NetIQ announces new versions of SIEM and Change Guardian

NetIQ has announced the latest versions of its NetIQ Sentinel Security Information and Event Management (SIEM) and NetIQ Change Guardian privileged user activity monitoring solutions.

Now, customers using NetIQ Sentinel 7.2 will benefit from new threat intelligence feeds that help customers protect their networks and sensitive data from today’s most widely used botnets, including SpyEye and Zeus. Also new in NetIQ Sentinel 7.2 is greater NetFlow traffic analysis to help customers quickly detect malware, bad actors and investigate suspicious network traffic, the company said.

New features in Change Guardian 4.1 offer customers deeper integration with Active Directory (AD) identity stores and expanded file integrity monitoring (FIM) capabilities, allowing IT teams to quickly detect threats and respond to audits faster and at a lower cost of ownership.

“NetIQ Sentinel and NetIQ Change Guardian collectively monitor the people, identities, accounts and interactions with data that ultimately predict a threat or identify a breach,” said Renee Bradshaw, senior solution manager, NetIQ. “This is foundational to an Identity-Powered Security strategy. By integrating identity data to identify connections between privileged users and potentially suspicious behaviours, these solutions help security organisations cut through event noise and avoid fighting a battle on the last lines of defense - at the data level - when sensitive company data has most likely already been compromised or stolen.”