You need a spreadsheet option and that's not available. This means you have to do a lot of analysis on the canned reporting. There's also only one output option and that's CML, which is kind of useless for analysis. It gives you the information that you're looking for, but it also gives you a set amount of information and you can't specify what you want or drill it down to the signal to get past the extra noise that comes through. Those things are built in and there are no options for configuration of any kind. It would be really awesome to have configurability of the canned reports. You can also block off all USB inputs, so nothing can connect to it physically. We call it bricking. The workstation becomes completely useless from the outside. In terms of the possibility of an outbreak, it really helps being able to lock down a terminal instantly with little advance preparation. There's a feature called location awareness that allows us to immediately switch a terminal into lockdown mode so that it can only communicate with the endpoint protection servers, so nothing can get in or out. Network intrusions are a really big threat since we work on a dark network, so the network product is phenomenal. It's that tie-in integrated with the intrusion prevention tie-in on the firewall side that makes the solution very effective. This allows you to have a very sophisticated set of network rules and throw them up pretty quickly, while keeping them all separate. One of the features gives you the ability to do destination source routing and mix local and remote routing. Some of the automated features, in terms of firewall set up, Smart DNS and so forth, save you a lot of time because you don't have to create basic firewall entries but everything is covered and secure.
They are not as extensive as I would like, but I do appreciate the ability to connect to the backend and query it directly to get information in a format that I would prefer. The monitoring and reporting features are pretty awesome.
0 kommentar(er)
