When Chad Clement joined worldwide office furniture maker Haworth 18 months ago, he discovered the company needed to get a handle on network security.
Part of the problem was that Haworth didn't have an accurate inventory of the 12,000 devices on the network, which spans 80 sites worldwide, and that even with configuration management tools in place, some devices didn't meet corporate configuration standards.
As the company's new information security manager, Clement also wanted to deploy an intrusion detection system (IDS) so he would know when the company's valuable data-center assets were being compromised.
A data-security assessment commissioned before he got there found cracks in the company's defenses, including endpoint integrity. "We wanted to make sure that all the hosts in our environment belonged in our environment, as well as had a standardized configuration on them - that the antivirus was our standard antivirus and that it was up to date," Clement says.
The company already had Shavlik NetChk management and configuration software for servers and Symantec's Altiris client management for desktops, but they didn't catch everything. "Machines got missed," he says. "A lot of times it was that the agent wasn't running on them to inform users that they needed to get their updates."
Also in use on the network were Qualys vulnerability management and BMC Remedy service management software, and he thought he could make better use of them as well.
The security-assessment consultant had used ForeScout's CounterACT NAC gear to help discover devices on the Haworth network for its report. Clement says that capability plus its IDS features and the ability to assess compliance with corporate endpoint configuration standards interested him in the ForeScout appliance.
He also considered StillSecure, but after trying out a simulation of it online he decided he liked the ForeScout interface better and the visibility that it gave him.
The fact that the CounterACT platform integrates with the BMC Remedy service-management software influenced him, too. The firm uses BMC Remedy as a way to track trouble tickets, and CounterACT can work with it to automatically open tickets when endpoints are found out of compliance with corporate configuration standards.
"But the goal with the Remedy plug-in is, when they're out of compliance, automatically create a Remedy ticket to have the issue resolved," he says. That integration is on hold at the moment, though, because the company is upgrading its Remedy deployment.
Latest on Management Software
- In pictures: 10 free (and legal) ways to bypass Net filtering
- HP updates Network Mode Manager
- Aruba adds support for wired networks to management tool
- Unisys service uses the cloud to manage mobile devices
- CA buys NetQoS for $200M
- ConSentry Networks goes out of business
- NYSE shrinks time measurement to nanoseconds
- InfoExpress latest NAC vendor to push services
- ForeScout doubles NAC management reach
- Nokia Siemens opens network management center in India
Networking Essentials
- More doubts surface over enforceability of ACMA's blacklist
- Nortel files for bankruptcy
- Gen-Yers will use social networks to bypass Internet filter, critic says
- Efficiency drive moves to networks
- NEC's ExpEther extends PCI Express over Ethernet
- Researchers caution against TCP/IP weakness
- 10G Ethernet: can copper cut the mustard?
- 25 network research projects you should know about
- Big changes ahead for the Internet, says Vint Cerf
- Cisco routers out, Juniper gear in at Amazingmail.com
- WebSphere Solution Design (S20) - CBD, contract role3/09/2010
Other
I.T. & T
WebSphere Solution Design (S20) - CBD, contract role - Solution Architect - Web Application Architecture Project!3/09/2010
Other
I.T. & T
Solution Architect to provide strategic and operational consulting for the end-to-end Web Application System project! Experienced with J2EE or .NET?! - Principal Consultant - ITIL2/09/2010
Other
I.T. & T
Excellent opportunity for an experienced ITIL Principal Consultant to join an innovative leading IT Service management consultancy. Attractive packag - Mainframe Developer - COBOL - 12 Month Contract2/09/2010
Other
I.T. & T
Mainframe Developer - COBOL - 12 Month Contract - Business Systems Analyst2/09/2010
Other
I.T. & T
Perm CBD based role for an experienced Business Systems Analyst - Senior SAP Project Manager2/09/2010
Other
I.T. & T
Senior SAP Project Manager - SAP FICO Consultant - 6 week contract - West Sydney2/09/2010
Other
I.T. & T
SAP FICO Consultant - 6 week contract - West Sydney
TechWorld Blogs
Recent blog posts
- Windows Phone 7: how big can it get?
- NBN gets a turn at political football
- Internet filter gets caught up in politics
- TechWorld Forums goes live
- Selective sourcing the hybrid of cloud services
- Social networks catch more business attention
- RIP Kin
- Telstra’s copper and NBN’s fibre: will the two ends meet?
- RIP Windows 2000, XP lives on
- Does the world need another iPhone? Why not
Recent comments
- java development
13 hours 1 min ago - When mine called they
13 hours 45 min ago - 3D TV cannot fall - no way! Why?
16 hours 58 min ago - Thanks for taking the time to
1 day 5 hours ago - Windows scam
1 day 12 hours ago - My only anti fraud method is
2 days 7 hours ago - Private Cloud Taxonomies
2 days 7 hours ago - ...however...
2 days 16 hours ago - This Guy
2 days 16 hours ago - Glasses Free technology
2 days 17 hours ago - FOSS community
3 days 36 min ago - i have dv6000 with nvidia
3 days 2 hours ago - i have dv6000 and suddenly
3 days 2 hours ago - This is an awesome comment.
3 days 5 hours ago - Real Estate
3 days 7 hours ago - Scam - eventvwr scammers
3 days 12 hours ago - Well I never...
5 days 2 hours ago - Too bad Microsoft was mentioned
5 days 4 hours ago - Phone card is a better option to make calls at a lower rate
5 days 9 hours ago - In other words: "Developers,
5 days 14 hours ago










Comments
Post new comment