hotfixes, etc.

Patch management
GFI LANguard N.S.S. is also a complete patch management solution. After it has scanned your network and determined missing patches and service packs - both in the operating system (OS) and in the applications - you can use GFI LANguard N.S.S. to deploy those service packs and patches network-wide. It can also deploy custom software network-wide

Trial - 30 days

Note : The scanning features of this product are FREE for non commercial use. Commercial users can buy the full version and also receive extra features.

GFI LANguard System Integrity Monitor (S.I.M.) is a utility that provides intrusion detection by checking whether files have been changed, added or deleted on a Windows 2000/XP system. If this happens, it alerts the administrator by email. Because hackers need to change certain system files to gain access, this FREEWARE utility provides a great means to identify any servers that are open to attack.

Ascella Log Monitor monitors the Windows event logs at real-time for any activity that matches the specified rules. It supports all types of Windows event logs:
· Application log
· Security log
· System log
· File replication log
· DNS server log
· Directory log


Ascella Log Monitor reports about matches by notification system. The types of notifications are:
· Network pop-up messages compatible with Windows Messaging service
· Ascella Log Monitor sends email notifications via any SMTP server
· SMS/Pager/ICQ address notifications (via email gates)