Simplifying SIEM for resource-constrained IT organisations

"As IT departments experience ever-increasing pressure to secure their environments, they also face new threats and an uphill battle to acquire the resources necessary to mitigate them," said Chris LaPoint, group vice president of product management, SolarWinds. "Most IT Pros don't have the time to manually configure security monitoring or become experts in specific systems before implementation, so they need quick access to accurate, actionable data to better protect their environments and prevent security incidents. With enhanced usability that makes SIEM implementation, configuration and threat notification quick and seamless, SolarWinds LEM helps take some of the security weight off IT Pros' shoulders."

The new Configuration Wizard guides IT Pros through the implementation of SolarWinds LEM and provides simple steps that ensure correct configuration, allowing them to quickly address their security needs. The Configuration Wizard includes:
Guidance on basic settings including email configuration and access to Active Directory
Integration with Add Node Wizard, which simplifies adding devices and collecting data by walking IT Pros through all the necessary steps to collect log and event data from systems, applications and devices

With its new Rules Wizard, SolarWinds LEM takes the guesswork out of creating correlation rules by offering IT Pros an out-of-the-box list of categories and subcategories of rules that can be enabled en masse, including security, compliance, change management, operations, endpoint monitoring and more. The Rules Wizard also provides best practice information to ensure IT Pros can immediately identify and remediate threats based on an organization's needs.

SolarWinds LEM also features file integrity monitoring (FIM), helping IT Pros actively detect advanced persistent threats and insider abuse, and comply with numerous regulations such as PCI DSS, Sarbanes-Oxley and HIPAA. Additional FIM benefits include visibility into server and application change management and increased security with detection of zero-day malware.