Installation of the eTrust application was very straightforward. Initial configuration was equally easy, then the operator can get onto applying their required policies and rule sets according to their company's security needs and policies. If the necessary included foundation policies do not fit the task, then the administrator can modify them or even create their own from scratch.The product can be deployed in several ways: either standalone for smaller networks or using several remote data probes all reporting back to a central database server. The central server is where the administrator can connect to control the remote probes as well as view the collected data.
One of the most impressive features of this application -- and one that some may take for granted -- is its user interface. What could potentially be an overwhelming array of tools and information -- both captured and real-time -- is handled and displayed with an amazing level of clarity.
The system can also be configured to block unwanted network traffic, which can be of benefit to organisations with strict security policies. Online regular updates of standard rule sets and policies can be applied at the administrator's discretion to keep the system up to date. The rules and policies that are included or can be downloaded are very thorough. They include very detailed descriptions in plain, easy-to-understand English, even to the point of providing Web links to appropriate bug-traqs and sites that contain further information on potential threats and how to deal with them. There is even the option to run the included antivirus (AV) engine, complete with automatic updates, if your company needs further levels of antivirus protection. As far as we're concerned, the more protection implemented in the network the better.
Overall this is a very refined solution providing high levels of transparent intrustion detection, URL blocking, and session monitoring/logging combined with an integrated AV engine and automatic updates. If a software solution is in your sights then the Computer Associates eTrust Intrusion Detection product is worthy of evaluation.
 |
|
|
|||
| |||||
| Product | Computer Associates eTRUST Intrusion Detection 3.0 |
| Price | AU$3639 for 125 sessions |
| Vendor | Computer Associates |
| Phone | 02 9937 0500 |
| Web | www.ca.com |
| Interoperability |
|
| Supports Microsoft Windows only. | |
| Futureproofing |  |
| A very scalable solution. | |
| ROI |  ½ |
| Reasonably priced for its features. | |
| Service |  ½ |
| 12 months service included. | |
| Rating |  ½ |
