Other product variants may be available, please contact us or request a call back if you cannot see what you are looking for.

Product Information

GFI EventsManager automatically collects, manages and identifies infrastructure problems and events as they happen. With GFI EventsManager you get powerful event monitoring capabilities that can enable you to increase network uptime and more easily identify problems. It supports a wide range of events types including W3C, Windows events, SQL Server audit events, Oracle audit events, Syslog and SNMP traps generated by firewalls, servers, routers, switches, phone systems, PCs and custom devices. Plus GFI EventsManager helps you meet legal and regulatory compliance with support for SOX, PCI DSS, Code of Connection and HIPAA.

Documents & Downloads

Features

GFI EventsManager helps you to:

• Gather information from all supported devices and log types at a high level of granularity and depth
• Obtain a detailed view of what is happening across various environments thanks to the variety of log types which are supported
• Track and report on Oracle and SQL server activities such as alteration of DB tables, attempts to access data without necessary privileges, etc.
• Provide reliable data sources for forensic investigations.

GFI EventsManager for network security

GFI EventsManager acts as a host-based intrusion detection system by analysing security events in real time. This way you can detect security incidents and analyse them in detail to find out who is responsible for them.

GFI EventsManager for system health monitoring

Using GFI EventsManager you can proactively monitor your mission-critical network devices and servers. You can monitor firewalls, sensors, routers and the events generated by Microsoft ISA Server, SharePoint, Exchange Server, SQL Server, and IIS, and prevent network disasters from occurring. For example, you can monitor email queues, SMTP gateways, MAPI availability, bad hard disk blocks, disk space and more.

GFI EventsManager for regulatory compliance

GFI EventsManager is an aid to meet the log retention and log reviewing requirements of regulatory bodies and acts including: Basel II, PCI Data Security Standard, Sarbanes-Oxley Act, Gramm-Leach-Billey Act, HIPAA, FISMA, USA Patriot Act, Turnbull Guidance 1999, UK Data Protection Act, EU DPD.

GFI EventsManager for forensic investigation

Event logs are a reference point when something goes wrong and provide a history of events that is often required when you need to carry out forensic investigations. GFI EventsManager provides a timely in-house forensic investigation of event logs – freeing you of expensive outsourced consultancy and audit costs.

Deeper granular control of events

GFI EventsManager helps you monitor a wider range of systems and devices through the centralised logging and analysis of various log types including Windows events, Syslog, W3C, and SNMP traps that are generated by network resources. Administrators can gather information from Windows machines and third-party devices at a greater level of granularity and also process information at extended tags level and base the decision on what to do with that information on the spot, without further information management.

Analysis of event logs including SNMP Traps, Windows event logs, SQL Server and Oracle audit logs, W3C logs and Syslog

As a network administrator, you have experienced the cryptic and voluminous logs that make log analysis a daunting process. GFI EventsManager is a log processing solution that provides network-wide control and management of Windows event logs, W3C logs, SQL Server and Oracle audit logs and Syslog events generated by your network sources. GFI EventsManager supports Simple Network Management Protocol, the language spoken by low level devices such as routers, sensors, firewalls, etc. Through SNMP, users can now monitor a whole range of hardware devices on their infrastructure with the ability to report on the health and operational status of each device.

Licensing

Licensing

GFI EventsManager is licensed by nodes. All devices which generate a log are considered to be a node. Workstation nodes have a separate, lower, price than other nodes on the network. The first year of support is included in the product license price and support renewals are available in 1, 2 or 3 year terms. Renewal of the Software Maintenance Agreement (SMA) is recommended and includes updates to new releases, patches, web chat, email support, phone support and access to GFI's electronic knowledge base and forums.

Upgrades

A product version upgrade is required when you want a new version of the product and do not currently have SMA. There is a 30 day grace period from date of SMA expiration before a product version upgrade is required.

Returns policy

There is a no-returns policy on all GFI products.

System Req.

Hardware

• Processor: 2.5 GHz or higher
• RAM: 2048 MB
• Hard disk: 10 GB of available space

Supported Operating Systems

• Windows Server 2008 - Standard or Enterprise (x86 or x64)
• Windows Server 2008 R2 - Enterprise
• Windows Server 2003 (SP2) - Standard or Enterprise (x86 or x64)
• Windows 2000 (SP4) - Server or Advanced Server
• Windows 7 - Enterprise, Professional or Ultimate (x86 or x64)
• Windows Vista - Enterprise, Business or Ultimate (x86 or x64)
• Windows XP - Professional (x86 or x64)
• Windows SBS 2008
• Windows SBS 2003

Other components

• .NET framework 2.0 Service Pack 2 or later.
• Microsoft Data Access Components (MDAC) 2.8 or later
• (Optional) A mail server (If email alerting is configured)
• Microsoft SQL Server 2005 or later (including Microsoft SQL Express edition) for events archiving.

Software requirements - Scanned machine(s)

• For Microsoft Windows event log scanning: Remote registry service must be enabled and source folders must be accessible via Windows shares.
• W3C log scanning: The source folders must be accessible via Windows shares.
• Syslog and SNMP Traps: Sources/senders must be configured to send messages to the computer/IP address where GFI EventsManager is installed.
• Microsoft Windows Vista or later scanning: GFI EventsManager must be installed on a system running Microsoft Windows Vista or later.