Overview

The Kynetique Command Console is a unique software platform designed to easily mesh into your existing enterprise.  This will now allow you to easily develop rules-based signatures from a menu based tool and rule generator rather than dealing with command line information. With the Kynetique Command Console, you will be able to easily control hundreds or even thousands of sensors from one management platform.

DRILL DOWN - You have the ability to perform forensic analysis by drilling down on any network rule alert to inspect the data associated with the violation.  The complete packet regardless of size is available for your analysis.

NO REDUNDANCIES - Before you push a new rules set to your sensors, the Kynetique Command Console will compare rev-levels current rules being operated and make sure there are no errors or redundancies in the new rules set.  This eliminates error conditions and increases the integrity of your rules across the enterprise.

NAVIGATES FOR YOU - The Kynetique Command Console will search and find your sensors on the network, allowing

for one stop management of all sensorsfrom a single management and monitoring system.  If a sensor has yet tobe initiated, e.g. a Kynetique Application Platform running a popularopen source package, you can initialize it from the Kynetique Command Console.  No more digging into the network physically or via a command prompt.  It's all at your fingertips in the Consoles GUI.

ROLE MANAGEMENT - You now have the ability to manage and group your sensors in terms of roles. Sensors at the perimeter, in the CFO network, the operations networkand each business unit have the ability to be managed as a group in arole.  No longer do you need to make the same change to one sensor at atime in a specific role.

Signature Management

Before Kynetique Command Console, an engineer would have to download new rule sets,which come in one package and then search through the .rules files for newrules, manually transfer them to the individual sensors, append them to the.rules files and restart the sensor.  Although one sensor was not bad, it'sstill manually intensive and time consuming. Imagine having 6,12, or 24sensors?

Kynetique Command Console

solves those issues byproviding an intuitive interface to signature management.  You select whichsources you want to pull the new rule update from.

• automatically downloads the rules
• compares the rules with what is already installed and
• provides and easy interface to select new rules

Once selected, you simply save the changesand submit.  The console determines which rules to apply to which sensors basedon the policies applied.

Policy Based

Policy Management Tool 

The Policy management interface in Kynetique Command Console utilizes a role-basedmethod.   For instance, an organization may want to apply the same securitypolicy to all DMZ's at their sites but different security policies on internalnetworks or extranets.  By using roles, you need only one policy for DMZ's.  Usingthe template feature, you can create a master template of required rules toquickly build custom rule sets for individual sites or networks.

Policy Backup System 

Nothing is worse then finding out that your hard work waslost due to not having a backup.  Kynetique Command Console has a built inbackup system that provides the ability to backup and restore theconfigurations, policies, rules, files and alerts.  These can either be storedlocally or transferred off system to a central location.

Reporting Substance

The typical Top 10 reportstypically seen in IDS consoles are of little use!  What is missing is contextualinformation that makes sense. The Kynetique Command Console provides a robustreporting structure with contextual information to give your organizationuseful reports.  You won't spend valuable resources tracking down falsepositives that have no relation to your network.  In other words, if there is ascript kiddie who scans your network for Windows 2000 exploits and you onlyhave Windows 2003 or Windows XP machines, that scan won't be included if youselect to only display relevant data.

Alert Aggregation

Until now, not much attention has been given to alertaggregation. How do you want to see your alerts? Aggregation is importantespecially in larger organizations. It allows you to streamline and allocateresources. Whether you choose to aggregate events to different engineers byexpertise, department, work load or priority, Kynetique Command Console givesyou the flexibility.