Monitoring Tools

[Alex Ferreira]

Greetings To All..

I have a test machine and have decided to take a few challenges on the Security side of things.

1) What wonderful tools would you recommend? Is there a tool similar to tty watcher or I.P watcher which records when someone logs into your machine, in real time?

Any info on this would be greatly appreciated as security is all to new to me.

Thanks heaps.

Alex.

ps : we use hpux 11i

[Naveej.K.A · Accepted solution]

hi alex,

worth to have a look at this webpage

http://www.cert.org/tech_tips/security_tools.html

regds
Naveej

[Joseph Loo]

hi,

i think u are looking at IDS (Intrusion Detection System?

take a look at this:

http://www.software.hp.com/portal/swdepot/displayProductInfo.do?productNumber=J5083AA

regards.

[Alex Ferreira]

Thank you heaps for your replies.

Alex.

[Sridhar Bhaskarla]

HI,

Quite a few security tools.

1. Default Auditing for auditing the events and system calls. Free but you need disk space. IDS/9000 also comes free. Look at software.hp.com.

2. Process Accounting for the system usage and charge back to the users.

3. Bastille - Security configuration tool. software.hp.com is the home for it.

If you are willing to pay $$, then you can buy softwares like Semantic eSM, eTrust Access Control, Powerbroker etc.,

If you looking for something to track the user activity, Auditing/IDS9000 would be a good choice.

-Sri

[Ted Buis]

THE web page for 11i Security.
http://www.hp.com/products1/unix/operating/security/index.html#system

[Hemanth Gurunath Basrur]

Hello Alex,

Also, refer to the foll. links for more information:

http://h21007.www2.hp.com/dev/products/topic/1,2606,10010,00.html

http://www.hp.com/products1/unix/operating/hot_topic_security.html

HTH.

Regards,
Hemanth

[R. Sri Ram Kishore_1]

Hi Alex,

You might also be interested in the System Healthcheck product. System Healthcheck (SHC) is a suite of tools that assesses the health of your computing environment by identifying security, performance and configuration problems before they can impact your critical operations.

You can download the product from
http://www.software.hp.com/portal/swdepot/displayProductInfo.do?productNumber=SHCBASE01

Apart from this, Bastile and HIDS are two great products.

To find out more about the security offerings of HP, refer to www.hp.com/products1/unix/operating/security/

HTH,
Sri Ram