eEye digital security is hoping that a new version of its REM Security Management Console and increasing demand for network access control and risk management software add up to big profits in 2006.
The Alisa Viejo, Calif., company announced REM Security Management Console Version 3.0 last week. The release is the third major update to the product but may be the first that offers the features and stability to warrant enterprisewide deployment, according to one eEye customer.
REM is a security management product that collects and correlates data from eEyes Blink host intrusion prevention and Retina vulnerability scanning products. REM allows network managers to view security events on machines across their networks from a Web interface.
Version 3.0 adds a feature that enables administrators to break down security risks by the asset type, geographic location, business unit or other factors. For example, a network administrator could choose to organize data from eEye vulnerability scans into those affecting just Web servers. Alternatively, an administrator could choose to look at just issues affecting systems in a geographic region such as North America or a particular office or department, such as finance, company officials said.
The new version of REM allows administrators to use system attributes to sort data from vulnerability and spyware scans, giving them overall risk ratings for specific systems, departments and so on.
The new asset tracking features are critical for the network security staff at Continental Airlines Inc., which has been evaluating REM 3.0 and plans to roll it out in the coming months, said Andre Gold, director of information security at the Houston-based company.
Continental tested earlier versions of REM and even used the products events server with an internally developed front end to deliver some of the same functionality as REM 3.0, Gold said. Despite the 3.0 label, the latest version of REM is really the first to offer the stability and features to justify an enterprisewide deployment at the airline, he said.
For example, the new version allows administrators to view asset-specific information from eEyes Retina scanners and security event data from the Blink host IPS (intrusion prevention system) scanners. Previous versions didnt match up data from the two products, which made it difficult to assess risk, he said.
eEye has also redesigned the REM database to better manage the reams of event and vulnerability data generated by enterprisewide deployments, Gold said.
REM Security Management Console 3.0 is available now. Prices start at $25,000 for a REM console.