The Express Way to Device Management

Configuring security devices is one of the most basic and time-consuming aspects of setting up a protection perimeter around IT assets.

Configuring security devices is one of the most basic and time-consuming aspects of setting up a protection perimeter around IT assets. Organizations that rely on NetScreen Technologies Inc.s hardware, including firewalls and IDSes, should check out versions 3.0 of Global Pro Express and Global Pro.

In eWeek Labs tests, Global Pro Express reduced the time needed to configure our NetScreen devices from hours to minutes, while virtually wiping out the chance that configuration errors would leave a security exposure. Version 3.0 also includes enhancements for the real-time monitor component that allowed us to view performance statistics for groups of NetScreen devices and VPNs (virtual private networks).

The biggest drawbacks of Global Pro Express and Global Pro (Global Pro Express Internet service provider-oriented sibling based on the same code) are their high prices and NetScreen-only focus. Global Pro Express starts at $5,995 for 25 devices and ranges to $14,995 for 100. Global Pro, which includes reporting features, starts at $19,995 for 100 devices and up to $49,995 for 1,000. Both products are expected to ship this week.

Global Pro isnt unique in the security space—Cisco Systems Inc. offers Cisco Secure Policy Manager, which does the same thing for the companys hardware. Check Point Software Technologies Ltd.s Provider-1 performs similar tasks and can also interact with OPSEC (Open Platform for Security)-compliant products.

In tests, Global Pro 3.0 showed that it has caught up with these other vendors in one very important capability. For the first time, we could define a security policy and then distribute the policy to any number of NetScreen devices.