The EventSentry from Netikus brings to the table a plethora of functionality to ensure system security. It is shipped at a more than affordable price point. The product not only provides log monitoring, but also serves as a complete system monitoring suite. The unified threat management software ships with a price depending on the number of licenses per host, as well as other hardware integration for environment monitoring (i.e. temperature sensor, humidity sensor, smoke sensor). The in-depth functionality and limitless capabilities for complete system monitoring makes EventSentry an extremely competitive product when combined with such an attractive price point.
The item was extremely easy to set up. The software, along with all necessary documentation for installation, was sent to us on a USB stick. We opened the drive and ran the setup application using the native installation wizard. After a few clicks and determining the necessary packages for installation, the installation finished and initial setup was done. We then pointed the software to the license key and were then ready for configuration. The initial setup and configuration of EventSentry in its entirety took less than 30 minutes, allowing us to jump right into testing.
While the product offers a variety of complete system solutions, its backbone is its real-time event log and SIEM monitoring component. The software also easily integrates with external hardware that is geared to monitor the environment of your system and will generate alerts for dangerous situations that may arise (increase in temperature, humidity, etc.). A very neat aspect to EventSentry is its thresholding functionality, which allows users to customize the threshold for what may be a network anomaly (such as the amount of failed login attempts considered normal). EventSentry makes use of a central database to consolidate and store logs with the following supported databases: PostgreSQL 9x, MS SQL, MySQL and Oracle. Reports are highly customizable and can easily be filtered, exported (HTML, PDF, CSV) and generated. Scheduled reporting allows for an up-to-date and readily accessible documentation of information security content.
The tool shipped with all necessary documentation to get users from start to finish. The setup, overview and help guides provided us with an easy walkthrough for setup and configuration as well as navigation through the product once installation was finished.
The EventSentry is a powerful tool that can be used to monitor and ensure security for the entirety of one's systems while the admin is away from them. Overall, we were extremely impressed with EventSentry's data collection and alerting system, as well as the customizable dashboard used to display gathered data. For the price point and software functionality, EventSentry is well worth examining. - JV
