t

1

Vulnerability Assessment and Remediation

 


eEye’s vulnerability assessment and remediation solution combines process and technology into a single, effective system, giving security and information technology professionals the power to schedule and perform vulnerability audits, create and enforce security policies, prioritize and schedule remediation activities, verify corrective actions, and effectively manage the entire threat mitigation process.

The volume of newly discovered vulnerabilities increases every day, compelling security professionals to reassess their approach to protecting corporate networks. According to the CERT Institute, 99% of network attacks leverage known vulnerabilities; hence, the opportunity exists to avoid the damage inflicted by these attacks – simply by taking proactive steps to eliminate the multitude of vulnerabilities confronting your enterprise. The challenge is not identifying the "fix" for a specific vulnerability, as those are provided by software vendors and prudent internal policies. The challenge is to define and implement a coordinated process to address the discovery, identification and management of these vulnerabilities in large, distributed and complex computing environments.

The effectiveness of targeted and automated network attacks such as the Sapphire SQL and MS Blaster worms, among others, has clearly demonstrated the inadequacy of most company's current vulnerability protection strategy. This inadequacy is driven by five primary issues:

  1. Lack of technology and tools to discover, assess and pinpoint vulnerabilities as well as security mis-configurations and policy violations
  2. Lack of commitment to an enterprise-wide process of addressing vulnerabilities
  3. Misalignment of priorities between security and IT departments
  4. Limited remediation scope focused solely on software patches
  5. Poor integration of security and IT technologies

 

 

2

Retina Enterprise Suite

 

The Retina Enterprise Suite leverages the integration of eEye's flagship product, Retina® Network Security Scanner, PC Magazine’s Editor’s Choice Award winner, REM™ Security Management Console, eEye's workflow-driven events management console, and Retina® Remediation Manager, an innovative solution that provides enterprise patch and configuration automation. The combination of these technologies delivers an intuitive management console for centralized discovery and assessment, extensive reporting of remediation activities including assignment of tasks, patch deployments and verification of completion. This result is a complete solution for enterprise security administrators who need to efficiently manage the entire vulnerability assessment and remediation process. To read more about specific products within this solution, click on the links below:

 

3

Retina Security Scanner

 

Retina®, PC Magazine Editor's Choice Award winner for vulnerability assessment, identifies known security vulnerabilities and assists in prioritizing threats for remediation. Featuring fast, accurate, and non-intrusive scanning and the industry's most comprehensive vulnerability database, users are able to secure their networks against even the most recent of discovered vulnerabilities. Users can also leverage Retina to enforce internal security policies and standards-based registry settings through custom policy audits. And, because the majority of Retina scan can be conducted without administrator rights, Retina is the easiest scanner to use, and the most cost-effective to deploy.

 

 

4

REM Security Management Console

 

The REM™ Security Management Console is a unified threat management solution that accurately assesses and improves a company's overall network security posture, helping security and IT groups work together more effectively. REM's threat management portal enables the rapid identification and prioritization of vulnerabilities, thus optimizing resources to focus on the most critical vulnerabilities. REM's advanced workflow capabilities also allow groups to collaborate in ongoing remediation efforts, thereby increasing operational efficiency.

 

5

Retina Remediation Manager

 

Retina® Remediation Manager is a fast, effective patch and configuration automation solution which facilitates efficient planning and execution of remediation activities. Enterprises that perform regular vulnerability assessments are frequently faced with the daunting task of remediation hundreds, if not thousands, of workstations and servers. Remediation Manager eliminates the burden of manually patching your systems and keeps your enterprise up-to-date, while saving valuable resources.