| Example 1: A Financial Institution
|
- Purchase Motive:
- Requires integrated analysis of 16 firewalls
- Requires immediate verification of logs and identification of problematic occurrence
- Establishment Segment
- Servers(UNIX servers) inside the DMZ segment
- Log quantity per day is 24GB
- Introduction Effect
- FireQuest did integrated analysis, created statistical reports per week/month/quarter/year, and grasped the efficiency of firewall.
- FireQuest analysed the problem occurrence point and immediately established a solution plan
- Purchase Motive:
- Requires effective firewall log analysis management
- Requires immediate identification of problem occurrence indication and cause for it
- Requires regular collection, analysis of raw logs
- Establishment Segment
- Servers(UNIX servers) inside the DMZ segment
- Introduction Effect
- Generated statistical reports on protocol usage and eliminated unused protocols
- Analysed increasing network traffic and helped to take measure for bearing network load
- Provided malicious user log information to the special cyber investigation unit
- Purchase Motive:
- Incorporate and manage several big firewalls
- Control the information leakage through persons employed inside the organisation
- Establishment Segment
- Servers(UNIX servers) inside the DMZ segment
- Introduction Effect
- FireQuest integrated and analysed the logs of various large firewalls, found the problem and made a security policy
- FireQuest analysed the Internet usage details of employees in the organization and reported the site connection details
| Example 4: H Regional Office
|
- Purchase Motive:
- Wants analysis for firewall performance and security logs
- Wants analysis of traffic through firewall
- Wants analysis and verification for hacking attempts
- Establishment Segment
- Servers(NT servers) inside the DMZ segment
- Log quantity per day is 4.5GB
- Introduction Effect
- Grasped the existing condition and reported on weekly/monthly/quarterly basis
- Grasped the usage of protocol per each day
- Discovered malicious user invasion traces through user statistics
|