RSA, The Security Division of EMC (NYSE: EMC), today announced it has integrated the RSA enVision security information and event management (SIEM) solution with the Cisco Mobility Services Engine (MSE) platform.
This integration can help organisations to enhance IT operations, enforce security policy and accelerate response to security threats by providing IT professionals with actionable event information that is designed to include the real-time, physical location of users, hosts and devices connected to wired and wireless networks.
"With today's increasingly mobile workforce, keeping data safe can be a challenge. Knowing end-user location is a critical piece of information for determining security policy and has been a missing component in many SIEM solutions," says Andrew Braunberg, Research Director, Current Analysis. "The ability to set consistent and centralised security policy across mobile services is further enabled with the inclusion of location data."
Improve Wireless Policies
Pulling data from the Cisco Mobility Services Engine, the RSA enVision platform is engineered to provide customers with data on the physical location of stationary and mobile users and how they are using computing and network resources inside and outside the workplace. This means that IT professionals can formulate wireless policies that properly reflect business requirements and avoid putting in place controls that impede legitimate business traffic.
Reducing Security Risk -- Driving Security Efficiency
When integrated with the Cisco Mobility Services Engine, the RSA enVision platform allows customers to shorten the time-to-resolution for security investigations by providing the physical location of users and hosts along with the security alert. This can help IT security teams identify and respond to threats faster with even more targeted information that includes physical location.
Providing the physical location to pinpoint security incidents eliminates manual steps cross-referencing IT assets with threat data. The ability to prioritise different events quickly and how they relate to each other through a single view cuts os overall costs and enhances security operations.
RSA's enVision platform is designed to capture thousands to millions of event and audit log data entries from hundreds to thousands of network, security, host, application and storage devices within the enterprise and quickly transforms this information into valuable intelligence which security and IT professionals can use to pinpoint potential problems and make informed decisions to help reduce overall security risk. From a security operations perspective, this information can be used to create a closed-loop incident handling process that starts with real-time alerting of security threats and policy violations.
"More than 1700 customers worldwide use RSA enVision SIEM to enhance security operations, streamline compliance and optimise network operations. This integration with the Cisco Mobility Services Engine allows us to offer customers a smarter, more powerful way to evaluate risk and further enhance security," said Chris Young, Senior Vice President of Products at RSA, The Security Division of EMC. "Alongside our parent company EMC, we look forward to continuing this kind of inventive collaboration with Cisco, by combining our products to create innovative solutions designed to help protect our customers while helping fortify the IT security ecosystem against a constantly changing threat landscape."
Cisco and EMC have a long-standing strategic alliance, combining the strength of two global industry leaders in networking and storage solutions and management. The alliance is focused on helping customers consolidate, virtualise and automate their data centres to provide improved business responsiveness, increased efficiency, ease of management, protection and security.
The RSA enVision and Cisco Mobility Services Engine integration is generally available worldwide now via the RSA enVision platform.